Exchange 2007 SP1 Upgrade ‘Gotchas’
ActiveSync Default Policy
Exchange 2007 RTM would allow you to assign ActiveSync policies on a per user level. Exchange 2007 SP1 added the ability to define an ActiveSync policy as a default policy for all users. You can read more about this and other changes to ActiveSync in SP1 on the “What's New for Exchange ActiveSync Mailbox Policies in Exchange Server 2007 SP1?" post on the Exchange team blog.
However, if your environment does not utilize ActiveSync policies you should be aware that the default policy will be applied to all users after upgrading to SP1. The default policy is pretty vanilla and would not really impose any configuration changes on mobile devices. However, users will be prompted to apply required security settings before syncing. The following Exchange Management Shell command can be used to prevent the default policy from being applied to all users, thus preventing the prompt on mobile phones.
Set-ActiveSyncMailboxPolicy Default -IsDefaultPolicy:$false
**Note: Each time a CAS server is upgraded this policy will be re-enabled as the default.
Load Balancer SSL Offloading
If you have multiple CAS servers and are using SSL offloading on your hardware load balancers you should be aware that installing SP1 will re-enable the SSL requirement at the root level of the “Default Web Site”. This will likely prevent the ‘http listener’ form detecting that your CAS servers are available and OWA access will be unavailable.
To resolve this, edit secure communications on the Directory Security tab of the “Default Web Site”. Uncheck the Require secure channel (SSL) checkbox.
**Note: The option is also re-enabled when running the Enable-ExchangeCertificate cmdlet to apply a new certificate to IIS.
