Arikael
asked on
can't get activesync to work
Hi experts
I'm trying to get my activesync to work via testexchangeconnectivity.c om.
I already tried the guide here: https://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_1798-Exchange-2003-Activesync-Connection-Problems-FAQ.html
But there is a strange problem which is somehow security related I guess.
According to it-eye the virtual directory "Microsoft-Server-ActiveSy nc" only needs basic authentication.
This does not work for me. Whenever I only enable Basic-Authentication I get the following error from testexchangeconnectivity:
Attempting to send OPTIONS command to server
Testing the OPTIONS command failed. See Additional Details for more info
Additional Details
A Web Exception occurred because an HTTP 401 - Unauthorized response was received from Unknown
As soon as I enable "integraded authentication" the process completes with a warning that I use unsupported authentication methods ->
See here: http://technet.microsoft.com/en-us/library/dd439361%28EXCHG.80%29.aspx
I assume this is way my ActiveSync on Symbian does not work but I have no idea why this happens and what could cause it.
I'm trying to get my activesync to work via testexchangeconnectivity.c
I already tried the guide here: https://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_1798-Exchange-2003-Activesync-Connection-Problems-FAQ.html
But there is a strange problem which is somehow security related I guess.
According to it-eye the virtual directory "Microsoft-Server-ActiveSy
This does not work for me. Whenever I only enable Basic-Authentication I get the following error from testexchangeconnectivity:
Attempting to send OPTIONS command to server
Testing the OPTIONS command failed. See Additional Details for more info
Additional Details
A Web Exception occurred because an HTTP 401 - Unauthorized response was received from Unknown
As soon as I enable "integraded authentication" the process completes with a warning that I use unsupported authentication methods ->
See here: http://technet.microsoft.com/en-us/library/dd439361%28EXCHG.80%29.aspx
I assume this is way my ActiveSync on Symbian does not work but I have no idea why this happens and what could cause it.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If you are using Exchange 2007/2010 then using Active Directory Users and Computers from the View menu select Advanced Features.
Then the user you are using to test with right click and select properties then under the Security tab click Advanced.
Under here ensure the check box for "allow inheritable permissions" is checked and click OK.
Then the user you are using to test with right click and select properties then under the Security tab click Advanced.
Under here ensure the check box for "allow inheritable permissions" is checked and click OK.
Exactly my point :)
However you will need to remove it from any AD protected groups before (Domain Admins, Administrators, schema admins ...) before or else the permissions will be overwritten shortly
However you will need to remove it from any AD protected groups before (Domain Admins, Administrators, schema admins ...) before or else the permissions will be overwritten shortly
Never noticed that and my account works fine after entering the allow inheritable permissions
ASKER
thanks for your answers:
I always did a iisreset after I changed something in IIS and I followed the it-eye tutorial.
However, I'm not sure what I have to use for REALM and DOMAIN (in virtual directory). Do I have to use the data of the server or my public available data. Which is not the same.
I'm running Exchange 2003
The user is only member of Domain-Users
I always did a iisreset after I changed something in IIS and I followed the it-eye tutorial.
However, I'm not sure what I have to use for REALM and DOMAIN (in virtual directory). Do I have to use the data of the server or my public available data. Which is not the same.
I'm running Exchange 2003
The user is only member of Domain-Users
It needs to be your internal domain name.
ASKER
ok, so now I have (following it-eye)
Exchange
domain: myinternaldomain
realm: myinternaldomain.local
MSAS
domain:myinternaldomain
realm: myinternaldomain
the domain I use for testexchangeconnectivity is also my internal one like
myinternaldomain.local\tes tuser
is that correct?
Exchange
domain: myinternaldomain
realm: myinternaldomain.local
MSAS
domain:myinternaldomain
realm: myinternaldomain
the domain I use for testexchangeconnectivity is also my internal one like
myinternaldomain.local\tes
is that correct?
yes correct now run the tests again.
