Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 499
  • Last Modified:

iPhone - Exchange 2010 - Can't add account to retreive mail

I've been messing with this for two days now - I've run though all the articles and all the EE posts which pertain to this issue with no luck.  I did however just get this message while looking into settings under Session State and I'm not sure if this is related or not.  
"There was an error while performing this operation.
Details:
Filename: \\?\D:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\web.config
Line number: 38
Error: Configuration section not allowed to be set below application
0
Cashco
Asked:
Cashco
  • 10
  • 8
1 Solution
 
Alan HardistyCommented:
Comment out the line - it hijacks the authentication settings and stops you setting them via IIS.

Then run iisreset and try things again.

Alan
0
 
CashcoAuthor Commented:
Does that error even have anything to do with my problem about adding new devices?
0
 
Alan HardistyCommented:
Depends.  Do you have any devices added at the moment?

Either way - the line needs to be commented out so that you can control IIS permissions using IIS - it is a common problem and easily rectified.

My article might help you if you still have problems:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html

Alternatively, please visit https://testexchangeconnectivity.com and run the Exchange Activesync Test (without Autodiscover) and post the results obscuring your domain name / IP Address etc.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
CashcoAuthor Commented:
Exchange Activesync Test without autodiscover:
Connectivity Test Successful
 
Test Details
       Attempting the Autodiscover and Exchange ActiveSync test (if requested).
       Autodiscover was successfully tested for Exchange ActiveSync.
              Test Steps
              Attempting each method of contacting the Autodiscover service.
       The Autodiscover service was tested successfully.
              Test Steps
              Attempting to test potential Autodiscover URL https://Site.com/AutoDiscover/AutoDiscover.xml
       Testing of this potential Autodiscover URL failed.
              Test Steps

       Attempting to test potential Autodiscover URL https://autodiscover.Site.com/AutoDiscover/AutoDiscover.xml
       Testing of the Autodiscover URL was successful.
              Test Steps
              Attempting to resolve the host  autodiscover.Site.com in DNS.
       The host  resolved successfully.
              Additional Details

       Testing TCP port 443 on host autodiscover.Site.com to ensure it's listening and open.
       The port was opened successfully.
       Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
              Test Steps

       Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
              Additional Details

       Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
       ExRCA successfully retrieved Autodiscover settings by sending an Autodiscover POST.
              Test Steps
              ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.Site.com/AutoDiscover/AutoDiscover.xml for user Names@Site.com.
       The Autodiscover XML response was successfully retrieved.
              Additional Details
       Autodiscover Account Settings
XML response:
<?xml version="1.0"?>
<Autodiscover xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/mobilesync/responseschema/2006">
<Culture>en:us</Culture>
<User>
<Display>Last, Name</Display>
<EMailAddress>NameS@Site.com</EMailAddress>
</User>
<Action>
<Settings>
<Server>
<Type>MobileSync</Type>
<Url>https://mail.Site.com/Microsoft-Server-ActiveSync</Url>
<>https://mail.Site.com/Microsoft-Server-ActiveSync</>
</Server>
</Settings>
</Action>
</Response>
</Autodiscover>
0
 
Alan HardistyCommented:
Okay - so the test passes, which is good.  Have you looked at my article which discusses Inherited Permissions and / or Group Membership of specific groups that cause Activesync problems?
0
 
CashcoAuthor Commented:
OKay - I found this a few days ago and disregarded it as a solution because the inherited permissions is checked - ALTHOUGH I just added MY email to this phone and it worked! Soooo, it is a problem with this particular user. But as I mentioned before he appears to be setup correctly.  He does have an older model iphone which still works on his credentials so I dont know why it won't allow a new one to be added to the mix
______________________________________________________________________________________________
Accepted Solution

by: demazterPosted on 2010-01-05 at 01:29:51ID: 26178619

Is this happening for all users or just a select few?

I had a similar problem with my first migration to Exchange 2010 and it was down to a security permission on the Active Directory User account.

