Solved

exchange 2003 migration problem

Posted on 2010-08-31
6
403 Views
Last Modified: 2012-05-10
Thank you for taking the time to read my problem. I am half way through my swing migration of exchange 2003. I am moving exchange 2003 of an existing domain controller and moving this onto its own server. I am following this excellent article:

http://www.amset.info/exchange/migration.asp

So far I have moved half of the mail box;s across, the ones that are left are users that use mobile devices to connect to the corporate email system such as Nokia E71, HTC and iPhone.

So far I have,
1.      Moved non OWA and remote mobile mailboxes to new server.
2.      Replicated Public Folders
3.      Added the new server as a local bridgehead to allow emails to route between the servers.
4.      Pointed F-Secure MSG to point emails to the new internal server which works okay.
5.      Installed RPC over HTTPS on the new server, clients that have their mail box’s moved across to the new server, outlook httpc over rpc works fine.
6.      Ordered and installed a SSL certificate on the new server.

This is the problem, when I have altered the Firewall to redirect ports 443 and port 80 to the new email server, although the following works https:\\mail.companyname.co.uk\exchange. Remote Mobile devices such as iPhone and my Nokia E71 are unable to connect, on my Nokia E71 the error message we get is Error in Exchange Server, please try again. On the iphone we get, The connection to the server failed.  I can confirm that both these users have their mail box on the new server. If I move my mail box back and reset the firewall back to point to the main domain controller then both devices work

Can anyone shed some light on this problem, I’m stumped, as sending and receiving emails work within outlook and outlook web access, it’s just a problem with 3rd party mobile devices. I would be extremely grateful if I could get this issue resolved.
0
Comment
Question by:ranakular
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 15

Accepted Solution

by:
Dave_AND earned 500 total points
ID: 33572384
I had this problem when I put 2007 is, took me a while to find this again but here it is:

"A hidden fix for this is in active directory, under the persons 'advanced' security permissions. You must 'check' the "include inheritable permissions..." at the bottom of the window.

In Active Directory Users and Computers (be sure that View > Advanced Features is on) , you go into the user account that is having the problem (yours in this case), and right click, Properties.

Once you’re in the user account properties, click the Security tab, then the Advanced button. “Include inheritable permissions from this object’s parent” needs to be checked. This means top-level permissions from the Exchange server itself are able to propagate down to user account settings. "

From http://discussions.apple.com/thread.jspa?threadID=1728784
0
 

Author Comment

by:ranakular
ID: 33574493
Thanks for your help. I've tried what you have suggested but it has not worked. This is the error message that is displayed in the event viewer.

Event Type: Error
Event Source: Server ActiveSync
Event Category: None
Event ID: 3029
Description: The mailbox server [%1] has its [%2] virtual directory set to require SSL. Exchange ActiveSync cannot access the server if SSL is set to be required.
For information about how to correctly configure Exchange virtual directory settings, click the following article number to view the article in the Microsoft Knowledge Base:
817379  (http://support.microsoft.com/kb/817379/ ) Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003
0
 

Author Comment

by:ranakular
ID: 33574971
Since I have the information, I have located the following article:
http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_22147043.html?sfQueryTermInfo=1+10+30+3029+event+id

Following the last comment by Sembee: I am able to synchronise the Nokia E71s but unable to synch apple iPhones:

Don't confuse the setting "Require SSL" and your ability to use SSL.
On my deployments I put an SSL certificate in place, but I do not enable the option to require SSL anywhere. I can still use SSL as the certificate is there. What I don't do is allow any port 80 traffic in. The users have to put in https or they do not get connected. You get a few complaints when it is first deployed but they soon get used to it - plus I am rather stubborn.

Simon.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 15

Expert Comment

by:Dave_AND
ID: 33575094
That is strange then, as iPhones should pop up with a "this is not a trusted cert, are you sure you want to continue"  What happens when you setup the Iphones? does it just not connect or does it connect, but not sync?
0
 

Author Comment

by:ranakular
ID: 33575138
Just discovered the problem, the end user had an incorrect setting in their iPhone and it now works okay. Will reward you the points, as your first post set the ball rolling in getting to the route problem. A big thank you. I can now make a move in transferring the rest of user email box's across.
0
 
LVL 15

Expert Comment

by:Dave_AND
ID: 33575577
Ahh pesky users!! it would be a lot easier without them eh? ;)
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question