Solved

SBS 2008 Active Sync issues

Posted on 2010-11-30
8
881 Views
Last Modified: 2012-05-10
We just performed a SBS2003 to SBS2008 migration.  Everything went flawlessly, except for this one issue.  When trying to sync phones to OWA, the connection fails.  I've tried both w/SSL and without SSL....connection fails both ways.  On a regular PC, when trying to access the https://servername/microsoft-server-activesync I'm prompted for UN/PW...after entering credentials, the OWA login page is displayed.  I enter credentials there and am prompted with a HTTP Error 404.0 - Not Found. The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.

Detailed Error Information
Module      IIS Web Core
Notification      MapRequestHandler
Handler      StaticFile
Error Code      0x80070002
Requested URL      https://servername:443/owa/default.eas
Physical Path      C:\Program Files\Microsoft\Exchange Server\ClientAccess\owa\default.eas
Logon Method      Basic
Logon User      myuser

When i browse to the physical path on the server, C:\Program Files\Microsoft\Exchange Server\ClientAccess\owa\, the default.eas file is not there.  

How do I recreate the default.eas file?

Exchange and OWA are both up and running, and have not received any negative feedback from the users.  So, all is well there.  Seems as if the migration caused these issues with ActiveSync.  Your help is appreciated!!
0
Comment
Question by:capitalcitycomputers
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 34240004
0
 

Author Comment

by:capitalcitycomputers
ID: 34241089
The inherited permissions were all unchecked...but after checking them all i still have the issue.  That probably would have been a problem down the road, but it did not resolve this issue.  

It's looking for the default.eas file....how would i obtain/create this file?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 34241118
default.eas is the Default Activesync Policy - have you configured an Activesync Policy?

Exchange Management Console> Organization Config> Client Access> Exchange Activesync Mailbox Policies> Properties of Default Policy.

Does the Default policy Exist?
0
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:capitalcitycomputers
ID: 34241140
The policy that is there is labeled "Windows SBS Mobile Mailbox Policy ServerName"

There isnt one called "default"
0
 

Author Comment

by:capitalcitycomputers
ID: 34241397
when running the exchange connectivity test, below is the output.  We're using a self signed certificate, per the EU's request to save some $$!


 ExRCA is testing Exchange ActiveSync.  
  The Exchange ActiveSync test failed.
   Test Steps
   Attempting to resolve the host name servername.org in DNS.
  The host name resolved successfully.
   Additional Details
  IP addresses returned: xx.xx.xx.72
 
 Testing TCP port 443 on host servername.org to ensure it's listening and open.
  The port was opened successfully.
 Testing the SSL certificate to make sure it's valid.
  The SSL certificate failed one or more certificate validation checks.
   Test Steps
   Validating the certificate name.
  The certificate name was validated successfully.
   Additional Details
  Host name remote.syntrinity.org was found in the Certificate Subject Common name.
 
 Validating certificate trust for Windows Mobile devices.
  Certificate trust validation failed.
   Additional Details
  The certificate chain couldn't be built. You may be missing required intermediate certificates. For more information, see Microsoft Knowledge Base article KB 927465.
 
 
 
 
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 34241801
Please read the "Limitations of the Self-Signed Certificate" section of the following MS Article:

http://technet.microsoft.com/en-us/library/bb851554(EXCHG.80).aspx

I always install a 3rd Party SSL cert to make my SBS 08 boxes work and buy them from my GoDaddy Reseller site at http://www.exchange-certificates.com or if you prefer - www.godaddy.com

They are about the cheapest around.

You will need to include the following names:

remote.domain.com (or whatever you have configured for access)
autodiscover.domain.com
internalservername.internaldomain.local
internalservername
sites

With a 5 name SAN / UCC certificate - your issues will melt away all for the small cost of $90 (1 year certificate)
0
 

Author Comment

by:capitalcitycomputers
ID: 34242409
Ok - Thank you for the link.  We'll be purchasing soon.

Do i need an A nrecord for autodiscover.domain.com?

What is the last name used for, sites?  
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 34257201
Yes - you either need an A record for autodiscover.domain.com pointing to the IP Address of your server, or you can add an SRV record, if your Domain Host can create these types of records - some can't.

Sites is used to keep SBS happy - it can often throw up a certificate error if sites is not included.  Don't recall exactly the reason why but read it on a blog site from a Microsoft MVP, so taking it on good authority : )
0

Featured Post

[Webinar] How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
This article explains how to install and use the NTBackup utility that comes with Windows Server.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question