MaXiM Posted March 1, 2011 Posted March 1, 2011 Hi I have an Exchange 2010 Server that has outlook OWA enabled. I can connect to OWA from home and that works When I add my mail account to the exchange on the Iphone it verifies ok but I can't send any emails or recieve. I thought if OWA works then Exchange sync for iphone would work but it doesn't. Any reasons why it might not be working? Any other ports I need to forward?
sukh Posted March 1, 2011 Posted March 1, 2011 (edited) Hi Does ActiveSync work for any other users? Has ActiveSynch been disabled for this user or at the server/org level? Any ActiveSynch policies deployed? Ensure the MSExchangeSyncAppPool is running under IIS? Also run https://www.testexchangeconnectivity.com/ and run the ActivSynch tests. Regards Sukh Edited March 1, 2011 by sukh
MaXiM Posted March 2, 2011 Author Posted March 2, 2011 Active sync is enabled on my mailbox account yes. I will check IIS
MaXiM Posted March 2, 2011 Author Posted March 2, 2011 Sync Pool is enabled and started. Still doesn't work. It verifies the account but can't recieve or send emails.
sukh Posted March 2, 2011 Posted March 2, 2011 Hi Does ActiveSync work for any other users? Any ActiveSynch policies deployed? Also run http:// https://www.testexchangeconnectivity.com/ and run the ActivSynch tests Regards Sukh
sukh Posted March 2, 2011 Posted March 2, 2011 Hi Did you run the test including the "Synchronize all items in the Inbox folder" option? Regards Sukh
MaXiM Posted March 2, 2011 Author Posted March 2, 2011 I feel a bit worried about using the tool as I'm a domain admin and don't feel comfortable putting my pw into that website. Account verifies but can't send and receive , must be something simple like a routing problem... Owa works fine ... Don't know what else to check.
sukh Posted March 2, 2011 Posted March 2, 2011 Hi Just to prove ActiveSyn funtionality, can you create a test user with minimal permission and test? I just wanted to rule out Exchange configuration and this way will make troubleshooting easier as we will know if there is a routing issue or not. Regards Sukh
sukh Posted March 2, 2011 Posted March 2, 2011 Hi Just noticed that you said you're doman admin. I do believe there is a fix for that. Let me look at my archive. In the meantime, can you test? Regards Sukh
sukh Posted March 2, 2011 Posted March 2, 2011 Hi Please remove yourself from the Domain Admin group and test. If this works then do the following. Let me know the results. Regards Sukh
sukh Posted March 6, 2011 Posted March 6, 2011 Hi Did you try removing the account from the domain admins then try? Regards Sukh
MaXiM Posted March 6, 2011 Author Posted March 6, 2011 Not yet but at work on Monday I'm going to tweak IIS permissions and see if that does the trick. Will let you know the outcome.
chrisbrown Posted March 15, 2011 Posted March 15, 2011 Don't forget to tick "Include inheritable permissions from this object's parent" under -> Security -> Advanced. If you don't do this, ActiveSync will not work. This is a known problem if your account is/was a domain/enterprise admin. The problem is that your account will not have inherited the ACLs for the Exchange server. Also - why on earth is your regular account a domain admin? Have you no concern for security? Never ever EVER give your logon account Domain/Enterprise/Anything Admin permissions or you're asking for trouble. You're leaving yourself open for this: Executing Code On Behalf Of Someone Else - Dreaming in PowerShell - Powershell.com As well as countless other exploits. Please, for the safety of your network, data, users and job, create yourself an administration account. I (and the rest of the sensible IT community) recommend you do this for all your IT staff. Create an account in the form of a_ or similar. I can't stress how important this is. 1
MaXiM Posted March 16, 2011 Author Posted March 16, 2011 Yes I realised it was set to a Domain admin and have changed it already. That was an error that was discovered when sorting out the Iphone Issue. And yes I'm concerned it was set to that.
chrisbrown Posted March 16, 2011 Posted March 16, 2011 Yes I realised it was set to a Domain admin and have changed it already. That was an error that was discovered when sorting out the Iphone Issue. And yes I'm concerned it was set to that. Cool. I hate to be callous but I'm so sick of seeing regular user accounts with inappropriately high permissions.
driek Posted March 6, 2013 Posted March 6, 2013 Any solution? Have the same problem here. A staff member has bought an iPhone, but can't get the exchange/mail to work. After I added the account, it successfully verify the account, but wen I open mail, it gives an error: could not connect to server... A different account from our staff works on the iPhone. The account also works perfectly on OWA. "Include inheritable permissions from this object's parent" is also ticked. Windows small business server 2008 with exchange server 2007.
MaXiM Posted March 6, 2013 Author Posted March 6, 2013 (edited) Any solution? Have the same problem here. A staff member has bought an iPhone, but can't get the exchange/mail to work. After I added the account, it successfully verify the account, but wen I open mail, it gives an error: could not connect to server... A different account from our staff works on the iPhone. The account also works perfectly on OWA. "Include inheritable permissions from this object's parent" is also ticked. Windows small business server 2008 with exchange server 2007. Yes this is how I fixed it ! I found this on a website ages ago but that website doesn't seem to exist anymore So your IPhone is not getting Exchange email after setting up your account and it verifying the account during the setup? The ‘Cannot Get Mail. The connection to the server failed’ error may be the cause of a simple mis-configuration in the Microsoft Active Directory services for that user. To see if it is this issue you will need to open the Active Directory Users and Computers, Select the VIEW menu from the top and click on “Advanced Features”. Now open the properties on the user having the issue and select the “Security” tab. Under this tab will be windows with user accounts listed and a “Advanced button” at the bottom. Select this button and find the check box “Include Inheritable permissions from this object’s parent” . If this is the problem you will find the box “unchecked”. Just check the box and try again. You should see mail start to flow. Edited March 6, 2013 by MaXiM
sukh Posted March 6, 2013 Posted March 6, 2013 If your issue is the same then do that, but didn't you say that is already ticked? If it still fails, ExcRCA.
driek Posted March 7, 2013 Posted March 7, 2013 Yes, it was already checked before he had an iPhone...
sukh Posted March 7, 2013 Posted March 7, 2013 So use the ExchRCA & test, assuming it's still failing.
MaXiM Posted March 7, 2013 Author Posted March 7, 2013 If your issue is the same then do that, but didn't you say that is already ticked? If it still fails, ExcRCA. Perhaps its a firewall that has some sort of application rule that applies to Exchange on Apple .... Just a thought.
MaXiM Posted March 7, 2013 Author Posted March 7, 2013 Perhaps its a firewall that has some sort of application rule that applies to Exchange on Apple .... Just a thought. I know for a fact that I had to allow SMTP and some other application rule which I can't remember before mail started flowing on apple devices.. That was with a Fortigate.
sukh Posted March 7, 2013 Posted March 7, 2013 Perhaps its a firewall that has some sort of application rule that applies to Exchange on Apple .... Just a thought. I've seen strange issues with firewalls, but this is if you're using a reverse proxy and if you're offloading SSL traffic there for inspection. I think the issues needs to be narrowed down the EAS/the CAS server/the actual user(s)/device.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now