We help IT Professionals succeed at work.

Why wont iphones connect to my exchange server?

LisaFusco
LisaFusco asked
on
Why wont iphones connect to my exchange server? It validates the server during creating the email account but when I go to access my email it tells me it can not connect to server.
Comment
Watch Question

Commented:
What version of Exchange are you using?
You might go to https://www.testexchangeconnectivity.com/ and verify everything is working ok on your Exchange server's configuration. You need to be testing Activesync.

Commented:
You should also check the user accounts to make sure that Activesync is enabled for each of them.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Monitoring.

Author

Commented:
Exchange 2010 just updated to rollout 5.5
Alan HardistyCo-Owner
Top Expert 2011

Commented:

Author

Commented:
I ran the test. I attached the results. The connectivity analyzer test failed. The Autodiscvoer url failed, the http redirect failed, the DNS SRV failed. Results of exchange connectivity test. Results of exchange connectivity test.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Have you installed a 3rd party Trusted SSL certificate with the following names included in it:

mail.externaldomain.com
autodiscover.externaldomain.com
servername.internaldomainname.local
servername

If not - this will make your life a trillion times easier.

You also need to create an Autodiscover A record in DNS pointing to the External IP address of your server (not internally in DNS, but in your Domain Control Panel).

Commented:
Don't use the autodiscover settings, if you haven't setup a Autodiscover record. Just hit the radio button for "Manually specify server settings" and type in the URL to your server on the first page choose the option for "Exchange ActiveSync" without the Autodiscover option.

Author

Commented:
RFD110 I followed your directions and performed the Remote Connectivity Analysis again and the test was successful.

alanhardisty: I read the article you suggested AND followed the steps - no luck. We do have a 3rd party trusted certificate installed, but we did NOT set up Autodiscover. Is that necessary for the iPhones to work. PS - All the Droids work - no problem.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
With Exchange 2007 or 2010, you need to add an Autodiscover A record to make Exchange work happily (or an SRV record instead).

What names are included in your SSL certificate?

Commented:
Autodiscover is not necessary for Exchange 2007 or 2010. I have several of both types without autodiscover records and have never had trouble with iPhones connecting.
You will need your URL for the server to match the certificate, but the test would have said something if it didn't match.
What kind of errors/messages are you seeing? There really isn't much on the iPhone side of things to set. I have rarely had trouble with them.

Author

Commented:
RFD110: We don't have any trouble getting the iPhones to accept our settings, buut when attempting tonretrieve the mail the error comes back, "unable to connect to server".
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Autodiscover isn't necessary - but it does make the process of configuring a mobile device 100 times easier.  It is required though for Out of Office and the Offline Address book, so it should be configured regardless.

Author

Commented:
OK. I installed Autodiscover - took some time - sorry for the delay.
autodiscover-test.png
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Okay - looking good.  Try the Exchange Activesync test now and see what that produces.

Try it with and without Autodiscover and see what you get.

Author

Commented:
Without autodiscover all is well. With autodiscover I get the errors  (see image) autodiscover fails.
Co-Owner
Top Expert 2011
Commented:
Please use mail.domain.org instead of domain.org as the server Fully Qualified Domain Name and test again.

Author

Commented:
No change.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Your SSL cert only contains the following names:

mail.moriahschool.org
autodiscover.moriahschool.org
TMSMail.moriahschool.com

If the moriahschool.com domain is your internal domain name and TMSMAIL is the name of your server, then you need to add another name to your certificate called:

TMSMAIL

Can you please setup a test user and email me the credentials to alan @ it-eye.co.uk and include the server name and internal domain name if different from the above.

I will tidy up the domain names later in the comments.

Alan
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Test credentials received and using the test site, the Activesync test passes happily, suggesting that all is well.


Author

Commented:
How can I figure out why the iPhones won't connect? Seems they will accept the credentials for the Exchange Activsync, but when trying to retrieve the mail, I get an error that says - cannot connect to server.

Alan HardistyCo-Owner
Top Expert 2011

Commented:
I'll try setting up the test account on my iPhone and let you know how I get on.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Email sent from iPhone :)

Author

Commented:
alanhardisty was very supportive and really helped me.