Solved

iPhone - Exchange 2010 - Can't add account to retreive mail

Posted on 2012-04-03
19
489 Views
Last Modified: 2012-06-22
I've been messing with this for two days now - I've run though all the articles and all the EE posts which pertain to this issue with no luck.  I did however just get this message while looking into settings under Session State and I'm not sure if this is related or not.  
"There was an error while performing this operation.
Details:
Filename: \\?\D:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\web.config
Line number: 38
Error: Configuration section not allowed to be set below application
0
Comment
Question by:Cashco
  • 10
  • 8
19 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37803381
Comment out the line - it hijacks the authentication settings and stops you setting them via IIS.

Then run iisreset and try things again.

Alan
0
 

Author Comment

by:Cashco
ID: 37803386
Does that error even have anything to do with my problem about adding new devices?
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 37803433
Depends.  Do you have any devices added at the moment?

Either way - the line needs to be commented out so that you can control IIS permissions using IIS - it is a common problem and easily rectified.

My article might help you if you still have problems:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html

Alternatively, please visit https://testexchangeconnectivity.com and run the Exchange Activesync Test (without Autodiscover) and post the results obscuring your domain name / IP Address etc.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:Cashco
ID: 37803468
Exchange Activesync Test without autodiscover:
Connectivity Test Successful
 
Test Details
       Attempting the Autodiscover and Exchange ActiveSync test (if requested).
       Autodiscover was successfully tested for Exchange ActiveSync.
              Test Steps
              Attempting each method of contacting the Autodiscover service.
       The Autodiscover service was tested successfully.
              Test Steps
              Attempting to test potential Autodiscover URL https://Site.com/AutoDiscover/AutoDiscover.xml
       Testing of this potential Autodiscover URL failed.
              Test Steps

       Attempting to test potential Autodiscover URL https://autodiscover.Site.com/AutoDiscover/AutoDiscover.xml
       Testing of the Autodiscover URL was successful.
              Test Steps
              Attempting to resolve the host  autodiscover.Site.com in DNS.
       The host  resolved successfully.
              Additional Details

       Testing TCP port 443 on host autodiscover.Site.com to ensure it's listening and open.
       The port was opened successfully.
       Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
              Test Steps

       Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
              Additional Details

       Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
       ExRCA successfully retrieved Autodiscover settings by sending an Autodiscover POST.
              Test Steps
              ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.Site.com/AutoDiscover/AutoDiscover.xml for user Names@Site.com.
       The Autodiscover XML response was successfully retrieved.
              Additional Details
       Autodiscover Account Settings
XML response:
<?xml version="1.0"?>
<Autodiscover xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/mobilesync/responseschema/2006">
<Culture>en:us</Culture>
<User>
<Display>Last, Name</Display>
<EMailAddress>NameS@Site.com</EMailAddress>
</User>
<Action>
<Settings>
<Server>
<Type>MobileSync</Type>
<Url>https://mail.Site.com/Microsoft-Server-ActiveSync</Url>
<>https://mail.Site.com/Microsoft-Server-ActiveSync</>
</Server>
</Settings>
</Action>
</Response>
</Autodiscover>
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37803489
Okay - so the test passes, which is good.  Have you looked at my article which discusses Inherited Permissions and / or Group Membership of specific groups that cause Activesync problems?
0
 

Author Comment

by:Cashco
ID: 37803532
OKay - I found this a few days ago and disregarded it as a solution because the inherited permissions is checked - ALTHOUGH I just added MY email to this phone and it worked! Soooo, it is a problem with this particular user. But as I mentioned before he appears to be setup correctly.  He does have an older model iphone which still works on his credentials so I dont know why it won't allow a new one to be added to the mix
______________________________________________________________________________________________
Accepted Solution

by: demazterPosted on 2010-01-05 at 01:29:51ID: 26178619

Is this happening for all users or just a select few?

