Solved

SBS 2008 HTTP 401 - Unauthorized response was received from IIS7

Posted on 2011-03-04
13
1,923 Views
Last Modified: 2012-05-11
I just did a new install of SBS 2008 and was running the free test at:
www.testexchangeconnectivity.com and got this error:

ExRCA is testing Exchange ActiveSync.
       The Exchange ActiveSync test failed.
       
      Test Steps
       
      Attempting to resolve the host name remote.allanhancockagency.com in DNS.
       The host name resolved successfully.
       
      Additional Details
       IP addresses returned: 207.68.114.92
      Testing TCP port 443 on host remote.allanhancockagency.com to ensure it's listening and open.
       The port was opened successfully.
      Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
       
      Test Steps
       
      Validating the certificate name.
       The certificate name was validated successfully.
       
      Additional Details
       Host name remote.allanhancockagency.com was found in the Certificate Subject Common name.
      Validating certificate trust for Windows Mobile devices.
       The test passed with some warnings encountered. Please expand the additional details.
       
      Additional Details
       The certificate is only trusted on Windows Mobile 6.0 and later versions. Devices running Windows Mobile 5.0 and 5.0 with the Messaging and Security Feature Pack won't be able to sync. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
      Testing the certificate date to confirm the certificate is valid.
       Date validation passed. The certificate hasn't expired.
       
      Additional Details
       The certificate is valid. NotBefore = 3/3/2011 3:44:26 PM, NotAfter = 11/23/2011 8:15:36 PM
      Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
       
      Additional Details
       Accept/Require Client Certificates isn't configured.
      Testing HTTP Authentication Methods for URL https://remote.allanhancockagency.com/Microsoft-Server-Activesync/.
       The HTTP authentication methods are correct.
       
      Additional Details
       ExRCA found all expected authentication methods and no disallowed methods. Methods found: Basic
      An ActiveSync session is being attempted with the server.
       Errors were encountered while testing the Exchange ActiveSync session.
       
      Test Steps
       
      Attempting to send the OPTIONS command to the server.
       Testing of the OPTIONS command failed. For more information, see Additional Details.
       
      Additional Details
       A Web exception occurred because an HTTP 401 - Unauthorized response was received from IIS7

I'm not sure even where to begin??
Help!!!!
0
Comment
Question by:emumaster
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 6
13 Comments
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 35037429
Download the app for windows from https://store.accessmylan.com/main/diagnostic-tools and Post back the results.
0
 

Author Comment

by:emumaster
ID: 35037588
Here it is:
Testing 207.68.114.92 (SSL, On Internet):

Communications:
      Doing DNS lookup on 207.68.114.92 ........ OK (static-207-68-114-92.alt.east.verizon.net)
      Testing TCP to 207.68.114.92 port 443 .... OK
SSL Certificate:
      Receiving ................................ OK
      Ensuring not Self-Signed ................. OK
      Verifying certificate .................... FAIL
ActiveSync:
      Checking for application ................. OK
      Checking version ......................... FAIL

Result:
      Username or Password incorrect.

      (For more detailed diagnosis and possible solutions, see www.accessmylan.com )
0
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 35037625
Observed that the 207.68.114.92 not resolvng to remote.allanhancockagency.com

Also check the certificate is installed properly.

Make you are using the proper username and password.
0
Turn Insights Into Action

You’ve already invested in ITSM tools, chat applications, automation utilities, and more. Fortify these solutions with intelligent communications so you can drive business processes forward.

With xMatters, you'll never miss a beat.

 

Author Comment

by:emumaster
ID: 35037635
I double check user name and password and the user is there with that name and password.
I've only created the one use so far (other than the admin and the user I am using is not in the admin group)
0
 

Author Comment

by:emumaster
ID: 35037652
new result when I leave off the domain:

Testing 207.68.114.92 (SSL, On Internet):

Communications:
      Doing DNS lookup on 207.68.114.92 ........ OK (static-207-68-114-92.alt.east.verizon.net)
      Testing TCP to 207.68.114.92 port 443 .... OK
SSL Certificate:
      Receiving ................................ OK
      Ensuring not Self-Signed ................. OK
      Verifying certificate .................... FAIL
ActiveSync:
      Checking for application ................. OK
      Checking version ......................... OK (8.1)
      Checking protocols ....................... OK (1.0,2.0,2.1,2.5,12.0,12.1)
User Permissions:
      Checking "MHemberger" .................... OK

Result:
      ActiveSync IS available but the certificate name is incorrect.

      (For secure ActiveSync without certificate hassles, see www.accessmylan.com )
0
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 35037682
In Name/IP use the remote.allanhancockagency.com and see.
0
 

Author Comment

by:emumaster
ID: 35037769
If I use a browser , I can get to remote.allanhancockagency.com.

Yet the test shows this:

Testing remote.allanhancockageny.com (SSL, On Internet):

Communications:
      Doing DNS lookup on remote.allanhancockageny.com  FAIL

Result:
      Failed to resolve the DNS name.
0
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 35037786
Fix the DNS issue. For that get in touch with the ISP.
0
 

Author Comment

by:emumaster
ID: 35037840
I'm in my godaddy account and looking at the domain records.
I have an A record for remote.allanhancockagency.com and its ip is 207.68.114.92

Its first A record(just A) is pointing to godaddy's parked server(we don't have a website for this name)

It also has an MX  @    remote.allanhancockagency.com

Is the problem having the first A record pointing to godaddy servers?
0
 

Author Comment

by:emumaster
ID: 35038020
using other dns free lookups, doesn't have problems locating the remote.allanhancockagency.com
0
 

Author Comment

by:emumaster
ID: 35040572
Solved it myself.
The main A record pointing to godaddy servers was wrong.
It should have pointed to my static ip. Same as the remote
0
 
LVL 34

Accepted Solution

by:
Shreedhar Ette earned 500 total points
ID: 35043021
I have pointed to DNS issue. Hence Points to be awareded to me.....
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
Come and listen to Percona CEO Peter Zaitsev discuss what’s new in Percona open source software, including Percona Server for MySQL (https://www.percona.com/software/mysql-database/percona-server) and MongoDB (https://www.percona.com/software/mongo-…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question