First a little background.
We recurrently moved from Exchange 2003 to Exchange 2010 and opened access for Exchange Active Sync so that Windows Mobile 7 phones could retrieve emails outside of the building. ( We previously used a Blackberry server but needed to move away from that for cost reasons)
The machine we use for Exchange 2010 is called 'exchangeserver' , but when the public DNS records were crated they were called mail.example.co.uk. I think the reasoning was that we shouldn't expose the actual machine names. A SSL certificate was purchased for mail.example.co.uk and Exchange Active Sync works perfectly fine. Externally peoples phones talk to mail.example.co.uk and all works well.
The problem I am trying to resolve is on internal desktop Outlook clients. The internal clients connect to the Exchange server using the machine name 'exchangeserver' .
When clients connect they get a Security Alert pop-up window saying the following:-
Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the site's security certificate.
The security certificate is from a trusted certifying authority.
The security certificate date is valid.
The name on the security certificate is invalid or does not match the name of the site.
Do you want to proceed?
We can click OK, and access the email fine, so this message is just a minor annoyance but I'd like to get rid of it.
I have tried getting the Outlook clients to use mail.example.co.uk as their server but it keeps getting automatically changed back to exchangeserver.example.co.uk
How can I stop this message being presented to everyone? We do not want to rename the server, nor can I purchase another security certificate to cover the internal machine name.
What's the best solution here ( other than just ignore the message and keep clicking it away!)