Question

Exchange Activesync - FolderSync command test failed

Asked by: bboitano

Getting this error when using testexchangeconnectivity.com

Attempting to Resolve the host name domainmail.dynalias.com in DNS.
 Host successfully Resolved
Additional Details
 IP(s) returned: 213.xx.xx.xx

Testing TCP Port 443 on host domainmail.dynalias.com to ensure it is listening/open.
 The port was opened successfully.

Testing SSL Certificate for validity.
 The certificate passed all validation requirements.
Test Steps
 Validating certificate name
 Successfully validated the certificate name
Additional Details
 Found hostname domainmail.dynalias.com in Certificate Subject Common name

Testing certificate date to ensure validity
 Date Validation passed. The certificate is not expired.
Additional Details
 Certificate is valid: NotBefore = 9/17/2009 8:59:08 AM, NotAfter = 9/17/2014 8:59:08 AM



Testing Http Authentication Methods for URL https://domainmail.dynalias.com/Microsoft-Server-Activesync/
 Http Authentication Methods are correct
Additional Details
 Found all expected authentication methods and no disallowed methods. Methods Found: Basic

Attempting an Activesync session with server
 Errors were encountered while testing the ActiveSync session
Test Steps
 Attempting to send OPTIONS command to server
 OPTIONS response was successfully received and is valid
Additional Details
 Headers received: MicrosoftOfficeWebServer: 5.0_Pub
Pragma: no-cache
Public: OPTIONS, POST
Allow: OPTIONS, POST
MS-Server-ActiveSync: 6.5.7638.1
MS-ASProtocolVersions: 1.0,2.0,2.1,2.5
MS-ASProtocolCommands: Sync,SendMail,SmartForward,SmartReply,GetAttachment,GetHierarchy,CreateCollection,DeleteCollection,MoveCollection,FolderSync,FolderCreate,FolderDelete,FolderUpdate,MoveItems,GetItemEstimate,MeetingResponse,ResolveRecipients,ValidateCert,Provision,Search,Notify,Ping
Content-Length: 0
Date: Thu, 17 Sep 2009 15:59:47 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET



Attempting FolderSync command on ActiveSync session
 FolderSync command test failed
Additional Details
 An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body is: <body><h2>HTTP/1.1 403 Forbidden</h2></body>

Testing so that I can set up iPhone Activesync (once the problems with the 3.1 OS are ironed out!) so that the MD anf FD of our company can get email.

We are running SBS 2003 fully patched.

How do I fix it :) Thanks

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-09-18 at 00:52:14ID24742489
Tags

exchange

,

activesync

,

foldersync

,

forbidden

Topic

Backup Exec

Participating Experts
7
Points
250
Comments
18

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. SBS 2003, Exchange ActiveSync, and apple iPhone
    Ok, here it goes: SBS 2003 R2 Standard Edition I've been reading and it appears that I'll need to do some configuration for the SBS to allow someone's iPhone to connect using the push technology. I'm completely lost on this one. I can't find Exchange ActiveSync anywhere i...
  2. Activesync on Iphone not working
    Hi! I have been searching the net the last week and have gotten alot of help but now its about time to write my own Question.. This is the situation: We got a Small Business Server 2003 R1 with Exchange SP2 where we intend to use Activesync. we also have two iPhones (2.0) on...
  3. Iphone exchange activesync contacts
    We have a SBS server 2003 with ActiveSync setup for exchange, several users have iphones using this. They are sync'ing there outlook contacts, calendar and mail. When the server goes offline is it normal behaviour for there contacts to get wiped from the iphone? Cheers
  4. ActiveSync Exchange 2003 with iPhone
    I am trying to connect iPhone to Exchange 2003. Form-Based Authentication and SSL are off for OWA and OMA. OMA works fine but iPhone is still failing to download mailbox contents. following is test result from www.testexchangeconnectivity.com. I am getting http 500 error. Can...
  5. Microsoft ActiveSync iPhone
    All, I have one user who's iphone refuses to active sync. I ran a diagnostic against his mail box and the results follow. Activesync is pretty alien to me, it's always just worked. Again, this is just a single user--everyone else is fine. Testing Exchange ActiveSync Ex...
  6. iphone activesync
    Can someone give me a quick rundown of what has to happen to get iphone, versions 2 and 3, to work with activesync? What has to be done in iis and / or exchange?