ASKER
is still got this error:
Attempting an ActiveSync session with server
Errors were encountered while testing the ActiveSync session
Test Steps
Attempting to send OPTIONS command to server
Testing the OPTIONS command failed. See Additional Details for more info
Additional Details
A Web Exception occurred because an HTTP 401 - Unauthorized response was received from Unknown
When I use Integrated Authentication on MSAS it works...
I already crosschecked all my settings with it-eye, can't find anything wrong.
Attempting an ActiveSync session with server
Errors were encountered while testing the ActiveSync session
Test Steps
Attempting to send OPTIONS command to server
Testing the OPTIONS command failed. See Additional Details for more info
Additional Details
A Web Exception occurred because an HTTP 401 - Unauthorized response was received from Unknown
When I use Integrated Authentication on MSAS it works...
I already crosschecked all my settings with it-eye, can't find anything wrong.
Do you have forms based authentication turned on?
If so can you turn it off and then try again.
Is this a Small Business Server?
If so can you turn it off and then try again.
Is this a Small Business Server?
ASKER
no, it is turned off.
I also made sure, that "activate unsupported devices" is checked and that I don't force the devices to use a password.
yes, I'am using a Small business Server
I also made sure, that "activate unsupported devices" is checked and that I don't force the devices to use a password.
yes, I'am using a Small business Server
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi
thanks for your inputs
When I came to the office today, I rechecked all my IIS settings (but didn't change anythign) and called iisreset just to be on the safe side.
After that I checked my connectivity with testexchangeconnectivity using myinternaldomain\user instead of myinternaldomain.local\use r and everything worked...
So I re run the test using myinternaldomain.local\use r and it worked too.
I have no clue what the problem was.
Could it be that it takes sometime until changes I made in the exchange-server manager have effect? (I unchecked "devices need password", but that was yesterday, see comment ID 26821000.
thanks for your inputs
When I came to the office today, I rechecked all my IIS settings (but didn't change anythign) and called iisreset just to be on the safe side.
After that I checked my connectivity with testexchangeconnectivity using myinternaldomain\user instead of myinternaldomain.local\use
So I re run the test using myinternaldomain.local\use
I have no clue what the problem was.
Could it be that it takes sometime until changes I made in the exchange-server manager have effect? (I unchecked "devices need password", but that was yesterday, see comment ID 26821000.
Well that's a good thing.
It can take upto 2 hours for permissions in Exchange to take effect but it wouldn't normally effect IIS
the main thing is it working.
It can take upto 2 hours for permissions in Exchange to take effect but it wouldn't normally effect IIS
the main thing is it working.
Agreed - good news it is working and the magical change that made it work may never be known but hopefully my Article / FAQ that Demazter / I posted will have been helpful.
If you didn't run iisreset yesterday, and made changes, then that is probably what made the difference.
If you didn't run iisreset yesterday, and made changes, then that is probably what made the difference.
ASKER
Hi
Without your FAQ my ActiveSync wouldn't run at all, it was very helpful. thanks.
"stupid" symbian doesn't work yet, but that's not really important, as all our customer use Windows Mobile or iphones and testexchangeconnectivity and accessmylan work.
great help, thanks
Without your FAQ my ActiveSync wouldn't run at all, it was very helpful. thanks.
"stupid" symbian doesn't work yet, but that's not really important, as all our customer use Windows Mobile or iphones and testexchangeconnectivity and accessmylan work.
great help, thanks
ASKER
thanks!
Not used a Symbian phone (yet), but may get one for testing purposes, then I can offer a broader solution (hopefully).
ASKER
@everyone with similar problems.
You definitly should read all the comments and all links, not just the one I marked as solution.
They are all very helpful and might solve your problem.
You definitly should read all the comments and all links, not just the one I marked as solution.
They are all very helpful and might solve your problem.
make sure the user you are testing is not an administrator