The IIS Default Web Site is, by default, configured to require SSL for all virtual directories except for Offline Address ...

The IIS Default Web Site is, by default, configured to require SSL for all virtual directories except for Offline Address Book.  Since it is possible to configure additional virtual directories, for each client access feature that you plan to use you must ensure that the virtual directory uses SSL.  For each of the virtual directories listed below repeat the steps described also below in the Internet Information Services Manager to require SSL
English
English (United States)
日本語
Japanese