asked on

Exchange 2010 w/ Droid

Installed new Exchange 2010 and migrated mailboxes from 2003. I didn't think i needed the pop option during install, but now droids are not working.

I can send from the droid, but can't receive. I assume this is because i have not installed the pop feature. Is it safe to do this in the middle of the day?

ASKER CERTIFIED SOLUTION

AustinComputerLabs

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

PBOI

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

PBOI

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

zequestioner

ASKER

enabled pop via services.... that didn't help. Where in the 2010 ESM do I disable mobile device security? ADUC shows mobile access enabled for all users.

zequestioner

ASKER

Under Org Config - Client Access - Exchange ActiveSync Mailbox Policies, I see 'Allow non-provisionable devices' that didn't seem to work either. I also set 'require device password' to disable. still can't find the device security option.

SOLUTION

AustinComputerLabs

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

zequestioner

ASKER

yep, i do have inherited permissions enabled. Here's an output from

https://testexchangeconnectivity.com

ExRCA is testing Exchange ActiveSync.
     The Exchange ActiveSync test failed.

      Test Steps

      Attempting to resolve the host name email.brainstatetech.com in DNS.
     The host name resolved successfully.

      Additional Details
      Testing TCP port 443 on host email.brainstatetech.com to ensure it's listening and open.
     The port was opened successfully.
      Testing the SSL certificate to make sure it's valid.
     The certificate passed all validation requirements.

      Test Steps
      Checking the IIS configuration for client certificate authentication.
     Client certificate authentication wasn't detected.

      Additional Details
      Testing HTTP Authentication Methods for URL https://email.brainstatetech.com/Microsoft-Server-Activesync/.
     The HTTP authentication methods are correct.

      Additional Details
      An ActiveSync session is being attempted with the server.
     Errors were encountered while testing the Exchange ActiveSync session.

      Test Steps

      Attempting to send the OPTIONS command to the server.
     The OPTIONS response was successfully received and is valid.

      Additional Details
      Attempting the FolderSync command on the Exchange ActiveSync session.
     The test of the FolderSync command failed.

      Additional Details
     An HTTP 403 forbidden response was received. The response appears to have come from IIS7. Body of the response: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>403 - Forbidden: Access is denied.</title>
<style type="text/css">

</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>403 - Forbidden: Access is denied.</h2>
<h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
</fieldset></div>
</div>
</body>
</html>

https://testexchangeconnectivity.com

PBOI

I'm working with 2003 Exchange, so the options I'm mentioning may be coded differently for 2010. It sounds to me though that you are looking in the right area with the device password that you mentioned, because Droid's issue had to deal with PIN numbers that were assigned that allowed remote wipes of activesynch.

check your domain on the activesync settings of the device. In the end, this was my issue today and the only reason I've got some tidbits to offer. With a manual configuration:
username@domain.com
IP address of your exchange server
INTERNAL domain <-- this was my issue, domain.local not domain.com
username <-- I did not need DOMAIN\username, but it was suggested a lot in posts that I read
password

zequestioner

ASKER

weird.... so Corp. Sync on the droid is working.... but Touchdown is not. Im not sure why the test site is giving the access denied message. permissions haven't changed. These users were, however moved to a new server. (2003->2010)

PBOI

I'd suggest seeing if you have different results using a wifi connection if available in your facility.

I was able to rule out the exchange server as the issue by putting the Droid on the wifi network instead. If I configured with wifi connected using my internal IP address of the domain server and the internal domain, it worked perfectly. If yours works, then it's either an issue in the input to the phone's activesync wizard or you may have a firewall port blocked.

AustinComputerLabs

Did you enter the correct username and password into the test config at https://testexchangeconnectivity.com ?

zequestioner

ASKER

not sure what happened, but i tried the quick connect wizard and it worked this time.