We have a weird situation which I inherited where we have an expired certificate for abc.com. The domain and external website are both named the same. Staff are prompted with the certificate expired message every time they open up outlook which is on a hosted exchange. I don't know where the certificate in question is held. I have created a new CA within the domain and created a new domain certificate but the users still experience this issue. The old supposed CA no longer opens certificate manager. I have now ran out of ideas and this is causing me and our staff alot of frustration. Please help! :)

The new CA has to be published in Active Directory before it can be trusted by your client systems in the domain. It will also take a little time to repopulate the new Root CA on each system. http://networkerslog.blogspot.com/2010/12/publish-offline-certificates-and-crls.html Steve Kline Microsoft Certified IT Professional: Server Administrator Microsoft Certified Technology Specialist: Active Directory, Network Infrastructure, Application Platform, Windows 7 Microsoft Certified Product Specialist & Network Product Specialist Red Hat Certified System Administrator Microsoft Community Contributor Award 2011 This posting is "as is" without warranties and confers no rights.

Hello, for CA questions better ask in http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hello, for CA questions better ask in http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi Steve, Thanks for your reply. I followed the post but the certificates were already in the store when i tried to add them.