Solved

SBS 2008 HTTP 401 - Unauthorized response was received from IIS7

Posted on 2011-03-04
13
1,919 Views
Last Modified: 2012-05-11
I just did a new install of SBS 2008 and was running the free test at:
www.testexchangeconnectivity.com and got this error:

ExRCA is testing Exchange ActiveSync.
       The Exchange ActiveSync test failed.
       
      Test Steps
       
      Attempting to resolve the host name remote.allanhancockagency.com in DNS.
       The host name resolved successfully.
       
      Additional Details
       IP addresses returned: 207.68.114.92
      Testing TCP port 443 on host remote.allanhancockagency.com to ensure it's listening and open.
       The port was opened successfully.
      Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
       
      Test Steps
       
      Validating the certificate name.
       The certificate name was validated successfully.
       
      Additional Details
       Host name remote.allanhancockagency.com was found in the Certificate Subject Common name.
      Validating certificate trust for Windows Mobile devices.
       The test passed with some warnings encountered. Please expand the additional details.
       
      Additional Details
       The certificate is only trusted on Windows Mobile 6.0 and later versions. Devices running Windows Mobile 5.0 and 5.0 with the Messaging and Security Feature Pack won't be able to sync. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
      Testing the certificate date to confirm the certificate is valid.
       Date validation passed. The certificate hasn't expired.
       
      Additional Details
       The certificate is valid. NotBefore = 3/3/2011 3:44:26 PM, NotAfter = 11/23/2011 8:15:36 PM
      Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
       
      Additional Details
       Accept/Require Client Certificates isn't configured.
      Testing HTTP Authentication Methods for URL https://remote.allanhancockagency.com/Microsoft-Server-Activesync/.
       The HTTP authentication methods are correct.
       
      Additional Details
       ExRCA found all expected authentication methods and no disallowed methods. Methods found: Basic
      An ActiveSync session is being attempted with the server.
       Errors were encountered while testing the Exchange ActiveSync session.
       
      Test Steps
       
      Attempting to send the OPTIONS command to the server.
       Testing of the OPTIONS command failed. For more information, see Additional Details.
       
      Additional Details
       A Web exception occurred because an HTTP 401 - Unauthorized response was received from IIS7

I'm not sure even where to begin??
Help!!!!
0
Comment
Question by:emumaster
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 6
13 Comments
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 35037429
Download the app for windows from https://store.accessmylan.com/main/diagnostic-tools and Post back the results.
0
 

Author Comment

by:emumaster
ID: 35037588
Here it is:
Testing 207.68.114.92 (SSL, On Internet):

Communications:
      Doing DNS lookup on 207.68.114.92 ........ OK (static-207-68-114-92.alt.east.verizon.net)
      Testing TCP to 207.68.114.92 port 443 .... OK
SSL Certificate:
      Receiving ................................ OK
      Ensuring not Self-Signed ................. OK
      Verifying certificate .................... FAIL
ActiveSync:
      Checking for application ................. OK
      Checking version ......................... FAIL

Result:
      Username or Password incorrect.

      (For more detailed diagnosis and possible solutions, see www.accessmylan.com )
0
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 35037625
Observed that the 207.68.114.92 not resolvng to remote.allanhancockagency.com

Also check the certificate is installed properly.

Make you are using the proper username and password.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:emumaster
ID: 35037635
I double check user name and password and the user is there with that name and password.
I've only created the one use so far (other than the admin and the user I am using is not in the admin group)
0
 

Author Comment

by:emumaster
ID: 35037652
new result when I leave off the domain:

Testing 207.68.114.92 (SSL, On Internet):

Communications:
      Doing DNS lookup on 207.68.114.92 ........ OK (static-207-68-114-92.alt.east.verizon.net)
      Testing TCP to 207.68.114.92 port 443 .... OK
SSL Certificate:
      Receiving ................................ OK
      Ensuring not Self-Signed ................. OK
      Verifying certificate .................... FAIL
ActiveSync:
      Checking for application ................. OK
      Checking version ......................... OK (8.1)
      Checking protocols ....................... OK (1.0,2.0,2.1,2.5,12.0,12.1)
User Permissions:
      Checking "MHemberger" .................... OK

Result:
      ActiveSync IS available but the certificate name is incorrect.

      (For secure ActiveSync without certificate hassles, see www.accessmylan.com )
0
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 35037682
In Name/IP use the remote.allanhancockagency.com and see.
0
 

Author Comment

by:emumaster
ID: 35037769
If I use a browser , I can get to remote.allanhancockagency.com.

Yet the test shows this:

Testing remote.allanhancockageny.com (SSL, On Internet):

Communications:
      Doing DNS lookup on remote.allanhancockageny.com  FAIL

Result:
      Failed to resolve the DNS name.
0
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 35037773
0
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 35037786
Fix the DNS issue. For that get in touch with the ISP.
0
 

Author Comment

by:emumaster
ID: 35037840
I'm in my godaddy account and looking at the domain records.
I have an A record for remote.allanhancockagency.com and its ip is 207.68.114.92

Its first A record(just A) is pointing to godaddy's parked server(we don't have a website for this name)

It also has an MX  @    remote.allanhancockagency.com

Is the problem having the first A record pointing to godaddy servers?
0
 

Author Comment

by:emumaster
ID: 35038020
using other dns free lookups, doesn't have problems locating the remote.allanhancockagency.com
0
 

Author Comment

by:emumaster
ID: 35040572
Solved it myself.
The main A record pointing to godaddy servers was wrong.
It should have pointed to my static ip. Same as the remote
0
 
LVL 34

Accepted Solution

by:
Shreedhar Ette earned 500 total points
ID: 35043021
I have pointed to DNS issue. Hence Points to be awareded to me.....
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A lot of problems and solutions are available on the net for the error message "Source server does not meet minimum requirements for migration" while performing a migration from Small Business Server 2003 to SBS 2008. This error pops up just before …
I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question