Active sync issues for a single user.

Hi,

- Exclude the C:\inetpub, C:\Windows\System32\inetsrv from the Anti-virus scanning.

- Also recycle your router once.

Hope this helps,
Shree

Alan,
I read your active sync article. But nothing addresses specific account issues. Active sync is working for other users. But just one user I can't get it to work for.

Shreedhar,
Those dir are already excluded.
Thanks.

then have restarted the router

Buried in my article is the following:
To resolve this (if you like things tidy), please open up Exchange System Manager, Global Settings, Mobile Services Properties, Device Security Button, Exceptions Button, then add your account to the exceptions list.
Please do this for the problem user and then if that works - I'll explain why!
 

Shreedhar,
There is no need to restart the router as it is working for other users.
Alan,
In order to add him as an exception I need to select Enforce password on device. I don't wan't to check that box as it might break active sync for the users that it is working for.
Thanks.

If you don't enforce a password on the devices - you will not be able to remotely wipe them if they get lost / stolen, which is a major issue for your security.
I would recommend setting the password requirement, which will then ask existing users to add a PIN.
Alternative solution, and the explanation is to run Mobile Admin on the server, find the problem user and delete old Activesync pairings that are lurking (or delete all pairings and then setup the iPhone again).

I saw another posting on ee as a possible solution:

http://sbs.seandaniel.com/2006/02/sync-errors-from-mobile-devices-in.html

But I don't know how to remove the inbox from the server sync schedule. Does anyone know how to do that?
Thanks.

What type of phone are you trying to sync?

A Samsung Jack.

Assuming it is a Windows Mobile phone there is no way that I know of to deselect the Inbox as this is one of the default folders that gets synched without choice.

Just to confirm, if you put John's credentials in www.testexchangeconnectivity.com for the ActiveSync test does it work or fail?

I created a new user and that user was not able to active sync. So it seems like any new user being created cannot active sync.

can you post the result of the www.testexchangeconnectivity.com test? alter any details with mspaint if you want or notepad.

Did the test user have at least 1 item in their inbox?

The user had 3 emails in their inbox. I will post the result from the test site.

Here are the results from testexchangeconnectivity.com:



Testing Exchange ActiveSync  
  Exchange ActiveSync test Failed
   Test Steps
   Attempting AutoDiscover and Exchange ActiveSync Test (if requested)
  Failed to test AutoDiscover for Exchange ActiveSync  
   Test Steps
   Attempting each method of contacting the AutoDiscover Service
  Failed to contact the AutoDiscover service successfully by any method
   Test Steps
   Attempting to test potential AutoDiscover URL https://.com/AutoDiscover/AutoDiscover.xml 
  Failed testing this potential AutoDiscover URL
   Test Steps
   Attempting to resolve the host name .com in DNS.
  Host successfully resolved
   Additional Details
  IP(s) returned:  
 
 Testing TCP Port 443 on host .com to ensure it is listening and open.
  The port was opened successfully.
 Testing SSL Certificate for validity.
  The SSL Certificate failed one or more certificate validation checks.
   Test Steps
   Validating certificate name
  Certificate name validation failed
   Tell me more about this issue and how to resolve it
   Additional Details
  Host name .com does not match any name found on the server certificate CN=www.webbuildersolution.com, OU=Thomson Professional, O=Thomson Corporation, L=Eagan, S=Minnesota, C=US, SERIALNUMBER=  
 
 
 
 
 
 Attempting to test potential AutoDiscover URL https://autodiscover..com/AutoDiscover/AutoDiscover.xml 
  Failed testing this potential AutoDiscover URL
   Test Steps
   Attempting to resolve the host name autodiscover..com in DNS.
  The Host could not be resolved.
   Tell me more about this issue and how to resolve it
   Additional Details
  Host autodiscover..com could not be resolved in DNS Exception Details:
Message: No such host is known
Type: System.Net.Sockets.SocketException
Stack Trace:
at System.Net.Dns.GetAddrInfo(String name)
at System.Net.Dns.InternalGetHostByName(String hostName, Boolean includeIPv6)
at System.Net.Dns.GetHostAddresses(String hostNameOrAddress)
at Microsoft.Exchange.Tools.ExRca.Tests.ResolveHostTest.PerformTestReally()
 
