[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 503
  • Last Modified:

Exchange 2007 SP2 Iphone unable to verify account info

Hi,
I have a customer with SBS2008, running Exchange 2007 SP2, its a small office and they have only ever used Outlook internally and OWA from home, this has all worked fine for many years.

They have just bought their first Iphone and IPAD. I have set up many iphones with later versions of exchange and its been easy.

With this Exchange 2007 all I get is "unable to verify account info" (with or without SSL)

Where should I start? 443 is open and I didn't think autodiscover was part of 2007? see below

Other info
There is no SSL certificate.

used testconnectivity.microsoft.com which reports
The Microsoft Connectivity Analyzer is testing Exchange ActiveSync.  
  The Exchange ActiveSync test failed.
 
 Additional Details  
 Test Steps
 
 Attempting the Autodiscover and Exchange ActiveSync test (if requested).
  Testing of Autodiscover for Exchange ActiveSync failed.
 
 Additional Details
 Test Steps
 
 Attempting each method of contacting the Autodiscover service.
  The Autodiscover service couldn't be contacted successfully by any method.
 
 Additional Details
 Test Steps
 
 Attempting to test potential Autodiscover URL https://xxxxxxx.co.uk/AutoDiscover/AutoDiscover.xml 
  Testing of this potential Autodiscover URL failed.
 
 Additional Details
  Test Steps
 
 Attempting to resolve the host name xxxxxxx.co.uk in DNS.
  The host name resolved successfully.
 
 Additional Details
  Testing TCP port 443 on host xxxxxxx.co.uk to ensure it's listening and open.
  The port was opened successfully.
 
 Additional Details
  Testing the SSL certificate to make sure it's valid.
  The SSL certificate failed one or more certificate validation checks.
 
 Additional Details
  Test Steps
  Attempting to test potential Autodiscover URL https://autodiscover.xxxxxxx.co.uk/AutoDiscover/AutoDiscover.xml 
  Testing of this potential Autodiscover URL failed.
 
 Additional Details
 Test Steps
 
 Attempting to resolve the host name autodiscover.xxxxxxx.co.uk in DNS.
  The host name couldn't be resolved.
   Tell me more about this issue and how to resolve it
 
 Additional Details

 Attempting to contact the Autodiscover service using the HTTP redirect method.
  The attempt to contact Autodiscover using the HTTP Redirect method failed.
 
 Additional Details
 Test Steps
 
 Attempting to resolve the host name autodiscover.xxxxxxx.co.uk in DNS.
  The host name couldn't be resolved.
   Tell me more about this issue and how to resolve it
 
 Additional Details

 Attempting to contact the Autodiscover service using the DNS SRV redirect method.
  The Microsoft Connectivity Analyzer failed to contact the Autodiscover service using the DNS SRV redirect method.
 
 Additional Details
 
 Test Steps
 
 Attempting to locate SRV record _autodiscover._tcp.xxxxxxx.co.uk in DNS.
  The Autodiscover SRV record wasn't found in DNS.
0
Insideview
Asked:
Insideview
1 Solution
 
Nick RhodeIT DirectorCommented:
Yes, auto-discover is part of exchange 2007:

http://technet.microsoft.com/en-us/library/aa995962(v=exchg.80).aspx

Do you have a valid certificate?  Doesn't look like one is assigned.
0
 
vSolutionsITCommented:
Autodiscover was present in Exchange 2007, however you can configure your devices manually as well.
Run EXBPA on the exchange server on and let us know if it reports any errors.
Enable diagnostic logging for ActiveSync on the exchange server and then check if it reports any errors/warnings when those devices tries to access active sync.
Let us know if you are using third party certificate...looking at the EXCRA results doesn't look like you are using one..that's ok. If you are using a  internal CA certificate then ensure it is installed on the client device as well.
Check authentication settings for Exchnge virtual directores in IIS. Below article will help you with it.

http://technet.microsoft.com/en-us/library/gg263433(v=exchg.80).aspx
0
 
Simon Butler (Sembee)ConsultantCommented:
First thing I would do is update to Exchange 2007 SP3 with the latest rollup. There have been a lot of problems with iOS and ActiveSync and you should use the latest version of Exchange and iOS before you start looking at anything else.

A trusted commercial certificate would be the best option here - it will save you a lot of hassle. Those can be found for less than $60/year from various sources. Running Exchange 2007 and higher without an SSL certificate isn't really an option.

Simon.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
InsideviewAuthor Commented:
Thank you for the comments, I am many miles from the site and don't want to do SP3 remotely so I will wait until Friday when I am next there.
0
 
Simon Butler (Sembee)ConsultantCommented:
SP3 remotely isn't a problem, I have done it 100s of times. As long as you aren't connecting via RWW then it is run setup.exe and go and get some coffee.

Simon.
0
 
InsideviewAuthor Commented:
should have tried the obvious first! Thanks
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now