Which CA to install Enterprise or Standard?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello again,

I have a Windows Server 2003 Enterprise with Exchange Server 2003
Enterprise. The Machine is based here in the USA. I have created user
accounts for some relatives living in Africa. I want them to use my exchange
for their email infrastructure. The problem is that a couple of them have Win
2000 Professional Machines while another has XP home edition, and some have
XP Pro.

In the above scenario, I am trying to setup SMTP/POP3 accounts for this
users. all they need is to get to their email and nothing else on my server.
In trying to secure the Exchange Server, which Certificate Authority would be
best to be deployed in the above scenario.

The materials says one is for people inside my domain and the other is for
people outside my domain. since these users are objects in my AD, would it be
right to think Enterprise CA or am I not understanding the material well
enough.

Thank you.

Ola
 
ola_atb said:
Hello again,

I have a Windows Server 2003 Enterprise with Exchange Server 2003
Enterprise. The Machine is based here in the USA. I have created user
accounts for some relatives living in Africa. I want them to use my exchange
for their email infrastructure. The problem is that a couple of them have Win
2000 Professional Machines while another has XP home edition, and some have
XP Pro.

In the above scenario, I am trying to setup SMTP/POP3 accounts for this
users. all they need is to get to their email and nothing else on my server.
In trying to secure the Exchange Server, which Certificate Authority would be
best to be deployed in the above scenario.

The materials says one is for people inside my domain and the other is for
people outside my domain. since these users are objects in my AD, would it be
right to think Enterprise CA or am I not understanding the material well
enough.
Click to expand...

Enterprise is essentially an "Active Directory CA" and
Standalone is essentially a "regular Server CA."

Enterprise CAs SHINE when handing out Certs to your
users AUTOMATICALLY since they can decide based
on permissions (group membership.)

Standalone CAs are usually used with 1) you have no
DC/AD or 2) plan to hand out certs to non-domain users
and approve them manually anyway.

An Enterprise CA can do this latter but it is overkill if
you don't need it -- if you need both(ideas), you can use the
Enterprise or install two of them on different servers.
 
Back
Top