We help IT Professionals succeed at work.

How to sync iphone 3.1.3 with exchange server 2003

tcomp
tcomp asked
on
I am trying to sync an iPhone to exchange 2003 which I have done before for a different client but it will not work at all for this client.

https://email.servername.ca/microsoft-server-activesync shows 501 not implemented error which should show if its working.

All that happens on sync is "exchange account verification failed"

activesync is setup and users have the feature enabled.
Comment
Watch Question

SteveIT Manager

Commented:
Have you tried removing the security, if present on the exchange sync to see if you can get the sync working then you could identify the problem easier.

Also check that your path is correct on the iphone, i have set a few of these up and i had to specify the path /exchange
Larry LarmeuPrincipal Consultant

Commented:
Does it have a valid SSL certificate?

Commented:
If you have webmail enabled, use that as the server address (that's what I did with mine).  Additionally, make sure all the mobile services are enabled under the "Exchange Features" in active directory for that user.

If all else fails, check the logs on your front end server and your exchange server to see if they are hitting either one.
try using the public IP address instead of the server name.
SteveIT Manager

Commented:
also check your firewall to ensure the relevant ports are allowed through so that your exchange server can completely talk to the phone
Co-Owner
Top Expert 2011
Commented:
Please have a read through my Exchange 2003 / Activesync article, check the pre-requisites, check your IIS settings, run the tests, fix any errors and come back if you get stuck anywhere:
http://www.experts-exchange.com/articles/Software/Server_Software/Email_Servers/Exchange/Exchange-2003-Activesync-Connection-Problems-FAQ.html 

Author

Commented:
Port 443 is allowed through
all features are enabled for all users
a valid ssl certificate is in place
/exchange does not work either
I tried turning off ssl security and no luck.
is this a 2G or 3G iphone?

Author

Commented:
It's a 3GS

one thing I noticed was forms authentication is the only one selected and on my exchange 2007 that works basic authentication is the only one selected
I have mine connected to a Exchange 2007 Server and it works just fine, did you check to make sure ssl is turned on in the general settings.

Author

Commented:
Yes ssl is turned on and it's exchange 2003 not 2007
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Please read through my article.

Author

Commented:
I will read the article as soon as I'm at my desk rather then on foot.

Thanks alanhardisty
Alan HardistyCo-Owner
Top Expert 2011

Commented:
No problems - it holds your hand through the minefield : )

Author

Commented:
Did an exchange connectivity test from the website in alanhardistys article and got one error

an http 403 forbidden response when exrca is attempting the foldersync command
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Have you followed the 403 error section of my article (Method 2 of KB817379)?

Author

Commented:
Still no luck.

Says

activesync detected but not access denied. Error http 403 disabled for this user, however it is enabled globally and for the user.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Do they have all the Mobile Services Enabled under Active Directory Users and Computers, Exchange Features Tab, Mobile Services?
  • Outlook Mobile Access
  • User Initiated Synchronization
  • Up-To-Date Notifications
Plus, do they have Allow Inheritable permissions ticked under the Security Tab (see http://www.experts-exchange.com/articles/Software/Server_Software/Email_Servers/Exchange/Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html for details - don't worry about it saying it is for 2007 / 2010)?

Author

Commented:
What do these do?

eseutil /p
eseutil /d
isinteg -s servername -fix -test alltests (at least twice)

saw them in your article alanhardisty.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Eseutil /p repairs the mailstore fixing any errors.

Eseutil /d defragments the mailstore and takes good data and writes it to a new file.

Isinteg checks the integrity of the mailstore and corrects and integrity errors.

All of the commands take time (approx 4-6gb per hour) to run and mean users are not able to use mail.  All processes need to be completed in the right order.

Author

Commented:
I ended up rebooting the server and voila it worked.

HTTP 403 error is still there but it works fine regardless.