We help IT Professionals succeed at work.

Exchange 2010 ActiveSync - Blackberry and iPhone

Generator
Generator asked
on
We recently purchased new cell phones for the company - BB Q10, BB Passport, BB Classic, and Apple iPhone 6+. The Q10 and Passport connected with no difficulty (Exchange 2010) but even though the Classic and iPhone seem to setup as expected, we can't send or receive any email messages. When trying to send a message using those two devices we get a "Server Rejected the Message" response. The former units - BB Bold - worked fine. We have a certificate on the server and setup the phones using SSL and port 443.
Comment
Watch Question

Most Valuable Expert 2014

Commented:
Q10, Classic and Passport should all be using the same OS now, so there should be no difference between them. Do the devices show in the list of ActiveSync devices on the relevant accounts?

Can you post the exact error you are getting when sending an email?

Is the SSL certificate a trusted one, or a self signed one?

Simon.

Author

Commented:
The SSL certificate was purchased from DigiCert. The Error message "Cannot send email The message was rejected by the server"
Most Valuable Expert 2014

Commented:
Is that the same message on the Blackberry? As I have never seen that error on Blackberry before.
Have you checked the ActiveSync partnerships and removed any old ones of those?

Simon.

Author

Commented:
That error message is on the iPhone. The BB is silent. I will check the Activesync accounts later. Thanks.
Most Valuable Expert 2014

Commented:
If the users go through devices a lot, then you could have a lot of old partnerships. There is a limit on the number they can have of 10, so if you add a 11th, it stops it from working correctly.

SImon.

Author

Commented:
I checked the ActiveSync partnerships and there are no phones listed under the accounts in question. Checking further I noticed that our certificate seems to be pointing to another domain. I contacted Digicert and they verified our certificate. However, our domain and another domain website are pointing to the same IP address. I have not encountered this before.
Most Valuable Expert 2014

Commented:
It isn't unusual for the root of your domain (so https://example.com/) to pointing to another web server on the internet with an SSL certificate on it which is NOT yours. This is because web hosting companies will have a single SSL site on their server which you are sharing with other people.
It shouldn't stop things from working correctly though. If the correct host name is entered in to the device, then it should connect.

However if you are seeing NO phones listed under the accounts in question then ActiveSync has not setup correctly on them. Remove the accounts from the devices completely and set them up again.

Simon.

Author

Commented:
The "GoDaddy" certificated used by the other domain is now showing up on the BB when configuring our exchange email account. I have attached an image of the message. I have deleted the account on the BB several times but the end result is the same.
Certificate
I was focused on a possible certificate issue but the problem ended up being associated to inherited permissions related to the accounts. Thank you for your help with this.

Author

Commented:
I was very disappointed in receiving comments from only one individual. Where are all the experts??
Is there a reason for such a poor showing??