Solved

Exchange 2007 SP2 Iphone unable to verify account info

Posted on 2013-11-12
6
485 Views
Last Modified: 2013-11-16
Hi,
I have a customer with SBS2008, running Exchange 2007 SP2, its a small office and they have only ever used Outlook internally and OWA from home, this has all worked fine for many years.

They have just bought their first Iphone and IPAD. I have set up many iphones with later versions of exchange and its been easy.

With this Exchange 2007 all I get is "unable to verify account info" (with or without SSL)

Where should I start? 443 is open and I didn't think autodiscover was part of 2007? see below

Other info
There is no SSL certificate.

used testconnectivity.microsoft.com which reports
The Microsoft Connectivity Analyzer is testing Exchange ActiveSync.  
  The Exchange ActiveSync test failed.
 
 Additional Details  
 Test Steps
 
 Attempting the Autodiscover and Exchange ActiveSync test (if requested).
  Testing of Autodiscover for Exchange ActiveSync failed.
 
 Additional Details
 Test Steps
 
 Attempting each method of contacting the Autodiscover service.
  The Autodiscover service couldn't be contacted successfully by any method.
 
 Additional Details
 Test Steps
 
 Attempting to test potential Autodiscover URL https://xxxxxxx.co.uk/AutoDiscover/AutoDiscover.xml 
  Testing of this potential Autodiscover URL failed.
 
 Additional Details
  Test Steps
 
 Attempting to resolve the host name xxxxxxx.co.uk in DNS.
  The host name resolved successfully.
 
 Additional Details
  Testing TCP port 443 on host xxxxxxx.co.uk to ensure it's listening and open.
  The port was opened successfully.
 
 Additional Details
  Testing the SSL certificate to make sure it's valid.
  The SSL certificate failed one or more certificate validation checks.
 
 Additional Details
  Test Steps
  Attempting to test potential Autodiscover URL https://autodiscover.xxxxxxx.co.uk/AutoDiscover/AutoDiscover.xml 
  Testing of this potential Autodiscover URL failed.
 
 Additional Details
 Test Steps
 
 Attempting to resolve the host name autodiscover.xxxxxxx.co.uk in DNS.
  The host name couldn't be resolved.
   Tell me more about this issue and how to resolve it
 
 Additional Details

 Attempting to contact the Autodiscover service using the HTTP redirect method.
  The attempt to contact Autodiscover using the HTTP Redirect method failed.
 
 Additional Details
 Test Steps
 
 Attempting to resolve the host name autodiscover.xxxxxxx.co.uk in DNS.
  The host name couldn't be resolved.
   Tell me more about this issue and how to resolve it
 
 Additional Details

 Attempting to contact the Autodiscover service using the DNS SRV redirect method.
  The Microsoft Connectivity Analyzer failed to contact the Autodiscover service using the DNS SRV redirect method.
 
 Additional Details
 
 Test Steps
 
 Attempting to locate SRV record _autodiscover._tcp.xxxxxxx.co.uk in DNS.
  The Autodiscover SRV record wasn't found in DNS.
0
Comment
Question by:Insideview
6 Comments
 
LVL 22

Expert Comment

by:Nick Rhode
ID: 39642024
Yes, auto-discover is part of exchange 2007:

http://technet.microsoft.com/en-us/library/aa995962(v=exchg.80).aspx

Do you have a valid certificate?  Doesn't look like one is assigned.
0
 
LVL 8

Expert Comment

by:vSolutionsIT
ID: 39643590
Autodiscover was present in Exchange 2007, however you can configure your devices manually as well.
Run EXBPA on the exchange server on and let us know if it reports any errors.
Enable diagnostic logging for ActiveSync on the exchange server and then check if it reports any errors/warnings when those devices tries to access active sync.
Let us know if you are using third party certificate...looking at the EXCRA results doesn't look like you are using one..that's ok. If you are using a  internal CA certificate then ensure it is installed on the client device as well.
Check authentication settings for Exchnge virtual directores in IIS. Below article will help you with it.

http://technet.microsoft.com/en-us/library/gg263433(v=exchg.80).aspx
0
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 39644574
First thing I would do is update to Exchange 2007 SP3 with the latest rollup. There have been a lot of problems with iOS and ActiveSync and you should use the latest version of Exchange and iOS before you start looking at anything else.

A trusted commercial certificate would be the best option here - it will save you a lot of hassle. Those can be found for less than $60/year from various sources. Running Exchange 2007 and higher without an SSL certificate isn't really an option.

Simon.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:Insideview
ID: 39644672
Thank you for the comments, I am many miles from the site and don't want to do SP3 remotely so I will wait until Friday when I am next there.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39645168
SP3 remotely isn't a problem, I have done it 100s of times. As long as you aren't connecting via RWW then it is run setup.exe and go and get some coffee.

Simon.
0
 

Author Closing Comment

by:Insideview
ID: 39653620
should have tried the obvious first! Thanks
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
A procedure for exporting installed hotfix details of remote computers using powershell
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question