We have inherited a configuration that we cannot back out of. Here is what we have:
internal domain is contoso.com. we do not own contoso.com and the current owner will not sell.
the internal name of the mail server is exchange2007.contoso.com
email domain is contosointernational.com
OWA access is through another shortened domain ctsi.com, ie. exchange.csti.com/owa
We want to purchase a commercial cert that will allow activesync to work, secure owa access, and still allow email to work internally. How can we make this work?
we bought a single name cert (mail.ctsi.com), created an internal zone for ctsi, created an A record for mail.ctsi.com to point to our exchange server, and then udpated the connection point for autodiscover, the internal url for ews, oab, and UM Web service to mail.ctsi.com (per KB940726), and our issue is resolved.