Solved

Activesync Exchange 2010 will not verify account iOS users

Posted on 2013-05-25
4
551 Views
Last Modified: 2013-06-03
I've been working on this for too long now. I have 2 iphone users windows server 2008 R2, Exchange 2010 who cannot get their iphones connected using exchaneg activesync. One of the iphones was working for several months and one is brand new. I have a android device that is working with activesync. The problems started when the Exchange transaction logs filled up and their w3wp.exe processes were consuming a ton of cpu. I finally have that straightened out. Their certificate has all the correct names, autodiscover is working properly, DNS is working, I have deleted and recreated a few of the iis 7.5 virtual directories, checked authentication and permissions. I have been at this for 3 straight days and a bunch of hours prior to that. The activesync broke for good last Wednesday right after some strange certificate prompts started in outlook 2007 and above which I believe was related to autodiscover. Like I said, i think I have all of that squared away. The exchange remote tests pass. When I sign into accoutn on the phone, it spins forever verifying account and then eventually fails. I tried a decent number of things on the phone-reset network settings, delete and recreate the account more times than I can count, tried a brand new test user who worked the first time I connected it and then after connecting the problem users successfully one time, they all broke again.  I'm stuck  Any help would be appreciated.
0
Comment
Question by:ctakach
  • 2
4 Comments
 
LVL 4

Expert Comment

by:EddyvanOpdorp
Comment Utility
Hi,

Does the users haves a lots of contacts ? The sollution is to minimize te contacts

See here:
http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/64a0eb7f-658e-421c-86d9-6f0cf6896c51/

his issue is caused by iOS devices trying to sync the contact database of someone with A LOT of contacts (in my case 6000).  Microsoft states that this is only an issue with iOS devices running 5.x and above but I am only seeing this issue with an iPad 3.  In order to identify who is causing the issue:
1. Download and install the Log Parser Studio on your workstation:
http://blogs.technet.com/b/exchange/archive/2012/03/07/introducing-log-parser-studio.aspx
2. Use the Log Parser Studio to analyze the IIS logs of the Client Access Server with the processor issue.  Open the latest log file from here: C:\inetpub\logs\LogFiles\W3SVC1
3. Run the custom Log Parser Query from the following KB to determine which users are causing the issue:
http://support.microsoft.com/kb/2711053
The KB references a few fixes to the issue.  Unfortunately setting a throttling policy did not work for me and the other resolutions, such as disabling contact sync on the device is an extremely poor solution to the issue.  Microsoft insists that this is an Apple issue and that Apple must release a fix.  Personally I think that Microsoft should be able to limit a device that is causing problems and I have refused to allow them to close the case until they provide a resolution.
Good luck and I will repost if I come to a resolution with Microsoft on this.
0
 
LVL 15

Expert Comment

by:msmamji
Comment Utility
I would recommend running Microsoft Exchange ActiveSync Connectivity Tests at
https://www.testexchangeconnectivity.com/
Does it report any errors?
0
 

Accepted Solution

by:
ctakach earned 0 total points
Comment Utility
The customer's Exchange wasn't patched.  As soon as I patched it up to SP3, worked through some initial access issues with the EMC and reset all the authentication and SSL settings, the iPhones worked and the Blackberry user worked.  I still have an Android device that is not working with a 403 error in the iis log.  I moved his mailbox though to a different database. I found this broke the Blackberry user so I moved him back. It was easier to do that than follow RIM's 8 steps which is ridiculous.  The user is switching to an iPhone in the next couple weeks. I am doing a few more tests for the Android user and will move his mailbox back as well if that ends up being the solution. I reset his AD permissions and will have him test as external and internal user to the network. I had tried all of the suggestions above prior to submitting my question.

Just as an aside for other viewers, the w3wp.exe IIS worker processes were so queued up with requests, they couldn't pass the traffic from the phones and wouldn't accept new requests. Best advice I can give for Windows and exchange servers is to always patch first and then try to fix. I did the opposite and wasted a bit of time.
0
 

Author Closing Comment

by:ctakach
Comment Utility
I just kept working at the errors and the proposed solutions had already been tried by me.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now