Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat. The purpose of this eBook is to educate the reader about ransomware attacks.
COURSE of the MONTH
13 days, 3 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Setting up OWA on an iphoneiphone 4
Posted on 2011-03-07
Hello EE. I am having a hell of a time trying to get one iphone4 user to to access OWA on Exchange 2010. I was able to successfyully set up 3 others with no problem. It keeps giving me "Exchange Account Unable to verify account information."
The only difference between her phone and the others is the OS is running 4.2.1 and the others are running 4.1. Inheritable permissions is checked on her AD profile. I was getting event id 1503:
Exchange ActiveSync doesn't have sufficient permissions to create the "CN=User,OU=XXXXX_XXXXX Administrators,DC=MHACS,DC
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
".
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevic
Details:%3
After checking allow inheritable rights in security tab I stopped getting that error but I still can not sync the phone. I tried with and without SSL. I do have a valid SSL ceert from GoDaddy. The other 3 phones gave no problems.. I have Exchange 2010 running on Windows 2008 R2 standard with a DC running Win 2008 R2 Enterprise. My luck she happens to be an Executive Administrator and is a domain admin as well. Any help would be appreciated.
The only difference between her phone and the others is the OS is running 4.2.1 and the others are running 4.1. Inheritable permissions is checked on her AD profile. I was getting event id 1503:
Exchange ActiveSync doesn't have sufficient permissions to create the "CN=User,OU=XXXXX_XXXXX Administrators,DC=MHACS,DC
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
".
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevic
Details:%3
After checking allow inheritable rights in security tab I stopped getting that error but I still can not sync the phone. I tried with and without SSL. I do have a valid SSL ceert from GoDaddy. The other 3 phones gave no problems.. I have Exchange 2010 running on Windows 2008 R2 standard with a DC running Win 2008 R2 Enterprise. My luck she happens to be an Executive Administrator and is a domain admin as well. Any help would be appreciated.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
13
12
26 Comments
You have verified that ActiveSync is enabled for the mailbox in exchange?
Can the user use the web browser to access OWA through the phone?
Can the user use the web browser to access OWA through the phone?
Active today
Are you adding /owa to the end of the Fully Qualified Domain Name that you are configuring your iPhone with? If you are - you should not be - you only should be entering something like mail.domain.com and not mail.domain.com/owa
FYI - OWA is Outlook Web Access and has nothing to do with getting mail to an iPhone. What you are referring to is Activesync.
FYI - OWA is Outlook Web Access and has nothing to do with getting mail to an iPhone. What you are referring to is Activesync.
Well I am trying to configure the iPhone to get email. Where it asks for the server i put the OWA link with the /owa. I will try it without it
Active today
With Activesync - you Never add anything after .com and if anyone tells you otherwise, they are wrong!
Active today
Email Address: users email address e.g. user@domain.com
Server: Whatever the certificate name includes e.g. mail.domain.com or www.domain.com or whatever you have configured
Domain: Internal Domain Name e.g., internaldomain (not internaldomain.local
Username: Users username e.g., user
Password: Users network password
Description: Whatever takes your fancy to describe the account on the phone.
Server: Whatever the certificate name includes e.g. mail.domain.com or www.domain.com or whatever you have configured
Domain: Internal Domain Name e.g., internaldomain (not internaldomain.local
Username: Users username e.g., user
Password: Users network password
Description: Whatever takes your fancy to describe the account on the phone.
Active today
Okay - can you please run the Exchange Activesync Test (Not Exchange Activesync Autodiscover Test) on https://testexchangeconnectivity.com and port the results (hiding your domain name / IP Address).
Please run one for the working user and one for the non-working user and post both results.
Thanks
Alan
Please run one for the working user and one for the non-working user and post both results.
Thanks
Alan
I do not have access to the wtestorking one but this is what I got from the non working one
Microsoft-Exchange-Server-Remote.htm
Microsoft-Exchange-Server-Remote.htm
Active today
Sorry - that doesn't work - you can copy / paste the results but the .htm page doesn't show anything other than the Initial site page.
Alan
Alan
It won't let me copy. It complains about the security settings in my browse. Let me try something different.
The last part of the test failed. this is what it said.
An ActiveSync session is being attempted with the server.
Errors were encountered while testing the Exchange ActiveSync session.
Test Steps
Attempting to send the OPTIONS command to the server.
The OPTIONS response was successfully received and is valid.
Additional Details
Headers received: Allow: OPTIONS,POST
MS-Server-ActiveSync: 14.1
MS-ASProtocolVersions: 2.0,2.1,2.5,12.0,12.1,14.0
MS-ASProtocolCommands: Sync,SendMail,SmartForward
Public: OPTIONS,POST
Content-Length: 0
Cache-Control: private
Date: Mon, 07 Mar 2011 21:37:22 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Attempting the FolderSync command on the Exchange ActiveSync session.
The test of the FolderSync command failed.
Tell me more about this issue and how to resolve it
Additional Details
Exchange ActiveSync returned an HTTP 500 response.
An ActiveSync session is being attempted with the server.
Errors were encountered while testing the Exchange ActiveSync session.
Test Steps
Attempting to send the OPTIONS command to the server.
The OPTIONS response was successfully received and is valid.
Additional Details
Headers received: Allow: OPTIONS,POST
MS-Server-ActiveSync: 14.1
MS-ASProtocolVersions: 2.0,2.1,2.5,12.0,12.1,14.0
MS-ASProtocolCommands: Sync,SendMail,SmartForward
Public: OPTIONS,POST
Content-Length: 0
Cache-Control: private
Date: Mon, 07 Mar 2011 21:37:22 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Attempting the FolderSync command on the Exchange ActiveSync session.
The test of the FolderSync command failed.
Tell me more about this issue and how to resolve it
Additional Details
Exchange ActiveSync returned an HTTP 500 response.
Active today
Okay - you say you have checked the Inherited permissions - please uncheck - apply - then re-check and apply - then test again.
Active today
Is the user an Admin by any chance?
Check my article:
http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html
There is also a workaround for this here:
http://retrohack.com/enable-activesync-outlook-anywhere-exchange-2010/
Check my article:
http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html
There is also a workaround for this here:
http://retrohack.com/enable-activesync-outlook-anywhere-exchange-2010/
Featured Post
New feature! Upgrade and increase expert visibility of your issues with Priority Questions.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
In-place Upgrading Dirsync to Azure AD Connect
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP, Windows Server…
- Ransomware
- Experts Exchange
- Windows XP
- Windows OS
- Windows Server 2008
- Windows Server 2003, Security
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online.
The email signature template has been downloaded from:
www.mail-signatures…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses
Course of the Month13 days, 3 hours left to enroll
777 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.