Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an out of the box SBS2011 install which is fully patched and updated.

During SBS2011 installation did not give me the option of putting a .com and has instead setup my domain name with a local extension, i.e. mydomain.local

From an external mail perspective, users use the domain

I have installed a third-party SAN certificate on my server with the names:

  1. myserver
  2. myserver.mydomain.local

If I can help it don't actually want my server to live on the internet, I only want people to access internally over the VPN (which works fine they can send and receive email OK).

What is driving me nuts is in Outlook 2010 the certificate error popup as the domain registrar is responding to the with a holding page so Outlook thinks it is valid!

How can I disable this check in Outlook, or is there anything I can do if i open the IIS port up on the firewall and have a valid autodiscover page?

How can i account for I have an autodiscover.mydomain.local website but not an site in IIS?

share|improve this question
up vote 3 down vote accepted

You can do this with SRV DNS records without modifying your cert. That would avoid the autodiscover step. It seems to be recommended for SBS installations.

However, I usually set autodiscover as an A record or CNAME to the actual mail server's address. Why are you getting a holding page for that?

Check out: How do I reconfigure Exchange Autodiscover?

share|improve this answer

Create an autodiscover A host record and point it to the internal IP of the exchange server. Since you're trying to prevent any actual "internet" exposure to the exchange server then clients who use the SBS sever for DNS (Not sure if youre setting it for the VPN connections) will then lookup the default SRV record created in active directory DNS or the SPN.. but external VPN clients will lookup and then where is extracted from their primary email address in Exchange.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.