5
votes

**please note, I've changed the question in response to the suspicion that this site is dubious.*

I found this today - https://www.testexchangeconnectivity.com/

Pretty nifty! (or maybe not?)

There's a post about this site on a site called msexchangeteam.com.

They claim to be the "official blog of the Microsoft Exchange Team".

There's also a facebook group for this tool here.

I used the testexchangeconnectivity tool today - perhaps this was foolish.

5
  • I vote to close this. At the very least that site is a bit suspect. Jul 16, 2009 at 2:19
  • @John Gardeniers - Although it appears suspicious at first, all official tools point to this being a legitimate site (such as whois listing Microsoft as the registering party).
    – DWilliams
    Jul 16, 2009 at 2:27
  • Indeed. DNS hosted by msft.net, and google doesn't know many places that do link to this site, let alone reputable ones.
    – jldugger
    Jul 16, 2009 at 2:27
  • msexchangeteam.com/archive/2009/03/25/450908.aspx Does MS not understand the implications of handing out authentication? Sometimes, there's a reason to write a windows app over a webapp.
    – jldugger
    Jul 16, 2009 at 2:31
  • As mhud said, I think you may have dodged a bullet. It looks like it is a legit Microsoft tool, but very badly branded and presented. I think this could be a lesson to everyone though, because a smart phisher could do something very similar. Jul 16, 2009 at 4:51

5 Answers 5

3
votes

As the updated question says, there's a post about this on "You had me at EHLO," so I guess it's official:

Announcing the release of Exchange Server Remote Connectivity Analyzer

2
votes

Ummm, are you 100% sure? I'm not sure if I'm going to be giving out my entire exchange username and password that it asks for. Maybe I'm paranoid but I don't 100% trust it.

6
  • Yeah, it seems a little fishy to me. I don't see anything on that site that makes me confident that it is indeed Microsoft doing this. It seems like if they wanted users to trust that their credentials were safe they would at least make the site part of the Microsoft domain (especially for a Beta).
    – DWilliams
    Jul 16, 2009 at 2:11
  • And I don't see any references on microsoft.com to the website either. But that said, the certificate seems to have been issued by Microsoft... If it is a legit service, someone in their marketing/hr/security/whatever department needs a kick in the butt. Jul 16, 2009 at 2:15
  • Domain registered on 25/Apr/2008 <a href="samspade.org/whois/qhuijw3s2b4s4kqy2yx3txwisq">LINK</…>. Certificate made on 12/3/09. Also found a <a href="blogs.msdn.com/douggowans/archive/2009/03//26/… blog</a> pointing at it too. Seems like a legit service. But yes, it is agreed that someone needs a good kicking. =)
    – Qwerty
    Jul 16, 2009 at 2:23
  • I'm not %100 sure about this - just encountered it. I did use it. Perhaps this was foolish... Jul 16, 2009 at 3:38
  • You mean your test account created just for the purposes of this test and which can be deleted afterwards, like they suggest? Or were you planning to sit there and feed it with your domain admin credentials and then somehow make that their fault?
    – Rob Moir
    Jul 17, 2009 at 7:53
1
vote

I would rather use the tools that already exist on my box.

E.g.: Testing with Powershell or Exchange Best Practices Analyzer

1
vote

A WHOIS search seems to indicate that the domain name belongs to Microsoft and is registered through "Corporate Domains, Inc." The DNS hosting is done by Microsoft servers, as well.

So, you may have dodged a bullet, but maybe you should have someone you trust change your administrative passwords and forget to tell you what they are. :)

I don't understand why a company would put an official-seeming site at a completely unrelated domain. I remember Network Solutions and maybe Register.com used to register domains like "domain-renewal.com" and they'd try to have you conduct business there. Luckily they stopped doing that.

0
votes

From an nslookup I get:

Name:
testexchangeconnectivity.microsoft.akadns.net

I don't care that it does have the word "microsoft" in there, it just doesn't look like a Microsoft site to me.

1

Not the answer you're looking for? Browse other questions tagged .