Exchange Mails remote

Hi,

I have an user who is able to access exchange server mails in blackberry and the server is located outside city. Now when i tried to configure the setting in outlook it gave me the error called "action cannot be completed, exchange must be online..."
i have give the settings as follows:

1) given the server name
2) use cache exchange mode

General - manually control connection state
connect with the network

Advanced - use cache exchanged mode
download shared folders

Security - encrypt data
logon network security

Connection - lan network
exchange proxy server
proxy authentication - basic


still iam geting the error

please let me know whether the setting is right  if not what is the correct one


LVL 1
kurajeshSenior Systems AnalystAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Shreedhar EtteCommented:
Hi,

Refer this article:
http://www.msexchange.org/tutorials/outlookrpchttp.html

Hope this helps,
Shree
0
kurajeshSenior Systems AnalystAuthor Commented:
i tried the above settings and still iam getting the same error "outlook is unable connect to the proxy server, connection to exchange is unavailable outllok must be online"
0
Shreedhar EtteCommented:
Go to https://www.testexchangeconnectivity.com/

Select the option Outlook Anywhere (RPC over HTTP) > then Select the option Manually Specify Server Settings

And Perform Test.

Post the result here
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

kurajeshSenior Systems AnalystAuthor Commented:
i have done the steps, thanks , this time it gave me the following at the last step

Certificate trust validation failed
   Additional Details
  Certificate chain could not be built. You may be missing required intermediate certificates.  
 
0
Shreedhar EtteCommented:
Certificate installed on the exchange server is self signed or 3rd party certificate.

If it is 3rd party then intermediate certificates are not installed on the server and also on the desktop.

Install the certificate and test the RPC over HTTP.

0
kurajeshSenior Systems AnalystAuthor Commented:
can i download from the net if it is not a 3rd party certificate, if so please let me know the link
0
Shreedhar EtteCommented:
Hi Kurajesh,

The Certificates have been installed on the IIS.

However you can download then while access the owa. It will shoe the certificate details in the browser. From there you can save the certificate on to desktop.

Refer this:
http://ejbca.org/sensornet/IEHowTo/ManagingCertificateIE.html

Hope this helps,
Shree
0
kurajeshSenior Systems AnalystAuthor Commented:
however in this case the exchange server name and https server name are different
when i tried to access - https ://mobimail.xyz.com (starts with mobimail) popup window for continue to this website is coming and when i clicked next it is asking for the domain username and password which i gave and it worked with owa. i think it is the microsoft certificate (i checked in internet options-content-certificate-none was there)
0
Mahmoud SabrySenior IT Systems EngineerCommented:
the client pc must trust the certificate that the exchange server use to encrypt the sessions between the clients and the server

if you use public certificate, it;s trusted by default in all operating systems, but if you use internal certificate authority, the the client computer must trust this certificate, if this is the case, go to http://CA_server_name/certsrv and then choose download certificate chain, download the .p7b file and transfer it to the client computer and perform the following scenario

run --> MMC  >> enter --> file, add/remove snapin--> select certificate --> select local computer--> next next finish

click ok to return to the console, expand certificates ,go to trusted root certificate authority,certificates, then right click certificate and choose import, use the wizard to import the certificate that you downloaded from the server

by default outlook will not work if the PC doesn't trust the certificate, but blackberry can ignore the certificate error
if you need to do this in all domain machines , use this link

http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_23095016.html


i hope this information is helpful
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kurajeshSenior Systems AnalystAuthor Commented:
I tried with exchange test connectivity and I have given all credentials
Before I asked the remote end to send me the certificate which I imported to ie.
I then tested the connecivity and it again gave the same error like Certificate trust validation failed
   Additional Details
  Certificate chain could not be built. You may be missing required intermediate certificates.
When I tried  http://CA_server_name/certsrv it says page cannot be displayed.  
  i have given as  http://CA_myservername/certsrv
0
Mahmoud SabrySenior IT Systems EngineerCommented:
there are some thing i canot understand

1. do you have internal certificate authority server or not?
2. if yes, login locally to this server and open Internet explorer and in the URL type http://localhost/certsrv
3. if you r using exchange 2007, on command shell type the following command and paste the result here

Get-ExchangeCertificate | fl

or give us your public URL and we can know some info about this certificate
0
kurajeshSenior Systems AnalystAuthor Commented:
The servername is mail-dammam1.napcogroup.com and proxy server is mobimail.napcogroup.com
0
Mahmoud SabrySenior IT Systems EngineerCommented:
YES,
0
Mahmoud SabrySenior IT Systems EngineerCommented:
YES , YOU USE LOCAL CERTIFICATE AUTHORITY

PLEASE LOGIN LOCALLY TO THE CA SERVER AND IN THE URL TYPE http://localhost/certsrv AND TRY TO DOWNLOAD THE CERTIFICATE CHAIN

I LOOKED IN YOUR CERTIFICATE, AND FIND THAT CN IS CORRECT AND ALSO VALID FROM AND VALID TO DATES ARE IN TIME
0
kurajeshSenior Systems AnalystAuthor Commented:
0
Mahmoud SabrySenior IT Systems EngineerCommented:
did the issue resolved yet?
0
kurajeshSenior Systems AnalystAuthor Commented:
kindly note that this is solved
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.