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: alanhardistyPosted on 2009-09-18 at 12:53:26ID: 25369406

Please take a look at my FAQ regarding your specific problem.  If you don't get anywhere after checking everything, please come back for other guidance.

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_1798-Exchange-2003-Activesync-Connection-Problems-FAQ.html

 

by: bboitanoPosted on 2009-09-21 at 02:59:44ID: 25381390

Hello again Alan :)

Hope you had a good weekend, I'll go over your FAQ today and report back.

Many thanks

 

by: alanhardistyPosted on 2009-09-21 at 03:03:01ID: 25381413

Hi bboitano - Had a lovely one thanks - hope you did too.

If you get stuck anywhere - please let me know but hopefully I have covered all eventualities in my FAQ and it should get you going unless your server is really poorly.

 

by: bboitanoPosted on 2009-09-21 at 03:34:37ID: 25381553

Hi Alan,

Ran through your FAQ and ensured that everything is configured as you suggest.
And it works like a charm :)

You are a start - thank you very much

 

by: bboitanoPosted on 2009-09-21 at 03:35:10ID: 31630433

I meant star, not start :S

 

by: alanhardistyPosted on 2009-09-21 at 03:38:14ID: 25381570

Glad it helped - thanks for the points.

Alan

 

by: musrasPosted on 2009-12-01 at 04:40:12ID: 25942167

 

by: TecJoshPosted on 2010-01-08 at 09:18:21ID: 26211687

Top job!! Big thanks for taking the time to make a definative FAQ A*

 

by: alanhardistyPosted on 2010-01-08 at 09:25:19ID: 26211772

Thanks - I have added your comments to the bottom of the FAQ!

 

by: bryon44035v3Posted on 2010-02-16 at 08:13:44ID: 26582028

ok i really hate when people post links to external sources for the answer - those links go away. thanks for the google cache, but that doesnt seem to work right for me, so, i'll just paste it here for future reference:

FAQ
FAQs > Exchange  Question: Why can't I get my iPhone / Windows Mobile Phone to sync to my Exchange 2003 Server? Answer
Firstly, you need to make sure that you have Exchange Server 2003 Service Pack 2 Installed. To check if you have it installed, open up Exchange System Manager - Start, Programs, Microsoft Exchange, System Manager. Then expand Servers, Right-Click your server and choose Properties. This will display whether you have SP2 installed or not. If you do not have SP2 installed you can download it here - http://www.microsoft.com/downloads/details.aspx?FamilyID=535BEF85-3096-45F8-AA43-60F1F58B3C40&displaylang=en

If you have got SP2 installed, check on https://testexchangeconnectivity.com to see if everything is working properly by running the Exchange Activesync check. The site is an official Microsoft site specifically for testing Exchange installations and connectivity. The test will fail if you use a self-signed SSL certificate, in which case, you'll need to check the "Ignore Trust for SSL" checkbox. On the ActiveSync test page, you are asked whether you wish to use Autodiscover to detect the settings or to manually specify server settings. Exchange 2003 does not have native autodiscover, so you will most likely need to choose the latter option and provide the server name.

If you are trying to make an iPhone work, then you can also download the free iPhone App 'Activesync Tester' and this should identify any problems with your configuration or you can click on the following link: https://store.accessmylan.com/main/diagnostic-tools

You also need to ensure that TCP Port 443 is open and forwarded on your firewall to your Exchange server. You don't need to open up any other ports to get Activesync working, just TCP port 443.

