Solved

Issues connect to Exchange through IOS6

Posted on 2013-01-10
13
566 Views
Last Modified: 2013-01-17
Hello there, here is what I"m facing.  I have a new employee that's trying to attach her email to her company owned Iphone 5.  My COO, who's been with the company for 2 years added her own exchange inbox just fine, but when she added the new employee's inbox, which I mirrored the COO's settings on exactly, it didn't work.

I'm running Exchange 2010 Version: 14.02.0328.009 and the Iphone is running IOS6.
0
Comment
Question by:murphybrown22
  • 7
  • 6
13 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 38764795
Please have a read of my article and check the inherited permissions / group membership which cause problems with Activesync:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html

Alan
0
 

Author Comment

by:murphybrown22
ID: 38764852
No dice Alan...I tried that and it didn't work.  Do I need to apply updates to my exchange server box to make that happen?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 38764867
No - it should either fix it or not.

Please visit https://testexchangeconnectivity.com and run the Exchange Activesync Test and post the results (hide your domain name / IP if you want to - or I can).

Alan
0
 

Author Comment

by:murphybrown22
ID: 38764899
will I need to do it outside of our network?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 38764906
No - it works inside or outside the LAN.
0
 

Author Comment

by:murphybrown22
ID: 38764938
ExRCA is testing Exchange ActiveSync.
The Exchange ActiveSync test failed.
Test Steps
Attempting the Autodiscover and Exchange ActiveSync test (if requested).
Testing of Autodiscover for Exchange ActiveSync failed.
Test Steps
Attempting each method of contacting the Autodiscover service.
The Autodiscover service couldn't be contacted successfully by any method.
Test Steps
Attempting to test potential Autodiscover URL https://domain.org/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Test Steps
Attempting to resolve the host name domain.org in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 555.55.555.55
Testing TCP port 443 on host domain.org to ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Test Steps
ExRCA is attempting to obtain the SSL certificate from remote server domain.org on port 443.
ExRCA successfully obtained the remote SSL certificate.
Additional Details
Remote Certificate Subject: CN=place, O=Place, L=location, S=Indiana, C=US, Issuer: CN=place, O=place, L=location S=Indiana, C=US.
Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it
Additional Details
Host name domain.org doesn't match any name found on the server certificate CN=place.org, O=place, L=location, S=Indiana, C=US.
Attempting to test potential Autodiscover URL https://autodiscover.domain.org/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Test Steps
Attempting to resolve the host name autodiscover.domain.org in DNS.
The host name couldn't be resolved.
Tell me more about this issue and how to resolve it
Additional Details
Host autodiscover.domain.org couldn't be resolved in DNS InfoDomainNonexistent.
Attempting to contact the Autodiscover service using the HTTP redirect method.
The attempt to contact Autodiscover using the HTTP Redirect method failed.
Test Steps
Attempting to resolve the host name autodiscover.domain.org in DNS.
The host name couldn't be resolved.
 Tell me more about this issue and how to resolve it
Additional Details
Host autodiscover.domain.org couldn't be resolved in DNS InfoDomainNonexistent.
Attempting to contact the Autodiscover service using the DNS SRV redirect method.
ExRCA failed to contact the Autodiscover service using the DNS SRV redirect method.
Test Steps
Attempting to locate SRV record _autodiscover._tcp.domain.org in DNS.
The Autodiscover SRV record wasn't found in DNS.
 Tell me more about this issue and how to resolve it
0
Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 38764952
Looks like Autodiscover doesn't work.

What names are in your SSL certificate?

Do you have an Autodiscover A record or and SRV record pointing to a name that is included in your SSL certificate?

Do you have a 3rd party SSL certificate or a self-issued one?
0
 

Author Comment

by:murphybrown22
ID: 38764973
How would I find that information?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 38765003
Don't worry - I just did!

You only have a self-issued certificate with server and server.internaldomain.local in the certificate names.  For Activesync to work, you need the external FQDN included in the SSL certificate and by the looks of it, mail.externaldomain.org works for you.

autodiscover.externaldomain.org doesn't resolve to anything.

If you connect the iPhone to WiFi - can you add the Exchange account?

Do your other iPhones work externally from your network?
0
 

Author Comment

by:murphybrown22
ID: 38765020
If you connect the iPhone to WiFi - can you add the Exchange account?
Negative

Do your other iPhones work externally from your network?
Some do...some do not
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 38765043
Okay - so if you have sporadic connectivity - would you like them all to work?

If you would, I suggest you buy a 3rd party SSL certificate - GoDaddy are very cheap and work well.  A 5-name SSL certificate (SAN / UCC) will cost about $90 a year and then add an autodiscover A record to your external DNS records and point it to your Public IP Address 24.xxx.xxx.14 and then you should be good to go.

To get a certificate installed, you need to generate an SSL certificate request, buy the certificate, copy the request file into the website, approve the certificate, download, install and enable the certificate.
0
 

Author Comment

by:murphybrown22
ID: 38767158
Would GoDaddy assist with the AutoDiscover setup?
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 38768255
Yes - if your domain is hosted with them, otherwise No.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
how to add IIS SMTP to handle application/Scanner relays into office 365.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now