Link to home
Start Free TrialLog in
Avatar of adamshields
adamshieldsFlag for United States of America

asked on

Exchange 2003 ActiveSync Issues

I am trying to setup a DROID X to connect to Exchange 2003. I have purchased a certificate and installed it everything looks fine but I can't see any emails on the phone. below is the test results from https://www.testexchangeconnectivity.com. As you can see at the very end of the results i am receiving this error. Any ideas????
###########################################################
ExRCA is attempting the FolderSync command on the Exchange ActiveSync session.
     The test of the FolderSync command failed.
     
    Additional Details
     An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body is: <body><h2>HTTP/1.1 403 Forbidden</h2></body>      
########################################################################

ExRCA is testing Exchange ActiveSync.
       The Exchange ActiveSync test failed.
       
      Test Steps
       
      Attempting to resolve the host name copymail.copytronics.com in DNS.
       Host successfully resolved
       
      Additional Details
       IP(s) returned: 68.16.159.2
      Testing TCP Port 443 on host copymail.copytronics.com to ensure it is listening and open.
       The port was opened successfully.
      ExRCA is testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
       
      Test Steps
       
      The certificate name is being validated.
       Successfully validated the certificate name
       
      Additional Details
       Found hostname copymail.copytronics.com in Certificate Subject Common name
      Validating certificate trust for Windows Mobile Devices
       The test passed with some warnings encountered. Please expand the additional details.
       
      Additional Details
       Certificate is only trusted on Windows Mobile 5.0 AKU2 (MSFP) and later. Windows Mobile 5.0 devices will not be able to sync. Root = E=info@valicert.com, CN=http://www.valicert.com/, OU=ValiCert Class 2 Policy Validation Authority, O="ValiCert, Inc.", L=ValiCert Validation Network
      The certificate date is being confirmed to ensure the certificate is valid.
       Date validation passed. The certificate hasn't expired.
       
      Additional Details
       Certificate is valid: NotBefore = 9/17/2010 8:26:59 PM, NotAfter = 9/17/2011 8:26:59 PM"
      The IIS configuration is being checked for client certificate authentication.
       Client certificate authentication wasn't detected.
       
      Additional Details
       Accept/Require Client Certificates not configured.
      Testing Http Authentication Methods for URL https://copymail.copytronics.com/Microsoft-Server-Activesync/
       The HTTP authentication methods are correct.
       
      Additional Details
       Found all expected authentication methods and no disallowed methods. Methods Found: Basic
      An ActiveSync session is being attempted with the server.
       Errors were encountered while testing the ActiveSync session
       
      Test Steps
       
      ExRCA is attempting to send the OPTIONS command to the server.
       OPTIONS response was successfully received and is valid
       
      Additional Details
       Headers received: Pragma: no-cache
Public: OPTIONS, POST
Allow: OPTIONS, POST
MS-Server-ActiveSync: 6.5.7638.1
MS-ASProtocolVersions: 1.0,2.0,2.1,2.5
MS-ASProtocolCommands: Sync,SendMail,SmartForward,SmartReply,GetAttachment,GetHierarchy,CreateCollection,DeleteCollection,MoveCollection,FolderSync,FolderCreate,FolderDelete,FolderUpdate,MoveItems,GetItemEstimate,MeetingResponse,ResolveRecipients,ValidateCert,Provision,Search,Notify,Ping
Content-Length: 0
Date: Fri, 17 Sep 2010 23:15:31 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET

      ExRCA is attempting the FolderSync command on the Exchange ActiveSync session.
       The test of the FolderSync command failed.
       
      Additional Details
       An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body is: <body><h2>HTTP/1.1 403 Forbidden</h2></body>
ASKER CERTIFIED SOLUTION
Avatar of Alan Hardisty
Alan Hardisty
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of adamshields

ASKER

I have followed everything in that article and it still is giving me the same error. I just double checked and made sure everything was exactly as the KB article
Please follow the 403 error solutions I have posted in my article.
As you don't have Forms Based Authentication enabled, it could be a corrupt mailstore.  Does it do this for all accounts?
Alan
I had a heap of trouble with this.  I ended deleting and recreating the virtual folders in IIS which resolved the problem.  It definately looks like a permissions error.  
Also, one thing I found helped a lot was to use a browser to connect to the mobile isync folder in IIS - then you can see what's going on, rather than trying to everything on the phone.
which virtual folders should i remove Exchange and Microsoft-Server-Activesync ???

just by right clicking and saving config to file and then recreating with the file?
Ummm... I wouldn't want to advise without doing some reasearch.  If you google a bit around trouble shooting activesync you should be able to find the details.  From memoey though, thatt is the correct folder - and I just worked out where it was pointing, deleted and recreated.  From memory, I may have changed the file permissions on the files themselves.  Though I don't recall 100%
Are you running Exchange 2003 SP2 and a fully patched exchange server ?
Do you have a SSL Cert with the name of your mail.domain.com in it ?

Did you *exclude* exchange directory from virus scanning ?
what antivirus software are you using ?

thanks
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
On the iis\Default Web Site\Exchange Virtual Directory should have the "Integrated Authentication"

If you have ISA or any other firewall(s), do you want to install and configure a "Windows Mobile Emulator" @ LAN and observe the behaviour?
Thanks for the help!