Please check and mirror the settings below (Open up IIS, expand the default website then expand the relevant Virtual Directory, right-click on the Virtual Directory and choose properties, then click on the Directory Security Tab):

Exchange Virtual Directory
• Authentication = Integrated & Basic
• Default Domain = NETBIOS domain name - e.g., yourcompany
• Realm = yourcompany.com
• IP Address Restrictions = Granted Access
• Secure Communications = Require SSL NOT ticked

Microsoft-Server-Activesync Virtual Directory
• Authentication = Basic
• Default Domain = NETBIOS domain name - e.g., yourcompany
• Realm = NETBIOS name
• IP Address Restrictions = Granted Access
• Secure Communications = Require SSL and Require 128-Bit Encryption IS ticked

ASP.NET should be set to version 1.1 for all virtual directories listed above. If you cannot see the ASP.NET tab, you only have v 1.1 installed so do not worry. If any version other than 1.1 is selected, please change it to v 1.1.4322.

No other virtual directories are involved when using Activesync (apart from exchange-oma on SBS 2003 or when Forms Based Authentication is enabled) - despite having seen other postings suggesting that there are.

Although requiring SSL on the virtual directories mentioned above would be recommended, Microsoft actually recommend disabling it as per the following article in their knowledgebase: http://support.microsoft.com/kb/817379 Nevertheless, ActiveSync and OWA access should still run over a secure HTTPS session (port 443), as standard procedure states you should not open port 80 to the Exchange Server through your firewall.

Please also check that Ignore Client Certificates is selected under the IISADMPWD virtual directory / Directory Security Tab / Edit Secure Communications Button. This Virtual Direcory may not exist if you have not setup the ability to reset passwords via Outlook Web Access (OWA).

For Small Business Server 2003 Users - please check this MS article - http://support.microsoft.com/kb/937635

Make sure that the name on the SSL certificate you have installed matches the Fully Qualified Domain Name (FQDN) that you are connecting to for ActiveSync - for example, mail.microsoft.com. If it does not match, either re-issue the certificate if you created it yourself, or re-key the certificate from your SSL certificate provider.

Activesync is much easier to get working with a purchased SSL certificate (installed on the default website but you can generate your own and still make it work). GoDaddy seem to be offering the cheapest SSL certificates (at the time of writing this article).

Ensure that the IP for the Default Website is set to All Unassigned and using port 80 (open up IIS, Right-Click the Default Website). If your default website is using any port other than port 80, it simply will not work, so if you have changed this to make something else work, either change it back to port 80 or stop trying to use Activesync!

If you make any changes to IIS, you will need to reset IIS settings. Please click on Start, Run and type IISRESET then press enter.

Ensure that Forms Based Authentication is NOT turned on under Exchange Virtual Server under Exchange Protocols (Exchange System Manager, Servers, Protocols, HTTP, Exchange Virtual Server properties, Settings Tab). If it is -- read http://support.microsoft.com/kb/817379

Once all of the above has been checked, if you have made any changes, please re-visit https://testexchangeconnectivity.com and your test should now pass all checks and Activesync should be working happily for you.

If you still cannot get Activesync to work or keep getting an HTTP 500 error, please follow Method 2 in KB Article 883380 http://support.microsoft.com/kb/883380 and this should resolve the issues. This essentially deletes the Metabase (which can be corrupted) and rebuilds it. Rebuilding it often clears up problems that all the other steps above does not resolve.

After following KB883380 and if Activesync still does not work and it keeps coming up with HTTP 500 errors, please do the following:

