[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

Some phones not connecting to server after Exchange 2007 to 2013 migration and cert change

Posted on 2013-10-29
7
Medium Priority
?
452 Views
Last Modified: 2014-01-04
After we migrated our Exchange from a Windows Server 2003 R2 server running Outlook 2007 SP3 to a new server running Windows Server 2012 and Exchange 2013, some phones cannot reconnect to the server.

We have tried removing the Exchange account from the phone and adding it back. This worked for some phones but not others. One user even wiped his phone and tried to add the account but it did not work.

There is no problem with any desktop user or OWA user.

One clue may that on a couple of the phones it pointed to a certificate authority that was on the old cert in its error message. We had had to change the UCC cert to point to the new server (and remove the old), and also repointed DNS as part of the migration but these phones are not taking the new path.

Anybody have an idea on troubleshooting steps we could take? Problem phones are mostly LG Lucid and older iPhones + a couple older Motorolas.

I did try mobile device management in the old Exchange console but since we moved the mailboxes already it won't let us manage them. The phones don't exist in the new server mailboxes. I suspect the old association is in place but I don't know how to remove it, or if that is even the problem.


If anyone has any ideas please let me know, thanks!
0
Comment
Question by:Alex Scarfone
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
7 Comments
 

Author Comment

by:Alex Scarfone
ID: 39609297
I meant migrated from Exchange 2007 SP3
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39609365
Who issued the SSL certificate?
There have been some odd results with SSL certificates from the more obscure providers with the roots not being in the devices.

Do check that the correct certificate is being handed out though. Browse to https://host.example.com/Microsoft-Server-ActiveSync - you will get some errors, but eventually you will be able to look at the SSL certificate.

Another option would be to run a test account through the Microsoft test site http://exrca.com/ and see if there are any SSL errors flagged.

Ensure that any iPhones are on the latest iOS available as well.

Simon.
0
 

Author Comment

by:Alex Scarfone
ID: 39609813
Tried https://<host.example.com>/Microsoft-Server-ActiveSync - not sure what to do to get past errors.


http://exrca.com/  gave some clues, we think it might be still pointing at the old server. We are thinking about uninstalling Exchange from the old server and/or shutting it down.

Also, is it possible to update root certificates on phones and also add/import a ucc cert to a phone?
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:Alex Scarfone
ID: 39609869
Note: I can set up a test email account on these phones. The only account I can't set up is one that was already on the phone.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39612263
The whole point of using a trusted SSL certificate is that you don't have to install anything.
If a new account works, then I suggest that you ensure there are no existing ActiveSync partnerships on the account and then recreate.

Simon.
0
 

Accepted Solution

by:
Alex Scarfone earned 0 total points
ID: 39612602
Simon, Thanks for your response.  It looks like the problem was security permissions for users in AD. Some of our users had inheritance disabled (On the Domain Controller, AD users & computers, user properties, Security tab, Advanced - Inheritance needed to be enabled for the problem users).
0
 

Author Closing Comment

by:Alex Scarfone
ID: 39755815
Microsoft site had the answer
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Are you an Exchange administrator employed with an organization? And, have you encountered a corrupt Exchange database due to which you are not able to open its EDB file. This article will explain all the steps to repair corrupt Exchange database.
The core idea of this article is to make you acquainted with the best way in which you can export Exchange mailbox to PST format.
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question