oldhamcol
asked on
ActiveSync Permission Issues - 0x85010004
Hi
Really hitting a brick wall now and would appreciate some ideas on what to try next.
Current setup is Exchange 2007 (Separate Mailbox and CAS) using IIS 7 on Server 2008.
Using properly issued Cybertrust certificate.
Link from external goes through ISA 2006.
OWA works fine internally and externally no problems at all.
ActiveSync gives the following error when I try to sync:
"Your account in Microsoft Exchange Server does not have permission to synchronize with your current settings. Contact your Exchange Server administrator. 0x85010004"
Tried externally using a Dell x51v and internally using Microsofts emulator. Same error on both.
Things done:
1. Deleted and recreate the Exchange Activesync mailbox policy. Pointed the mailboxes manually to the policy. As a side not, what are the best settings for the ActiveSync mailbox policy ? I tend to leave it default, but this leaves the "require password" unticked.
2. Deleted and recreated the Virtual Directory in IIS. (via powershell commands)
3. Pointed all services to the proper certificate (Enable-exchangecertificat
(http://www.shudnow.net/2007/08/10/outlook-2007-certificate-error/)
4. Enabled ActiveSync on the test users mailbox, both in the console and via the powershell commands. Some people are indicating that even though it already is enabled, this proved a fix.
5. Disabled SSL - This gives the same 0x85010004 error.
6. Also tried the Test-ActiveSyncConnectivit
[System.Net.WebException]:
AuthenticationException]: The remote certificate is invalid according to the validation procedure.
[System.Security.Authentic
Really stuggling now. Please help !
Really hitting a brick wall now and would appreciate some ideas on what to try next.
Current setup is Exchange 2007 (Separate Mailbox and CAS) using IIS 7 on Server 2008.
Using properly issued Cybertrust certificate.
Link from external goes through ISA 2006.
OWA works fine internally and externally no problems at all.
ActiveSync gives the following error when I try to sync:
"Your account in Microsoft Exchange Server does not have permission to synchronize with your current settings. Contact your Exchange Server administrator. 0x85010004"
Tried externally using a Dell x51v and internally using Microsofts emulator. Same error on both.
Things done:
1. Deleted and recreate the Exchange Activesync mailbox policy. Pointed the mailboxes manually to the policy. As a side not, what are the best settings for the ActiveSync mailbox policy ? I tend to leave it default, but this leaves the "require password" unticked.
2. Deleted and recreated the Virtual Directory in IIS. (via powershell commands)
3. Pointed all services to the proper certificate (Enable-exchangecertificat
(http://www.shudnow.net/2007/08/10/outlook-2007-certificate-error/)
4. Enabled ActiveSync on the test users mailbox, both in the console and via the powershell commands. Some people are indicating that even though it already is enabled, this proved a fix.
5. Disabled SSL - This gives the same 0x85010004 error.
6. Also tried the Test-ActiveSyncConnectivit
[System.Net.WebException]:
AuthenticationException]: The remote certificate is invalid according to the validation procedure.
[System.Security.Authentic
Really stuggling now. Please help !
ASKER
Yes, we are trying to run SSL, bought a certificate from Cybertrust.
The problem I am having is with Exchange 2007, OMA has been discontinued.
Thank you for taking the time to reply though.
The problem I am having is with Exchange 2007, OMA has been discontinued.
Thank you for taking the time to reply though.
sorry didn't catch the 2007 mistook it for an '03.
HAve tried turning on the verbose logging in active sync?
Casey
HAve tried turning on the verbose logging in active sync?
Casey
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If you are than you have to get a certificate installed in IIS for the phones to work properly.
If not then you have to create the extra virtual directory that acts as a pathway to the ssl side of oma.
First things first check to see if you can log into oma from a workstation.
http://servername/oma
Casey