How to get Active Synch to work for a child Domain.

WE ahve one domain that most users are in and everythig is working fine.  But we do have a child domain that has its own exchange system.  The exchange in the master domain is 2007 while the system in the child domain is 2003.  We now have requests from users in the child domain that want to start using active synch.  OWA works fine for them but I can not seem to get active synch to work.  Any ideas or tricks that I need  to know about to get this working.
L_P_LoudanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dfxdeimosCommented:
Do you have the certificate installed on the devices that are trying to access ActiveSync?
0
dfxdeimosCommented:
I jumped the gun a little bit there...

So you have OWA working just fine, I assume by navigating to mail.child.domain.com ? Are you trying to use SSL or Non-SSL for the ActiveSync setup? If you are using SSL, do you have the appropriate certificates installed on the mobile device? Do you have the proper ports (80 or 443) forwarded through the firewall?
0
L_P_LoudanAuthor Commented:
I have not installe dthe certs on the device, I will try that tomorrow and let you know.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

dfxdeimosCommented:
Ok, if it is a self signed certificate then you will also have to install the root certificate of the issuing CA on the device.
0
L_P_LoudanAuthor Commented:
we have the cert on the CA server in the master domain and for users in that domain we do not need to install the cert on the device.  When we were on 2003 on both domains we had to install the cert on the device.  do you think I need to install the cert on the device that connects to the child domain or do i need another cert for the child domain.
0
dfxdeimosCommented:
Your comment is worded in a confusing matter to me.

If you are using a self signed certificate to secure Exchange then you are going to have to add THAT certificates issuing CA to the Trusted Root Certification Authorities on the mobile device.

So if you visit https://mail.child.domain.com/exchange and take a look at the certificate that is used to secure OWA, whatever CA issued THAT certificate is the one that you want to install on the device.
0
L_P_LoudanAuthor Commented:
No we purchased a cert for the new CA server for OWA and active synch.  this way the cert seem sot be pushed to the device.  on the old way we had to install the cert on each device that wanted to conenct to active synch.
0
dfxdeimosCommented:
Are you trying to say that you purchased a certificate from GoDaddy or VeriSign (or other) and used THAT to secure OWA?
0
L_P_LoudanAuthor Commented:
yes, that is what I am saying.  
0
dfxdeimosCommented:
What address (you can change the domain name for security reasons) do you use to access OWA on the child domain? When you access OWA via HTTPS, what is the exact name of the server that the certificate is "Issued To" and "Issued By"? Do you receive any certificate errors?
0
L_P_LoudanAuthor Commented:
the web address is OWA.domain.com.  We use that same address for active synch.  The user in the child domain use the same address for OWA and it works but it does not work for Active Synch.
0
dfxdeimosCommented:
Are their any errors that appear either in the mobile device or on Exchange server's event logs?
0
L_P_LoudanAuthor Commented:
no erros, it jsut does not connect.
0
L_P_LoudanAuthor Commented:
Finally called Microsoft and it turns out that I needed to have the Intergrated Windows Authentication checked on the Active Server Web page so that the CAS in Dallas cold talk to it.  Now everything is working fine.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.