SBS 2008 HTTP 401 - Unauthorized response was received from IIS7

I just did a new install of SBS 2008 and was running the free test at:
www.testexchangeconnectivity.com and got this error:

ExRCA is testing Exchange ActiveSync.
       The Exchange ActiveSync test failed.
       
      Test Steps
       
      Attempting to resolve the host name remote.allanhancockagency.com in DNS.
       The host name resolved successfully.
       
      Additional Details
       IP addresses returned: 207.68.114.92
      Testing TCP port 443 on host remote.allanhancockagency.com to ensure it's listening and open.
       The port was opened successfully.
      Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
       
      Test Steps
       
      Validating the certificate name.
       The certificate name was validated successfully.
       
      Additional Details
       Host name remote.allanhancockagency.com was found in the Certificate Subject Common name.
      Validating certificate trust for Windows Mobile devices.
       The test passed with some warnings encountered. Please expand the additional details.
       
      Additional Details
       The certificate is only trusted on Windows Mobile 6.0 and later versions. Devices running Windows Mobile 5.0 and 5.0 with the Messaging and Security Feature Pack won't be able to sync. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
      Testing the certificate date to confirm the certificate is valid.
       Date validation passed. The certificate hasn't expired.
       
      Additional Details
       The certificate is valid. NotBefore = 3/3/2011 3:44:26 PM, NotAfter = 11/23/2011 8:15:36 PM
      Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
       
      Additional Details
       Accept/Require Client Certificates isn't configured.
      Testing HTTP Authentication Methods for URL https://remote.allanhancockagency.com/Microsoft-Server-Activesync/.
       The HTTP authentication methods are correct.
       
      Additional Details
       ExRCA found all expected authentication methods and no disallowed methods. Methods found: Basic
      An ActiveSync session is being attempted with the server.
       Errors were encountered while testing the Exchange ActiveSync session.
       
      Test Steps
       
      Attempting to send the OPTIONS command to the server.
       Testing of the OPTIONS command failed. For more information, see Additional Details.
       
      Additional Details
       A Web exception occurred because an HTTP 401 - Unauthorized response was received from IIS7

I'm not sure even where to begin??
Help!!!!
emumasterAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
Advertise Here
 
Shreedhar EtteConnect With a Mentor Commented:
I have pointed to DNS issue. Hence Points to be awareded to me.....
0
 
Shreedhar EtteCommented:
Download the app for windows from https://store.accessmylan.com/main/diagnostic-tools and Post back the results.
0
 
emumasterAuthor Commented:
Here it is:
Testing 207.68.114.92 (SSL, On Internet):

Communications:
      Doing DNS lookup on 207.68.114.92 ........ OK (static-207-68-114-92.alt.east.verizon.net)
      Testing TCP to 207.68.114.92 port 443 .... OK
SSL Certificate:
      Receiving ................................ OK
      Ensuring not Self-Signed ................. OK
      Verifying certificate .................... FAIL
ActiveSync:
      Checking for application ................. OK
      Checking version ......................... FAIL

Result:
      Username or Password incorrect.

      (For more detailed diagnosis and possible solutions, see www.accessmylan.com )
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Access It Now
 
Shreedhar EtteCommented:
Observed that the 207.68.114.92 not resolvng to remote.allanhancockagency.com

Also check the certificate is installed properly.

Make you are using the proper username and password.
0
 
emumasterAuthor Commented:
I double check user name and password and the user is there with that name and password.
I've only created the one use so far (other than the admin and the user I am using is not in the admin group)
0
 
emumasterAuthor Commented:
new result when I leave off the domain:

Testing 207.68.114.92 (SSL, On Internet):

Communications:
      Doing DNS lookup on 207.68.114.92 ........ OK (static-207-68-114-92.alt.east.verizon.net)
      Testing TCP to 207.68.114.92 port 443 .... OK
SSL Certificate:
      Receiving ................................ OK
      Ensuring not Self-Signed ................. OK
      Verifying certificate .................... FAIL
ActiveSync:
      Checking for application ................. OK
      Checking version ......................... OK (8.1)
      Checking protocols ....................... OK (1.0,2.0,2.1,2.5,12.0,12.1)
User Permissions:
      Checking "MHemberger" .................... OK

Result:
      ActiveSync IS available but the certificate name is incorrect.

      (For secure ActiveSync without certificate hassles, see www.accessmylan.com )
0
 
Shreedhar EtteCommented:
In Name/IP use the remote.allanhancockagency.com and see.
0
 
emumasterAuthor Commented:
If I use a browser , I can get to remote.allanhancockagency.com.

Yet the test shows this:

Testing remote.allanhancockageny.com (SSL, On Internet):

Communications:
      Doing DNS lookup on remote.allanhancockageny.com  FAIL

Result:
      Failed to resolve the DNS name.
0
 
Shreedhar EtteCommented:
0
 
Shreedhar EtteCommented:
Fix the DNS issue. For that get in touch with the ISP.
0
 
emumasterAuthor Commented:
I'm in my godaddy account and looking at the domain records.
I have an A record for remote.allanhancockagency.com and its ip is 207.68.114.92

Its first A record(just A) is pointing to godaddy's parked server(we don't have a website for this name)

It also has an MX  @    remote.allanhancockagency.com

Is the problem having the first A record pointing to godaddy servers?
0
 
emumasterAuthor Commented:
using other dns free lookups, doesn't have problems locating the remote.allanhancockagency.com
0
 
emumasterAuthor Commented:
Solved it myself.
The main A record pointing to godaddy servers was wrong.
It should have pointed to my static ip. Same as the remote
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.