I had a similar problem with my first migration to Exchange 2010 and it was down to a security permission on the Active Directory User account.

In Active Directory Users and Computers right click on the user and select properties then under the security tab and advanced make sure the box is checked for inheritable permissions.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37803553
That is exactly what my article discusses.

If you uncheck and apply the Inherited Permissions and then re-check and re-apply the permissions, what happens?

What Groups is the user a member of?  Any of the ones mentioned in my article?
0
 

Author Comment

by:Cashco
ID: 37803598
Yes - I have read your article several times actually since it's linked to so many posts related to this subject matter.  He is not a member of any of those groups and he is a member of a ton of others. Any suggestions from this point?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37803631
Did you run the test on the test site for the user with the problem or another user?

Can you add the problem user to your phone?
0
 

Author Comment

by:Cashco
ID: 37803647
No - I cannot add his account to any other devices because I have an ipad he wants connected too.  I ran the test as myself I think - I'll rerun with his name (sorry, mindflub)
0
 

Author Comment

by:Cashco
ID: 37803656
Connectivity Test Successful
 
Test Details
       Attempting the Autodiscover and Exchange ActiveSync test (if requested).
       Autodiscover was successfully tested for Exchange ActiveSync.
              Test Steps
              Attempting each method of contacting the Autodiscover service.
       The Autodiscover service was tested successfully.
              Test Steps
              Attempting to test potential Autodiscover URL https://Site.com/AutoDiscover/AutoDiscover.xml
       Testing of this potential Autodiscover URL failed.
              Test Steps

       Attempting to test potential Autodiscover URL https://autodiscover.Site.com/AutoDiscover/AutoDiscover.xml
       Testing of the Autodiscover URL was successful.
              Test Steps
              Attempting to resolve the host name autodiscover.Site.com in DNS.
       The host name resolved successfully.
              Additional Details

       Testing TCP port 443 on host autodiscover.Site.com to ensure it's listening and open.
       The port was opened successfully.
       Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
              Test Steps

       Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
              Additional Details

       Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
       ExRCA successfully retrieved Autodiscover settings by sending an Autodiscover POST.
              Test Steps
              ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.Site.com/AutoDiscover/AutoDiscover.xml for user name@Site.com.
       The Autodiscover XML response was successfully retrieved.
              Additional Details
       Autodiscover Account Settings
XML response:
<?xml version="1.0"?>
<Autodiscover xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/mobilesync/responseschema/2006">
<Culture>en:us</Culture>
<User>
<DisplayName>Vanderbilt, Darrin</DisplayName>
<EMailAddress>Name@Site.com</EMailAddress>
</User>
<Action>
<Settings>
<Server>
<Type>MobileSync</Type>
<Url>https://mail.Site.com/Microsoft-Server-ActiveSync</Url>
<Name>https://mail.Site.com/Microsoft-Server-ActiveSync</Name>
</Server>
</Settings>
</Action>
</Response>
</Autodiscover>
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37803699
Okay - so the test passes for them too!

What settings are you entering in to the iPad / iPhone specifically?
0
 

Author Comment

by:Cashco
ID: 37803708
The same info i've entered in for the other 25 users with the exception of his name.  (thanks for your help btw)
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37803720
Hmmm - pesky problems!

Have you added any account to their iPad / iPhone successfully?  If not - Can you create a new test account for the user and set that up on their iPad please to see if something can work on it.
0
 

Author Comment

by:Cashco
ID: 37803726
Yes - I'll start creating a test account now.
0
 

Author Comment

by:Cashco
ID: 37803761
Yes- It worked on his ipad with the test account. it has to be his permissions then eh?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 37803783
Quite possibly.

Can you please export his mailbox to a .PST file, then import the mail via Outlook to the test account and then delete and re-create the test account on the iPad again please.  Does it work this time around?
0
 

Author Closing Comment

by:Cashco
ID: 37814283
Excellent support - Alan really pulled though on this one.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now