SBS2003 Standard with Exchange 2003 - with Blackberry BIS by OWA

TrevorWhite
TrevorWhite used Ask the Experts™
on
Hi Guys,

I've setup many SBS2003 R2 premium boxes with ISA2004 installed and run Blackberry devices associated through BIS using the network providers web site (in this case mobileemail.vodafone.net)

However I have another site now that is running SBS2003 standard (no ISA2004) and I can't get the Blackberry devices to connect over BIS.

The OWA service runs fine and the test account I'm using logs in and the email can be browsed. If I attempt to associate the blackberry account with the Exchange account I get the error message 'An error occured during email account validation . . .' (see attachment)

I've tried all sorts of variations in the Vodafone wizard but this message keeps comming up.

Is there something I don't know about SBS2003 standard like authentication methods.
Do I need any other ports open other trhan those to allow OWA to work ?? for instance.

Not sure where or how to start my debug - this has all worked out of the box before.
I have spoken to Vodafone who assure me the accounts have been reset correctly (they were connected to third party POP accounts before)

So IN summary:
SBS 2003 with Exchange 2003 is functioning (even has iphones connected to it OK)
Vodafone accounts have been reset and I have a user account
SBS2003 OWA works fine
Vodafone account wont associate with Exchange.

Any thoughts - its quite urgent from the customer point of view as we went live a few days ago and noone has mobile mail anymore :-((

I have remote acces to the server this evening.

Regards
Trevor
VodafoneBB-Associate-fail.docx
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2013

Commented:
The most common problem I run into, especially if the devices were working with POP accounts before is the vendor has not changed the device account from a BIS (Blackbery Internet Service) account to a BES (Blackberry Enterprise Service) account.  The latter is required for BES use.
Top Expert 2013

Commented:
To add; check the BES logs, and the ____MAGT___ log (may be different with newer versions of BES) and if it is a BIS account you will usualy see something like:
_____date__time---{e-mail@address.abc}  Still handled by desktop
Not that it is handled by desktop but it assumes that when RIM doesn't return a PIN.

I have had to call RIM directly on a few occations because the vendor assured me the account was changed, but RIM confirmed it wasn't.

The BB should be able to connect to OWA without a BES account, but not connect to BES server.  Having said that I heard they were talking about changing this requirement.
TrevorWhiteIT Consultant

Author

Commented:
Hi Guys,
Thanks for responses,
The accounts are moving from x@domain.co.uk on standard POP accounts (so BIS) to x@domain.co.uk on the Exchange2003 server with no BES installed - so still BES.

Originally I couldn't create an account for an IMEI/PIN pair in the Vodafone website. It stated that this had to be done on the handset. I got hold of a tech guy with Vodafones agent who was able to reset the accounts so separating them from the old accounts.

Where are those logs and what should I check for good BIS readiness.

Thanks

Trevor
Acronis in Gartner 2019 MQ for datacenter backup

It is an honor to be featured in Gartner 2019 Magic Quadrant for Datacenter Backup and Recovery Solutions. Gartner’s MQ sets a high standard and earning a place on their grid is a great affirmation that Acronis is delivering on our mission to protect all data, apps, and systems.

TrevorWhiteIT Consultant

Author

Commented:
Sorry end of first para should read - so still BIS.

Thanks
Top Expert 2013

Commented:
My appologies I guess dyslexia kicked in and I read it as BES in the subject line :-)

Only requirement is port 443 be open and if iPhones are working there is nothing else to configure.  However BIS configuartion options are changing slightly, at least here in Canada.  They no longer seem to offer the on-line BIS web configuration, instead use OWA on the device itself.

My instructions to users are as follows:

Add mail account by selecting setup | email | other
enter e-mail address with wrong password, it will fail (thanks to alanhardisty for this tip)

there will be an option displayed “I will provide the settings".
Two options POP/IMAP  or Outlook Web Access, choose later
Enter your e-mail address,  if multiple addresses use default/reply address
Enter password (domain password)
Enter OWA URL:  https://remote.domain.abc/owa
Enter user name (domain logon name)
Enter mailbox name: check Exchange management console. Usually the same as domain logon name.
TrevorWhiteIT Consultant

Author

Commented:
Hi RobWill,

Yeah port 443 is already open for SSL.
Just tried your procedure on my Blackberry but no go for this domain and account.

How can I start to debug and determine what is actually failing.
The Vodafone agent sent a whole raft of checks but they all were essentially negated since both OWA and iPhones are working OK.

For instance how does BB authenticate ???
Whats different when theres no ISA2004 firewall with regard to authentication ???

Quite frustrating.
Trev.
Top Expert 2013
Commented:
BB, using OWA, authenticates through Active directory using a combination of domain name, user name, and password.

There is no difference on the SBS with or without ISA.  ISA itself requires extra configuration, but connecting to SBS without it is much easier.

It's almost guaranteed that it's not a server issue as the iPhones connect.  
It could be:
-It could be the user account in AD.  Make sure in the user’s AD profile, under the "Exchange features" tab, the appropriate "Mobile services" and "protocols" are enabled.
-if not present add the “mobile users group” to their “member of” tab of their AD profile (shouldn’t be necessary)
-it can be that the mailbox name is not the same as the user name.  See "Note: to determine mailbox name..."
http://btsc.webapps.blackberry.com/btsc/viewdocument.do;jsessionid=0F96AF5AB155B151A7C9BC95D59BEF88?noCount=true&externalId=KB03133&sliceId=2&cmd=displayKC&dialogID=20964176&docType=kc&stateId=1+0+20960624&docTypeID=DT_SUPPORTISSUE_1_1&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl
-sometimes in the connection on the BB you have to play with the domain/username combination in different fields.  Try substituting user name with domain\username
-It could also be a vendor issue, but I am doubtful
TrevorWhiteIT Consultant

Author

Commented:
Oh Happy Happy day . . .
Well done that man . . . .
Your penultimate point seams to shine appropriate light.
The mailbox is named after the whole email address not just the bit to the left of the @

Let me finish off and I'll close this and award points.

Yipppeeeee !!!

Trev
TrevorWhiteIT Consultant

Author

Commented:
I can't confirm that mail is arriving on the handset until Tomorrow morning.
But all is looking good. Will close down and award points in the morning.

Thanks for your time and attention Rob Will.

Regards

Trevor
Top Expert 2013

Commented:
Good to hear Trevor. Glad to help.  Let's hope all is well in the morning.
Cheers!
--Rob
TrevorWhiteIT Consultant

Author

Commented:
Sorry for delayed assigning of points

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial