Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

*please note, I've changed the question in response to the suspicion that this site is dubious.

I found this today - https://www.testexchangeconnectivity.com/

Pretty nifty! (or maybe not?)

There's a post about this site on a site called msexchangeteam.com.

They claim to be the "official blog of the Microsoft Exchange Team".

There's also a facebook group for this tool here.

I used the testexchangeconnectivity tool today - perhaps this was foolish.

share|improve this question
    
I vote to close this. At the very least that site is a bit suspect. –  John Gardeniers Jul 16 '09 at 2:19
    
@John Gardeniers - Although it appears suspicious at first, all official tools point to this being a legitimate site (such as whois listing Microsoft as the registering party). –  DWilliams Jul 16 '09 at 2:27
    
Indeed. DNS hosted by msft.net, and google doesn't know many places that do link to this site, let alone reputable ones. –  jldugger Jul 16 '09 at 2:27
    
msexchangeteam.com/archive/2009/03/25/450908.aspx Does MS not understand the implications of handing out authentication? Sometimes, there's a reason to write a windows app over a webapp. –  jldugger Jul 16 '09 at 2:31
    
As mhud said, I think you may have dodged a bullet. It looks like it is a legit Microsoft tool, but very badly branded and presented. I think this could be a lesson to everyone though, because a smart phisher could do something very similar. –  Mark Henderson Jul 16 '09 at 4:51
add comment

5 Answers

up vote 3 down vote accepted

As the updated question says, there's a post about this on "You had me at EHLO," so I guess it's official:

Announcing the release of Exchange Server Remote Connectivity Analyzer

share|improve this answer
add comment

Ummm, are you 100% sure? I'm not sure if I'm going to be giving out my entire exchange username and password that it asks for. Maybe I'm paranoid but I don't 100% trust it.

share|improve this answer
    
Yeah, it seems a little fishy to me. I don't see anything on that site that makes me confident that it is indeed Microsoft doing this. It seems like if they wanted users to trust that their credentials were safe they would at least make the site part of the Microsoft domain (especially for a Beta). –  DWilliams Jul 16 '09 at 2:11
    
And I don't see any references on microsoft.com to the website either. But that said, the certificate seems to have been issued by Microsoft... If it is a legit service, someone in their marketing/hr/security/whatever department needs a kick in the butt. –  Mark Henderson Jul 16 '09 at 2:15
    
Domain registered on 25/Apr/2008 <a href="samspade.org/whois/qhuijw3s2b4s4kqy2yx3txwisq">LINK</…;. Certificate made on 12/3/09. Also found a <a href="blogs.msdn.com/douggowans/archive/2009/03//26/… blog</a> pointing at it too. Seems like a legit service. But yes, it is agreed that someone needs a good kicking. =) –  Qwerty Jul 16 '09 at 2:23
    
I'm not %100 sure about this - just encountered it. I did use it. Perhaps this was foolish... –  chickeninabiscuit Jul 16 '09 at 3:38
    
You mean your test account created just for the purposes of this test and which can be deleted afterwards, like they suggest? Or were you planning to sit there and feed it with your domain admin credentials and then somehow make that their fault? –  RobM Jul 17 '09 at 7:53
show 1 more comment

I would rather use the tools that already exist on my box.

E.g.: Testing with Powershell or Exchange Best Practices Analyzer

share|improve this answer
add comment

A WHOIS search seems to indicate that the domain name belongs to Microsoft and is registered through "Corporate Domains, Inc." The DNS hosting is done by Microsoft servers, as well.

So, you may have dodged a bullet, but maybe you should have someone you trust change your administrative passwords and forget to tell you what they are. :)

I don't understand why a company would put an official-seeming site at a completely unrelated domain. I remember Network Solutions and maybe Register.com used to register domains like "domain-renewal.com" and they'd try to have you conduct business there. Luckily they stopped doing that.

share|improve this answer
add comment

From an nslookup I get:

Name:
testexchangeconnectivity.microsoft.akadns.net

I don't care that it does have the word "microsoft" in there, it just doesn't look like a Microsoft site to me.

share|improve this answer
    
akadns.net is for Akamai akamai.com –  Qwerty Jul 16 '09 at 2:26
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.