Help with Active Sync Exchange 2007

I have an old issue that I am getting around to addressing. Active Sync only works for my users if they are domain and enterprise admins. When I remove them from these groups, I get some errors that I have pasted below. I have enabled the inherit deal on the security tab in AD. Also, Basic Auth is the only thing enabled in the Active Sync Site in IIS
This is the error testexchangeconnectivity.com
Attempting to send OPTIONS command to server
       Testing the OPTIONS command failed. See Additional Details for more info
       
      Additional Details
        A Web Exception occurred because an HTTP 401 - Unauthorized response was received from IIS7

IIS Log


2010-03-25 18:25:46 172.31.1.18 OPTIONS /Microsoft-Server-ActiveSync/default.eas - 80 ntmgcg\gc 166.137.11.247 Apple-iPhone/705.18 401 3 5 2187
2010-03-25 18:25:48 172.31.1.18 OPTIONS /Microsoft-Server-ActiveSync/default.eas - 80 ntmgcg\gc 166.137.11.247 Apple-iPhone/705.18 401 3 5 203
2010-03-25 18:25:48 172.31.1.18 OPTIONS /Microsoft-Server-ActiveSync/default.eas - 80 ntmgcg\gc 166.137.11.247 Apple-iPhone/705.18 401 3 5 218
2010-03-25 18:25:49 172.31.1.18 OPTIONS /Microsoft-Server-ActiveSync/default.eas - 80 ntmgcg\gc 166.137.11.247 Apple-iPhone/705.18 401 3 5 250
2010-03-25 18:25:54 172.31.1.18 OPTIONS /Microsoft-Server-ActiveSync/default.eas - 80 ntmgcg\gc 166.137.11.247 Apple-iPhone/705.18 401 3 5 171
2010-03-25 18:25:54 172.31.1.18 OPTIONS /Microsoft-Server-ActiveSync/default.eas - 80 ntmgcg\gc 166.137.11.247 Apple-iPhone/705.18 401 3 5 187
rtlawAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

rtlawAuthor Commented:
here is where some of the fun begins!
Other users, who were created on this exchange server at different time, are able to access active snc just fine.
0
rtlawAuthor Commented:
on my iphone, it just prompts for password over and over.
0
Satya PathakLead Technical ConsultantCommented:
Please find IIS authentication type and the SSL requirement for Exchange  2007.
 
Exchange 2007
 
1) Autodiscover: Basic and Integrated authentication   SSL Optional
2) EWS : Integrated authentication                            NO SSL
3) Exadmin : Basic and Integrated authentication       NO SSL
4) Exchange : Basic and Integrated authentication      SSL Optional
5) Exchweb : Basic and Integrated authentication       NO SSL
6) Microsoft-Server-ActiveSync: Basic authentication   SSL Optional
7) OAB : Integrated authentication                             NO SSL
8) OWA : Basic authentication                                 SSL Optional
9) Public : Basic and Integrated authentication          SSL Optional
After That restart IIS service and check it
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

rtlawAuthor Commented:
I will try tomorrow and update...
0
SaakarSenior Technical ConsultantCommented:
What kind of firewall do you have?? If ISA then check if you have right authentication selected for ActiveSync web listner.. It should be Basic..
0
ShivtekCommented:
If it is prompting for the password again and again, check if the user has access to its own mailbox from "Full access permission", make sure "self" or the user itself is added there.

Also check under mailbox features if Active Sync is enabled.

Is this installed on Server 2003/2008?

Thanks
0
rtlawAuthor Commented:
I have a sonicwall. WIll check other issues tomorrow.
0
rtlawAuthor Commented:
I moved the users to a new EX server and it sorted it out...
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.