 
 
 
 Attempting to contact the AutoDiscover service using the HTTP redirect method.
  Failed to contact AutoDiscover using the HTTP Redirect method
   Test Steps
   Attempting to resolve the host name autodiscover..com in DNS.
  The Host could not be resolved.
   Tell me more about this issue and how to resolve it
   Additional Details
  Host autodiscover..com could not be resolved in DNS Exception Details:
Message: No such host is known
Type: System.Net.Sockets.SocketException
Stack Trace:
at System.Net.Dns.GetAddrInfo(String name)
at System.Net.Dns.InternalGetHostByName(String hostName, Boolean includeIPv6)
at System.Net.Dns.GetHostAddresses(String hostNameOrAddress)
at Microsoft.Exchange.Tools.ExRca.Tests.ResolveHostTest.PerformTestReally()
 
 
 
 
 Attempting to contact the AutoDiscover service using the DNS SRV redirect method.
  Failed to contact AutoDiscover using the DNS SRV redirect method.
   Test Steps
   Attempting to locate SRV record _autodiscover._tcp..com in DNS.
  Failed to find AutoDiscover SRV record in DNS.
   Tell me more about this issue and how to resolve it
 
 
 
 
 
 
 
 

OK, ignore the autodiscover test and use the "manually specify server settings" test and post me the result again please

I change the testing from auto to manual and here are the results.

Testing Exchange ActiveSync  
  Exchange ActiveSync test Failed
   Test Steps
   Attempting to resolve the host name .com in DNS.
  Host successfully resolved
   Additional Details
  IP(s) returned:  
 
 Testing TCP Port 443 on host .com to ensure it is listening and open.
  The specified port is either blocked, not listening, or not producing the expected response.
   Tell me more about this issue and how to resolve it
   Additional Details
  A network error occurred while communicating with remote host
Exception Details:
Message: No connection could be made because the target machine actively refused it :443
Type: System.Net.Sockets.SocketException
Stack Trace:
at System.Net.Sockets.TcpClient.Connect(String hostname, Int32 port)
at Microsoft.Exchange.Tools.ExRca.Tests.TcpPortTest.PerformTestReally()

We are not using ssl so I don't know why it is listening on port 443.
 
 
 
 

OK, that test is not going to work for you at all then cause it uses SSL

OK, there is a free iPhone app called "AS Tester" you can download from itunes or from this website
https://store.accessmylan.com/main/promo-testtool

it will give lots of diagnostic information and allow you test with SSL off

Are you willing to try it?

Sure, I'll give it a whirl.

I downloaded and installed the app on my iphone. The results I got: ActiveSync is not available. Activesync detected, but access denied. HTTP 403 disabled for this user.

Activesync is enabled for this user. I doubled checked the user account.

try adding that account to the device exceptions list:
Open Exchange System Manager--> Global Settings-->Mobile Services-->Properties-->Device Security-->Exceptions--> then add the account to the exceptions list

Mega...
In order to add him as an exception I need to select Enforce password on device. I don't wan't to check that box as it might break active sync for the users that it is working for.
Thanks.

I believe that was already covered by alanhardisty in the earlier posts?

Yep, alan has mentioned it already.

I found this on another site but don't know how to run it:


Posts: 8
Joined: 23.Mar.2007
Status: offline       Figured it out...

Even though the user accounts were enabled for activesync in EMC I ran the following command in EMS:

Set-CASMailbox -Identity <SMTP Address of user> -ActiveSyncEnabled $true

Does anyone know how to run it?

That is a Powershell command for Exchange 2007 / 2010, which you don't have, so you can't run it!

Upgrade to E2k7 or E2k10 ;-)

I found a fix. It was in http://support.microsoft.com/kb/937635. All of my setup did not match the set up in the kb. Once I made the changes it started working. Thanks to all for their helpful comments.

My Exchange 2003 / Activesync article refers to the KB article that you suggest was the solution to your problem:
"For Small Business Server 2003 Users - please check this MS article - http://support.microsoft.com/kb/937635"
 

I agree, comment ID: http:#32334911 is the correct answer and should be accepted as the solution.