I'm having some issues with trying to get Android and iOS devices connected to Exchange. The biggest problem is that some devices work fine while others do not. On the devices that don't work, we have some users including myself who have tried multiple phones and it will not complete the setup. We are running AD 2012 and Exchange 2010 SP3 UR13. (However, this issue has been prevalent since Exchange 2010 SP2 and UR8.) I have tried connecting to Exchange via the Android app, GMail, the Outlook app and Touchdown. On the Android app, GMail and the Outlook app, neither will connect and show the error "Can't connect to server. Error 111". On the Touchdown app, it's stating that ActiveSync is not available and is using Exchange 2007 to connect. (It shows the entire folder structure, but it will not download any emails to those folders nor can I send an email from the app.) The problem is that prior to my arrival, this site had just installed Exchange 2010 and never used 2000/2003/2007.
I can connect to OWA without any problems through a browser on these phones and can connect via owa.domain.com and autodiscover.domain.com. When I run a RCA test, everything comes back correctly except for the SSL certificate. It comes back with the error:
Certificate name validation failed.
Host name domain.com doesn't match any name found on the server certificate CN=IMG.domain.com, OU=Domain Control Validated.
I don't believe this is causing the issue as I exported the certificate and installed it on a phone to test and it fails with the same message. I've also confirmed that none of the users affected currently have ever had a mobile profile show up in Exchange. Would anyone else out there have an idea what I can check to confirm what the issue is? The only other thing that I have seen is that it appears that older users who have been in the system for some time have no problem, whereas anyone new is affected. Even the older users have been able to setup new phones within the last six months without any issues.