hi i have an iphone which i would like to syncronise to exchange server 2003 sp2.
I have put my details etc into iphone click refresh and connection to the server failed, please help.
Printable View
hi i have an iphone which i would like to syncronise to exchange server 2003 sp2.
I have put my details etc into iphone click refresh and connection to the server failed, please help.
errr same was just trying to do this again
Is it your own Exchange box?
Do you have an external web-mail (Outlook Web Access) link?
yes we have external, i am trying this from inside network though.
I think i may be able to give more details, This in the event log:
Anyone any idea how to solve this?Quote:
The mailbox server [Galadriel.peele.lincs.sch.uk] does not allow "Negotiate" authentication to its [exchange] virtual directory. Exchange ActiveSync can only access the server using this authentication scheme. For information about how to configure Exchange virtual directory settings, see Microsoft Knowledge Base article 817379, "Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003" (Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003). For information about how to properly configure IIS to support Kerberos and NTLM authentication, see Microsoft Knowledge Base article 215383, "How To Configure IIS to Support Both Kerberos and NTLM Authentication" (How to configure IIS to support both the Kerberos protocol and the NTLM protocol for network authentication). This issue may occur after installing Windows SharePoint Services on a server running Exchange Server 2003. For information
Ah... ok - looks like you need to fiddle with IIS to get ActiveSync working happily - looks like Method 2 here (Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003) will do the trick.
Are you the Exchange Admin?
If not, check that mobile messaging is enabled on your account.
If you are confident you are putting in all urls/passwords correct, try going back in to the settings and turning off ssl - I've had really odd things with that at times on a previous install.
thanks for the replys
@mb2k01 - I am the ex admin mobile messaging is enabled. SSL is off.
thanks again people
It may be worth doing an Exchange ActiveSync test on https://www.testexchangeconnectivity.com and seeing what results come back?
Are you the only mobile user using this type of device, or do others have this working?
just to let you know, pantscats way worked.
THANKS EVERYONE
nick
You need to follow method 2 in the KB to create an additional virtual directory for active-sync, I had to do the same to get iphones etc working here.
Trying to get windows mobile 7 to connect to exchange 2010 and it's telling me that the server im trying to connect to doesn't support activesync. Active sync is definitly enabled onthe server, anyone know of a fix to this? (thought id post it here as it's a similar issue)
EDIT: Nevermind ignore me, i've fixed my problem, was something completely different to what you guys are doing :)
i followed that to the letter and no joy. i looked in event viewer and am getting a activesync related error (with my username, not sysadmin which im logged in on the server)saying cant access something to do with ssl, its referencing that article. too late in the day server updates to do now will look again tomorrow
hi gibbo_ap
I followed this
and it worked, the only other thing i had to do was stop and restart SMTP service.Quote:
Method 2
Important Method 2 should be used only in an environment that has no Exchange Server 2003 front-end server. The registry changes should be made only on the server on which the mailboxes are located.
Create a secondary virtual directory for Exchange that does not require SSL, and then add a registry value to point to the new virtual directory.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 (How to back up and restore the registry in Windows XP ) How to back up and restore the registry in Windows
Note These steps affect both Outlook Mobile Access connections and Exchange ActiveSync connections. After you follow these steps, both Outlook Mobile Access and Exchange ActiveSync connections use the new virtual directory that you create.
Disable the forms-based authentication for the Exchange virtual directory
To create a secondary virtual directory for Exchange that is based on steps 1 through 7 of the following procedure, make sure that forms-based authentication is disabled for the Exchange virtual directory before you make the copy. Before you follow these steps, disable forms-based authentication in Exchange System Manager. Then restart Internet Information Services (IIS). To do this, follow these steps:
Open Exchange Manager.
Expand Administrative Groups, expand the first administrative group, and then expand Servers.
Expand the server container for the Exchange Server 2003 server that you will be configuring, expand Protocols, and then expand HTTP.
Under the HTTP container, right-click the Exchange Virtual Server container, and then click Properties.
Click the Settings tab, clear the Enable Forms Based Authentication check box, and then click OK.
Close Exchange Manager.
Click Start, click Run, type IISRESET/NOFORCE, and then press ENTER to restart Internet Information Services (IIS).
Create a secondary virtual directory for Exchange server
You must use Internet IIS Manager to create this virtual directory for Exchange ActiveSync and Outlook Mobile Access to work. If you are using Windows Server 2003, follow these steps:
Start Internet Information Services (IIS) Manager.
Locate the Exchange virtual directory. The default location is as follows:
Web Sites\Default Web Site\Exchange
Right-click the Exchange virtual directory, click All Tasks, and then click Save Configuration to a File.
In the File name box, type a name. For example, type ExchangeVDir. Click OK.
Right-click the root of this Web site. Typically, this is Default Web Site. Click New, and then click Virtual Directory (from file).
In the Import Configuration dialog box, click Browse, locate the file that you created in step 4, click Open, and then click Read File.
Under Select a configuration to import , click Exchange, and then click OK.
A dialog box will appear that states that the "virtual directory already exists."
Select the Create a new virtual directory option. In the Alias box, type a name for the new virtual directory that you want Exchange ActiveSync and Outlook Mobile Access to use. For example, type exchange-oma. Click OK.
Right-click the new virtual directory. In this example, click exchange-oma. Click Properties.
Click the Directory Security tab.
Under Authentication and access control, click Edit.
Make sure that only the following authentication methods are enabled, and then click OK:
Integrated Windows authentication
Basic authentication
On the Directory Security tab, under IP address and domain name restrictions, click Edit.
Click the option for Denied access, click Add, click Single computer and type the IP address of the server that you are configuring, and then click OK twice.
Under Secure communications, click Edit. Make sure that Require secure channel (SSL) is not enabled, and then click OK.
Click OK, and then close the IIS Manager.
Click Start, click Run, type regedit, and then click OK.
Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\MasSync\Parameters
Right-click Parameters, click to New, and then click String Value.
Type ExchangeVDir, and then press ENTER. Right-click ExchangeVDir, and then click Modify.
NoteExchangeVDir is case-sensitive. If you do not type ExchangeVDir exactly as it appears in this article, ActiveSync does not find the key when it locates the exchange-oma folder.
In the Value data box, type the name of the new virtual directory that you created in step 8. For example, type /exchange-oma. Click OK.
Quit Registry Editor.
Restart the IIS Admin service. To do this, follow these steps:
Click Start, click Run, type services.msc, and then click OK.
In the list of services, right-click IIS Admin service, and then click Restart.
If you want to reuse Forms-based Authentication on the Exchange server, follow these steps to re-enable Forms-based Authentication on the /Exchange virtual directory in Exchange System Manager.
Open Exchange Manager.
Expand Administrative Groups, expand the first administrative group, and then expand Servers.
Expand the server container for the Exchange Server 2003 server that you will be configuring, expand Protocols, and then expand HTTP.
Under the HTTP container, right-click the Exchange Virtual Server container, and then click Properties.
Click the Settings tab, click to select the Enable Forms Based Authentication check box, and then click OK.
Close Exchange Manager.
Click Start, click Run, type IISRESET/NOFORCE, and then press ENTER to restart Internet Information Services (IIS).
Another important thing to note is the FBA must be switched off before the settings are saved to the file.
any problems feel free to post and we will try and help.
nick