Solved

Exchange 2010 Iphone Users Orphaned Inbox folders Please Help!!!!!!!

Posted on 2015-01-20
5
1,189 Views
Last Modified: 2015-01-21
Exchange 2010 Enterprise SP164 bit
Windows 2008 R2 Enterprise SP1

Just migrated from Exchange 2007 to Exchange 2010

Email works on all Outlook clients inbound and outbound.
OWA clients work also.

Have several users with iPhones none of which are working.

when looking ate the email on the iPhone you see this

Inbox
    *** Orphaned mailbox  Bill Pay
 etc.

I deleted the account on the iphone added it back and now all that shows is the imbox

Can not send or receive emails at all.

I have Iphone 6 Plus, Iphone 5S, Iphone 5, Iphone 4S and Iphone 4

When I look at the Mailbox using EMC right click then click on Manage Mobile Phone  each client has no phone listed

This all worked great on Exchange 2007.

Just checked EMC again and found 2 out of the 20 iphone users now show a phone listed when I manage mobile phone


When I go into OWA for one of these accounts I do not see the folders either same account using Outlook and all folders and email work.
On OWA I found the folders all in the deleted folder


I ran Exchange ActiveSync Autodicover Test and it was successful.

What am I missing.

Thanks
0
Comment
Question by:Thomas Grassi
  • 3
  • 2
5 Comments
 
LVL 53

Expert Comment

by:Will Szymkowski
Comment Utility
What are your activesync internal and external URL's set for? When you run the Test Email Auto config from Outlook what does your accounts point to? Do they match up?

Also, have you run the Microsoft Connectivity Analyzer for ActiveSync?
https://testconnectivity.microsoft.com/

Will.
0
 
LVL 23

Author Comment

by:Thomas Grassi
Comment Utility
Will

Welcome back

internal URL
https://serv025.our.network.tgcsnet.com/microsoft-server=activesync
External URL
https://webmail.tgcsnet.com/microsoft-server-activesync


Not sure what you mean

When you run the Test Email Auto config from Outlook what does your accounts point to? Do they match up?

Where do I do that?

Yes I ran the discovery tests

1. Exchange ActiveSync Autodiscover       ran successfully

2.  Exchange ActiveSync     Failed  see below results


"The test of the FolderSync command failed." for the user I am trying to get the iphone to work on


The Microsoft Connectivity Analyzer is testing Exchange ActiveSync.  
  The Exchange ActiveSync test failed.
 
 Additional Details
 
 
 Test Steps
 
 Attempting the Autodiscover and Exchange ActiveSync test (if requested).
  Autodiscover was successfully tested for Exchange ActiveSync.
 
 Additional Details
 
 
 Test Steps
 
 

 Validating Exchange ActiveSync settings.
  Exchange ActiveSync URL https://webmail.tgcsnet.com/Microsoft-Server-ActiveSync was validated successfully.
 
 Additional Details
 

 Attempting to resolve the host name webmail.tgcsnet.com in DNS.
  The host name resolved successfully.
 
 Additional Details
 

 Testing TCP port 443 on host webmail.tgcsnet.com to ensure it's listening and open.
  The port was opened successfully.
 
 Additional Details
 
 
 Testing the SSL certificate to make sure it's valid.
  The certificate passed all validation requirements.
 
 Additional Details
 
 
 Test Steps
 
 

 Checking the IIS configuration for client certificate authentication.
  Client certificate authentication wasn't detected.
 
 Additional Details
 


 Testing HTTP Authentication Methods for URL https://webmail.tgcsnet.com/Microsoft-Server-ActiveSync.
  The HTTP authentication methods are correct.
 
 Additional Details
 


 An ActiveSync session is being attempted with the server.
  Errors were encountered while testing the Exchange ActiveSync session.
 
 Additional Details
 
   
 Test Steps
 
 Attempting to send the OPTIONS command to the server.
  The OPTIONS response was successfully received and is valid.
 
 Additional Details
 

 

 Attempting the FolderSync command on the Exchange ActiveSync session.
  The test of the FolderSync command failed.
   Tell me more about this issue and how to resolve it
 
 Additional Details
 
Exchange ActiveSync returned an HTTP 500 response (Internal Server Error).
HTTP Response Headers:
MS-Server-ActiveSync: 14.1
X-MS-RP: 2.0,2.1,2.5,12.0,12.1,14.0,14.1
MS-ASProtocolVersions: 2.0,2.1,2.5,12.0,12.1,14.0,14.1
MS-ASProtocolCommands: Sync,SendMail,SmartForward,SmartReply,GetAttachment,GetHierarchy,CreateCollection,DeleteCollection,MoveCollection,FolderSync,FolderCreate,FolderDelete,FolderUpdate,MoveItems,GetItemEstimate,MeetingResponse,Search,Settings,Ping,ItemOperations,Provision,ResolveRecipients,ValidateCert
Content-Length: 1208
Cache-Control: private
Content-Type: text/html
Date: Wed, 21 Jan 2015 01:46:54 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET


Elapsed Time: 20510 ms.
0
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 500 total points
Comment Utility
As you can see you have an HTTP 500 error which relates to Internal Server Error.
Does ActiveSync work for any user?

I would start by looking at the logs to see if there are any other users that an encountering the error message.
Default log path is C:\inetpub\logs\LogFiles\W3SVC1

Also take a look at the below link which provides a lot of great detail for reference activesync error codes and troubleshooting ActiveSync issues.

Troubleshooting ActiveSync Errors

In the ActiveSync logs you will see the same errors or different ones. The ones that have code 200 at the end are the ones where authentication has passed.


Will.
0
 
LVL 23

Author Comment

by:Thomas Grassi
Comment Utility
Will

Thanks a million

You lead me to the right track.

I looked and the event log on the exchange server and found many activesync errors
 

Event ID 1053 Source MSExchange activesync


Log Name:      Application
Source:        MSExchange ActiveSync
Date:          1/21/2015 1:39:55 PM
Event ID:      1053
Task Category: Configuration
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SERV025.our.network.tgcsnet.com
Description:
Exchange ActiveSync doesn't have sufficient permissions to create the "CN=Support,CN=Users,DC=our,DC=network,DC=tgcsnet,DC=com" container under Active Directory user "Active Directory operation failed on serv011.our.network.tgcsnet.com. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03151E07, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
".
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.

Details:%3
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange ActiveSync" />
    <EventID Qualifiers="49156">1053</EventID>
    <Level>2</Level>
    <Task>2</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-21T18:39:55.000000000Z" />
    <EventRecordID>5998</EventRecordID>
    <Channel>Application</Channel>
    <Computer>SERV025.our.network.tgcsnet.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>CN=Support,CN=Users,DC=our,DC=network,DC=tgcsnet,DC=com</Data>
    <Data>Active Directory operation failed on tgcs011.our.network.tgcsnet.com. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03151E07, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
</Data>
  </EventData>
</Event>


As soon as I checked Include Inheritable permissions from the objects parent

My iphone then downloaded all the folders for two accounts and email is now working

Thanks again.
0
 
LVL 23

Author Closing Comment

by:Thomas Grassi
Comment Utility
Will

Thanks again

Now off to the Best Practices Analyzer  Found some Critical Issues nothing too bad I don think

Also have a Relay issue working on that too.

Will post if I have any other questions.

Least this did not take as long as the other  LOL

Thanks again
0

Featured Post

Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

Join & Write a Comment

Suggested Solutions

Resolve DNS query failed errors for Exchange
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now