Ports 135-139 should be closed! If you have to allow remote users to access Exchange as a Exchange client, you must do this through VPN (best choice) or using RPC/HTTP. IMHO, if VPN is not viable, I tell users they must use OWA during that time they are not able to use a VPN connection. John Tolmachoff Engineer/Consultant/Owner eServices For You