100 Things You May Not Know About Exchange Server: #100

We have all grown to love and enjoy OWA with Forms-Based Authentication. Gives us great security, cookie timeouts, forces us to do SSL— Wait a sec. What? No. Actually I can do Forms-based authentication WITHOUT SSL. The GUI (in this case the Exchange System Manager) will not let you run it without SSL, unless you modify a reg key. Add a reg dword (value of 1) under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeWeb. This will allow you to run FBA without SSL (disclaimer: only meant to be used in a test environment)
This entry was posted in Exchange Server 2003. Bookmark the permalink.

Leave a comment