Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 589
  • Last Modified:

Issues connect to Exchange through IOS6

Hello there, here is what I"m facing.  I have a new employee that's trying to attach her email to her company owned Iphone 5.  My COO, who's been with the company for 2 years added her own exchange inbox just fine, but when she added the new employee's inbox, which I mirrored the COO's settings on exactly, it didn't work.

I'm running Exchange 2010 Version: 14.02.0328.009 and the Iphone is running IOS6.
0
murphybrown22
Asked:
murphybrown22
  • 7
  • 6
1 Solution
 
Alan HardistyCo-OwnerCommented:
Please have a read of my article and check the inherited permissions / group membership which cause problems with Activesync:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html

Alan
0
 
murphybrown22Author Commented:
No dice Alan...I tried that and it didn't work.  Do I need to apply updates to my exchange server box to make that happen?
0
 
Alan HardistyCo-OwnerCommented:
No - it should either fix it or not.

Please visit https://testexchangeconnectivity.com and run the Exchange Activesync Test and post the results (hide your domain name / IP if you want to - or I can).

Alan
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
murphybrown22Author Commented:
will I need to do it outside of our network?
0
 
Alan HardistyCo-OwnerCommented:
No - it works inside or outside the LAN.
0
 
murphybrown22Author Commented:
ExRCA is testing Exchange ActiveSync.
The Exchange ActiveSync test failed.
Test Steps
Attempting the Autodiscover and Exchange ActiveSync test (if requested).
Testing of Autodiscover for Exchange ActiveSync failed.
Test Steps
Attempting each method of contacting the Autodiscover service.
The Autodiscover service couldn't be contacted successfully by any method.
Test Steps
Attempting to test potential Autodiscover URL https://domain.org/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Test Steps
Attempting to resolve the host name domain.org in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 555.55.555.55
Testing TCP port 443 on host domain.org to ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Test Steps
ExRCA is attempting to obtain the SSL certificate from remote server domain.org on port 443.
ExRCA successfully obtained the remote SSL certificate.
Additional Details
Remote Certificate Subject: CN=place, O=Place, L=location, S=Indiana, C=US, Issuer: CN=place, O=place, L=location S=Indiana, C=US.
Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it
Additional Details
Host name domain.org doesn't match any name found on the server certificate CN=place.org, O=place, L=location, S=Indiana, C=US.
Attempting to test potential Autodiscover URL https://autodiscover.domain.org/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Test Steps
Attempting to resolve the host name autodiscover.domain.org in DNS.
The host name couldn't be resolved.
Tell me more about this issue and how to resolve it
Additional Details
Host autodiscover.domain.org couldn't be resolved in DNS InfoDomainNonexistent.
Attempting to contact the Autodiscover service using the HTTP redirect method.
The attempt to contact Autodiscover using the HTTP Redirect method failed.
Test Steps
Attempting to resolve the host name autodiscover.domain.org in DNS.
The host name couldn't be resolved.
 Tell me more about this issue and how to resolve it
Additional Details
Host autodiscover.domain.org couldn't be resolved in DNS InfoDomainNonexistent.
Attempting to contact the Autodiscover service using the DNS SRV redirect method.
ExRCA failed to contact the Autodiscover service using the DNS SRV redirect method.
Test Steps
Attempting to locate SRV record _autodiscover._tcp.domain.org in DNS.
The Autodiscover SRV record wasn't found in DNS.
 Tell me more about this issue and how to resolve it
0
 
Alan HardistyCo-OwnerCommented:
Looks like Autodiscover doesn't work.

What names are in your SSL certificate?

Do you have an Autodiscover A record or and SRV record pointing to a name that is included in your SSL certificate?

Do you have a 3rd party SSL certificate or a self-issued one?
0
 
murphybrown22Author Commented:
How would I find that information?
0
 
Alan HardistyCo-OwnerCommented:
Don't worry - I just did!

You only have a self-issued certificate with server and server.internaldomain.local in the certificate names.  For Activesync to work, you need the external FQDN included in the SSL certificate and by the looks of it, mail.externaldomain.org works for you.

autodiscover.externaldomain.org doesn't resolve to anything.

If you connect the iPhone to WiFi - can you add the Exchange account?

Do your other iPhones work externally from your network?
0
 
murphybrown22Author Commented:
If you connect the iPhone to WiFi - can you add the Exchange account?
Negative

Do your other iPhones work externally from your network?
Some do...some do not
0
 
Alan HardistyCo-OwnerCommented:
Okay - so if you have sporadic connectivity - would you like them all to work?

If you would, I suggest you buy a 3rd party SSL certificate - GoDaddy are very cheap and work well.  A 5-name SSL certificate (SAN / UCC) will cost about $90 a year and then add an autodiscover A record to your external DNS records and point it to your Public IP Address 24.xxx.xxx.14 and then you should be good to go.

To get a certificate installed, you need to generate an SSL certificate request, buy the certificate, copy the request file into the website, approve the certificate, download, install and enable the certificate.
0
 
murphybrown22Author Commented:
Would GoDaddy assist with the AutoDiscover setup?
0
 
Alan HardistyCo-OwnerCommented:
Yes - if your domain is hosted with them, otherwise No.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 7
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now