You'll need to install the root cert for CA cert as I highly doubt Exchange or Windows has that built in. If you're installing the root CA cert for internal usage only then you might as well make your own internal company CA at this point.