I have a Windows 2008 Small Business Server that is utilizing the included MS Exchange component. Exchange and OWA have always worked fine. I was tasked with getting an Android phone working with this server using the ActiveSync component. I have done this with Exchange 2003, 2007 and 2010 with no problems at all. The first problem I had was that ActiveSync was being reported as not being installed when I ran the ActiveSync tester from mxtoolbox.com. When I looked at the server, I could see that it was installed and enabled, but it was on a different site than OWA. See the attached picture (screenshot.jpg). The Default Website contained OWA and the SBS Web Applications containing activesync was another site on the server and was not started because it was claiming that the Default Website has the ports open.
As a test, I stopped the default site and started the SBS Web Applications site. At that point, ActiveSync was detected by the tester but it reported that ActiveSync detected, but access denied. [HTTP 403: Disabled for this user] So, I was getting farther. I could not find a reason for the "disabled for this user" because everything is set up correctly and I have followed numerous troubleshooting articles for hours on end trying to figure this out. Part of it may be that I was testing with a self signed cert.
My main question is, why are OWA and ActiveSync on different sites? I only have one public IP address that NATs to the ip address of the internal exchange server for OWA. I obviously can't run both the default website and sbs web applications on the same private ip on the exchange server so I am not sure what to do. The firewall NATS http and https traffic to the single private IP of the Exchange server and the Default Website was running on that. I assume that activesync relies on owa being available? I need to figure out how to get both sites running because I do need OWA and ActiveSync to both work correctly.
I am starting to think I just need to move OWA to the SBS Web Applications site but I am just not sure. That does seem to be the most logical if I knew how to do it.