• Disable Forms Based Authentication - Exchange HTTP Protocol (if enabled)
• Remove SSL settings from the Exchange IIS virtual directory
• Run iisreset
• Test activesync without SSL selected - hopefully this should work or give the OK result
• If okay - right-click on the Exchange Virtual Directory and select all Tasks> Save Configuration to a file. Name the file Exchange and save to the desktop
• Run Regedit (and be extremely careful here as you can kill your server very easily) then right-click on My Computer and select Export. Name the file as 'EntireRegistry' and save the backup of the registry to the desktop
• In regedit - locate HKLM \ System \ CurrentControlSet \ Services \ MasSync \ Parameters and delete the ExchangeVDir key from the right-hand pane.
• Close Regedit
• Right-click on the default-website and select New> Virtual Directory fom File. Browse to the desktop and click on the Exchange.xml that you created above, then click on Read file, select Exchange from the 'Select a configuration to import' section and click on OK. Select 'Create a new virtual Directory' and name the directory 'exchange-oma' and click OK.
• Right-click on Exchange-OMA virtual directory you just created and click Browse - you should see OWA open up happily
• Open Regedit and add the ExchangeVDir key back that you recently deleted as a String Value and then change the value to read /exchange-oma
• Close regedit
• Enable SSL and require 128-Bit Encryption on the Exchange Virtual Directory
• Enable Forms Based Authentication (if you want to use it) on Exchange> Protocols> HTTP
• Make sure that Integrated Authentication is enabled on the Exchange Virtual Directory
• Check that the Exchweb virtual directory does not have SSL enabled
• Run iisreset
• Test Activesync - should hopefully be working now

Please also check the LAN Adapter Binding order to make sure the NIC that Exchange is bound to is at the top of the list (Start> Run> [type] ncpa.cpl [press enter]> Advanced> Advanced Settings> Connections).

I have had Activesync work despite seeing "An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body is: HTTP/1.1 403 Forbidden" at the end of the test above. To resolve this (if you like things tidy), please open up Exchange System Manager, Global Settings, Mobile Services Properties, Device Security Button, Exceptions Button, then add your account to the exceptions list.

Comments received relating to this FAQ:

From Charles:
Just wanted to say what a fantastic guide this was.

Having spent an hour or so getting nowhere yesterday, I had it up and running within 15 minutes of reading your webpage.

From Raheem:
I was pulling my hair out when I first setup iphone / exchange. Took nearly 4 days before I landed on your post and was up and running in mins!

From iopadmin:
I want to let you know that your FAQ on Activesync Connection problems saved the day! After going through your document and also using the tools you provided I was able to successfully get activesync working on our existing Exchange server. I can't thank you enough for your thorough and detailed info. We are now successfully delivering Exchange mail to iPhones!

From TecJosh:
Top job!! Big thanks for taking the time to make a definitive FAQ A*

 

by: alanhardistyPosted on 2010-02-16 at 08:20:50ID: 26582127

Technically we are not allowed to post external content on EE as it can breach copyright laws, so that is why we can only post the link.

There is also an EE article here:

http://www.experts-exchange.com/articles/Software/Server_Software/Email_Servers/Exchange/Exchange-2003-Activesync-Connection-Problems-FAQ.html

Also - my FAQ will get updated from time to time and if you post the article, that post won't get updated, so it is a better idea to just leave the link and not copy / paste.

 

by: bryon44035v3Posted on 2010-02-16 at 09:54:52ID: 26583141

That's all well and fine, until the link rots :/
I see what you mean though - just can't win I guess

 

by: alanhardistyPosted on 2010-02-16 at 09:59:59ID: 26583200

Damned if you do and damned if you don't.

FYI - the link to the IT-Eye site is on my own server, so as long as I am alive and the electricity company doesn't pull the plug that should be fine.

 

by: bryon44035v3Posted on 2010-02-16 at 17:24:32ID: 26586887

oh - i see it's up now... i got 404 earlier today - maybe it was firefox and flashblock and noscript that did it, or something

using internet explorer, i really like the look of your site - alot :)

ok done turning this thread into a chat room bye

 

by: alanhardistyPosted on 2010-02-16 at 17:38:30ID: 26586938

Thanks - it was done professionally.

Site was down for a short while today but back again now.  Needed to install FTP, installation required a CD and killed web sites until it had the CD.  I was working remotely.

 

by: rcooper83Posted on 2010-03-24 at 13:33:55ID: 28478229

vg jm

 

by: pdixit1977Posted on 2011-08-28 at 10:00:10ID: 36443898

Thanks for the FAQ.
Does it have 2007 version also, please share the link OR doc itself..

 

by: menachemkainPosted on 2011-11-22 at 12:45:07ID: 37179311

YOU ARE A LIFE SAVER !

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...