In Active Directory Users and Computers right click on the user and select properties then under the security tab and advanced make sure the box is checked for inheritable permissions.
0
 
Alan HardistyCommented:
That is exactly what my article discusses.

If you uncheck and apply the Inherited Permissions and then re-check and re-apply the permissions, what happens?

What Groups is the user a member of?  Any of the ones mentioned in my article?
0
 
CashcoAuthor Commented:
Yes - I have read your article several times actually since it's linked to so many posts related to this subject matter.  He is not a member of any of those groups and he is a member of a ton of others. Any suggestions from this point?
0
 
Alan HardistyCommented:
Did you run the test on the test site for the user with the problem or another user?

Can you add the problem user to your phone?
0
 
CashcoAuthor Commented:
No - I cannot add his account to any other devices because I have an ipad he wants connected too.  I ran the test as myself I think - I'll rerun with his name (sorry, mindflub)
0
 
CashcoAuthor Commented:
Connectivity Test Successful
 
Test Details
       Attempting the Autodiscover and Exchange ActiveSync test (if requested).
       Autodiscover was successfully tested for Exchange ActiveSync.
              Test Steps
              Attempting each method of contacting the Autodiscover service.
       The Autodiscover service was tested successfully.
              Test Steps
              Attempting to test potential Autodiscover URL https://Site.com/AutoDiscover/AutoDiscover.xml
       Testing of this potential Autodiscover URL failed.
              Test Steps

       Attempting to test potential Autodiscover URL https://autodiscover.Site.com/AutoDiscover/AutoDiscover.xml
       Testing of the Autodiscover URL was successful.
              Test Steps
              Attempting to resolve the host name autodiscover.Site.com in DNS.
       The host name resolved successfully.
              Additional Details

       Testing TCP port 443 on host autodiscover.Site.com to ensure it's listening and open.
       The port was opened successfully.
       Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
              Test Steps

       Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
              Additional Details

       Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
       ExRCA successfully retrieved Autodiscover settings by sending an Autodiscover POST.
              Test Steps
              ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.Site.com/AutoDiscover/AutoDiscover.xml for user name@Site.com.
       The Autodiscover XML response was successfully retrieved.
              Additional Details
       Autodiscover Account Settings
XML response:
<?xml version="1.0"?>
<Autodiscover xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/mobilesync/responseschema/2006">
<Culture>en:us</Culture>
<User>
<DisplayName>Vanderbilt, Darrin</DisplayName>
<EMailAddress>Name@Site.com</EMailAddress>
</User>
<Action>
<Settings>
<Server>
<Type>MobileSync</Type>
<Url>https://mail.Site.com/Microsoft-Server-ActiveSync</Url>
<Name>https://mail.Site.com/Microsoft-Server-ActiveSync</Name>
</Server>
</Settings>
</Action>
</Response>
</Autodiscover>
0
 
Alan HardistyCommented:
Okay - so the test passes for them too!

What settings are you entering in to the iPad / iPhone specifically?
0
 
CashcoAuthor Commented:
The same info i've entered in for the other 25 users with the exception of his name.  (thanks for your help btw)
0
 
Alan HardistyCommented:
Hmmm - pesky problems!

Have you added any account to their iPad / iPhone successfully?  If not - Can you create a new test account for the user and set that up on their iPad please to see if something can work on it.
0
 
CashcoAuthor Commented:
Yes - I'll start creating a test account now.
0
 
CashcoAuthor Commented:
Yes- It worked on his ipad with the test account. it has to be his permissions then eh?
0
 
Alan HardistyCommented:
Quite possibly.

Can you please export his mailbox to a .PST file, then import the mail via Outlook to the test account and then delete and re-create the test account on the iPad again please.  Does it work this time around?
0
 
CashcoAuthor Commented:
Excellent support - Alan really pulled though on this one.
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

  • 10
  • 8
Tackle projects and never again get stuck behind a technical roadblock.
Join Now