Solved

ActiveSync testing for Exchange 2010 not working

Posted on 2011-03-10
16
1,386 Views
Last Modified: 2012-05-11
I downloaded Windows Mobile 6 SDK to try to test ActiveSynch for my new Exchange Server 2010 that was recently installed.

I have tried to set up the emulator to connect through the Settings, Network Cards, NE2000 Compatible Ethernet Driver and configured it with an IP address.

I then went to ActiveSync and tried to set it up to point to a mailbox on my Exchange Server 2010 box.  It keeps failing.  ActiveSync was setup on the Client Access for this server and I even turned off the SSL cert in the IIS but that didn't help.  I have allowed non-provisioned devices to work with this, am not requiring a password, Allowing all devices, allowing all device applications.  

The user is enabled for the Active Sync profile.

I have also created 2 profiles, one is the default and another is one I setup when the default wasn't working.
0
Comment
Question by:lodgingsit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 5
  • 3
  • +1
16 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35097581
Please try the test site https://testexchangeconnectivity.com as everyone here is more familiar with the output!

Also - please have a read of my article which might be of use to you:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html
0
 
LVL 15

Expert Comment

by:GreatVargas
ID: 35097620
Do you have active sync published to the outside world? try first using the testexchangeconnectivity site to connect to a mailbox by activesync in your envoirement. Post the result of the attempt for us to debug the problem.
0
 
LVL 1

Author Comment

by:lodgingsit
ID: 35097664
Right now I have it only enabled internally while I am testing the new server.  Give me a little time to get it setup on the internet and I will post when done.
0
Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35097695
You can test internally if you like with the following tool:

https://store.accessmylan.com/main/diagnostic-tools
0
 
LVL 1

Author Comment

by:lodgingsit
ID: 35097746
alanhardisty:
  Ran the tool and got an error:

Failed to detect ActiveSync [HTTP Status: 505]
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35097765
Usually a 500 error not 505 - are you sure it was 505?

My article in my initial post might help you on that error.

Is the account you are testing one with Administrator privileges?
0
 
LVL 15

Expert Comment

by:GreatVargas
ID: 35097772
you need to check the activesync url and the type of authentication. Should be this data that you should use in the test tool.
0
 
LVL 1

Author Comment

by:lodgingsit
ID: 35097787
Definitely a 505 error.  It is not an administrator account.
0
 
LVL 15

Expert Comment

by:GreatVargas
ID: 35097789
505 is version not supported error. maybe one incompatibility between the internal test software and the cas 2010.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35097798
The tool works with ALL version of Exchange happily.
0
 
LVL 1

Author Comment

by:lodgingsit
ID: 35191306
I went to the site...www.testexchangeconnectivity.com

Got the following output:

ExRCA is testing Exchange ActiveSync.
 The Exchange ActiveSync test failed.
 Test Steps
 Attempting to resolve the host name outowa.xxx.com in DNS.
 The host name resolved successfully.
 Additional Details
 IP addresses returned: 2x.x.x.x, 6x.x.x.x
 
Testing TCP port 443 on host outowa.xxx.com to ensure it's listening and open.
 The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
 The SSL certificate failed one or more certificate validation checks.
 Test Steps
 Validating the certificate name.
 Certificate name validation failed.
  Tell me more about this issue and how to resolve it
 Additional Details
 Host name outowa.xxx.com doesn't match any name found on the server certificate CN=OUTOWA.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35193204
>> Host name outowa.xxx.com doesn't match any name found on the server certificate <<

What names are included in your certificate?

Is it a 3rd party SSL certificate>

Does it include the following names:

mail.domain.com
autodiscover.domain.com
internalservername.internaldomain.local
internalservername
0
 
LVL 1

Author Comment

by:lodgingsit
ID: 35219219
Ok, I got past the previous problem, but have the issue below...

Few questions:
1.  What's the issue with mobile?
2.  Why is it failing?

I'm using DNS round robin with 2 public ips assigned to the domain name.
-----
ExRCA is testing Exchange ActiveSync.
 The Exchange ActiveSync test failed.
 Test Steps
 Attempting to resolve the host name outowa.xxx.com in DNS.
 The host name resolved successfully.
 Additional Details
 IP addresses returned: 2.x.x.x, 1.x.x.x

Testing TCP port 443 on host outowa.xxx.com to ensure it's listening and open.
 The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
 The certificate passed all validation requirements.
 Test Steps
 Validating the certificate name.
 The certificate name was validated successfully.
 Additional Details
 Host name outowa.xxx.com was found in the Certificate Subject Common name.

Validating certificate trust for Windows Mobile devices.
 The test passed with some warnings encountered. Please expand the additional details.
 Additional Details
 The certificate is only trusted on Windows Mobile 5.0 with the Messaging and Security Feature Pack and later versions. Windows Mobile 5.0 devices won't be able to sync. Root = E=info@valicert.com, CN=http://www.valicert.com/, OU=ValiCert Class 2 Policy Validation Authority, O="ValiCert, Inc.", L=ValiCert Validation Network

Testing the certificate date to confirm the certificate is valid.
 Date validation passed. The certificate hasn't expired.
 Additional Details
 The certificate is valid. NotBefore = 2/15/2011 8:34:02 PM, NotAfter = 2/15/2016 8:34:02 PM



Checking the IIS configuration for client certificate authentication.
 Client certificate authentication wasn't detected.
 Additional Details
 Accept/Require Client Certificates isn't configured.

Testing HTTP Authentication Methods for URL https://outowa.xxx.com/Microsoft-Server-Activesync/.
 The HTTP authentication methods are correct.
 Additional Details
 ExRCA found all expected authentication methods and no disallowed methods. Methods found: Basic

An ActiveSync session is being attempted with the server.
 Errors were encountered while testing the Exchange ActiveSync session.
 Test Steps
 Attempting to send the OPTIONS command to the server.
 Testing of the OPTIONS command failed. For more information, see Additional Details.
 Additional Details
 A Web exception occurred because an HTTP 401 - Unauthorized response was received from IIS7.
0
 
LVL 1

Accepted Solution

by:
lodgingsit earned 0 total points
ID: 35244622
I fixed the issue.  The problem was that the bindings were having issues and it needs the local loopback binding to connect in iis.
0
 
LVL 1

Author Closing Comment

by:lodgingsit
ID: 35308469
Solved issue on my own.
0
 

Expert Comment

by:tenover
ID: 37371235
Can you tell me what you did exactly?  I'm having the same exact problem it seems.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question