We are running Exchange 2007 SP1 on Windows 2008 Server. Exchange ActiveSync is setup with SSL disabled. Our Windows Mobile ActiveSync clients are able to sync without error. However, our Palm Treo VersaMail clients fail with the error: AirSAMStateMachine.c 1913 4628
Before the Windows Mobile devices sync for the first time, they are prompted with this question: "Exchange Server must enforce security policies on your device to continue synchronizing. Do you want to continue?"
My best theory for the Palm VersaMail failure is they are unable to respond to the Exchange security policy. (As I said, this is only a theory.)
Is VersaMail able to accept an Exchange security policy?
Is there a way to prevent the enforcement on the Exchange side?
How?
This is a sub-question from: Q_23643015
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
It seems that VersaMail can not accept an Exchange ActiveSync security policy.
However, on the Exchange side, you can delete the Default ActiveSync Security Policy. Once this is deleted, our VersaMail clients were able to sync:
Start --> Programs --> Microsoft Exchange Server 2007 --> Exchange Management Shell
Remove-ActiveSyncMailboxPo
I wrote a letter to Palm about the issue and shortly got a few engineers calling me up to discuss this problem. It turns out that since Palm's operating system is not a supported OS for exchange to control remotely you would have to delete the default policy which has the remote wipe and create at least two separate policies one for windows mobiles which will allow you to remote wipe the device from Exchange management center and another one for palm devices. Palm devices can be remotely wiped but not through exchange management center. they have to be wiped from a webpage. most companies don't really care about this issue so they end up deleting all the policies but if you are concerned about lost phones then look into setting up custom policies.
Business Accounts
Answer for Membership
by: Kevin433Posted on 2008-08-16 at 07:14:05ID: 22244162
I found a very similar post at:
http://forums.msexchange.o
In their case the solution was to use PowerShell to remove all Exchange ActiveSync security policies. After doing this their VersaMail clients worked. I'm going to look into this, but using PowerShell to delete the Default Security Policy seems a little bit dangerous.