Solved

SBS 2011 ActiveSync fails

Posted on 2013-01-14
9
591 Views
Last Modified: 2016-11-23
I just brought an SBS 2011 box online - pre-installed by Dell. It replaces an older SBS 2003 box.

I've got a UCC SSL Cert from DigiCert, installed it with no problem.

The firewall config was modified so that port-forwarding is pointing to the new server.

Outlook works fine internally. OWA works internally AND externally. I can see the SSL Cert when outside, it's valid, and it correctly displays the DigiCert SSL. This also proves that port-forwarding is set correctly.

Folks who WERE connecting from their iPhones to the older SBS 2003 box now can't connect to the new SBS 2011. Their iPhone will correctly validate to the server, but they won't dl new mail.

I just ran the MS Remote Connectivity Analyzer against this server using a valid username/password pair (OWA works fine on this account), and it kinda fails. See the attached file.

Any ideas?

Thanks lots for any help or ideas ...

--
Remote-Connectivity-Analyzer-for.txt
0
Comment
Question by:RChristopherM
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 4

Expert Comment

by:mprssjpr
ID: 38776336
Part of this looks like an IIS problem:

You say that OWA works, but when logged in, what happens when you hit 'Options' in the top right? Can you actually get to the 'Options' page?

Check each item in IIS under 'default website', (and 'default website' itself) and see that SSL and authentication settings are correct.
0
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 38776340
I notice that the external DNS name you are using is *not* the SBS standard of remote.*

Did you use the wizard to configure this alternate name or did you attempt to configure it manually?
0
 
LVL 4

Expert Comment

by:mprssjpr
ID: 38776406
Sorry - to clarify - the mobile clients that are having problems - have they removed and re-added the account on their devices, or are they the same as they were with the old server?

In addition - is the new server name the same as the old server name, or different? Either way, I suppose, clients will, I'm sure, have to remove and re-add.

Last - you say Outlook only works internally: do you want it to work externally, or is this not a problem?
0
Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 38776437
0
 

Author Comment

by:RChristopherM
ID: 38776543
Alan Hardisty,

Since posting I did verify that at least one user IS able to connect via iPhone and get his email.

I checked his AD object (the guy who CAN sync) against a user who can't sync, and indeed this exactly follows your theory.

I then used the MS Remote Connectivity Analyzer against the user who CAN sync, and it passed. So this also follows your theory.

So ... I'll modify the properties of the users per your article and we'll test tomorrow. Once I verify this I'll let you know. But at this point it looks like you hit it.

I'm beginning to seriously dislike SBS ...

--
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 38776558
Sounds good.

It is a common issue with migrated SBS servers.  I wouldn't blame SBS necessarily - it would be down to Microsoft and their coding.

SBS works very well and is much improved over the earlier versions, although it is the last version they will produce (with Windows and Exchange on the same box).

Alan
0
 

Author Closing Comment

by:RChristopherM
ID: 38779235
Maybe 1/2 of my users had their security set improperly. I reset users' security per this solution and iPhones began magically working.
0
 

Author Comment

by:RChristopherM
ID: 38779247
Alan Hardisty,

Approximately 1/2 of my users had their security set improperly. ALL users were added BEFORE migration, so don't know why some were set properly and others were not.

I reset security per your article and all users can now access email via their iPhones.

Thanks lots for your quick reply and expertise.

--
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 38780542
There is a problem with the migration process that causes this and presumably as the 'fix' is relatively simple, I would imagine it may stay this way for the foreseeable future.

It doesn't help those that don't know the fix of course, but then that's where places like EE can come to people's aid :)

Glad you are all sorted now.

Best wishes

Alan
0

Featured Post

Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question