edie209 Posted March 27, 2012 Posted March 27, 2012 I think i will move this to here as I think the problem is more exchange than Server 2008 Story so far, Exchange server working fine however it was a base install with no service packs. I updated the service packs to SP3 and rolls ups to No 6. After this mobile devices would not connect. We were advised that we should have a commercial certificate, which has now been installed and we were still having the same problem. I have deleted and recreated the "Microsoft-Server-ActiveSync" virtual directory. And still I have the same problem, which creates the following entry in event viewer. Event Type: Warning Event Source: ASP.NET 2.0.50727.0 Event Category: Web Event Event ID: 1309 Date: 27/03/2012 Time: 11:14:06 User: N/A Computer: MAIL Description: Event code: 3005 Event message: An unhandled exception has occurred. Event time: 27/03/2012 11:14:06 Event time (UTC): 27/03/2012 10:14:06 Event ID: 8457bcf0c81b4099b62448bc3bd5ea5f Event sequence: 152 Event occurrence: 51 Event detail code: 0 Application information: Application domain: /LM/W3SVC/1/ROOT/Microsoft-Server-ActiveSync-1-129773162326071333 Trust level: Full Application Virtual Path: /Microsoft-Server-ActiveSync Application Path: D:\ExchangeX86\ClientAccess\sync\ Machine name: MAIL Process information: Process ID: 3460 Process name: w3wp.exe Account name: NT AUTHORITY\SYSTEM Exception information: Exception type: FileNotFoundException Exception message: Could not load file or assembly 'Microsoft.Exchange.AirSync, Version=8.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified. Request information: Request URL: https://mail.liskeard.cornwall.sch.uk:443/Microsoft-Server-ActiveSync/default.eas?Cmd=OPTIONS&User=liskeard8457bcf0c81b4099b62448bc3bd5ea5fCemondm&DeviceId=validate&DeviceType=SAMSUNGGTI9000 Request path: /Microsoft-Server-ActiveSync/default.eas User host address: 92.40.255.4 User: LISKEARD\emondm Is authenticated: True Authentication Type: Basic Thread account name: NT AUTHORITY\SYSTEM Thread information: Thread ID: 5 Thread account name: NT AUTHORITY\SYSTEM Is impersonating: False Stack trace: at Microsoft.Exchange.AirSyncHandler.Handler..ctor() Custom event details: For more information, see Help and Support Center at Events and Errors Message Center: Basic Search.
edie209 Posted March 28, 2012 Author Posted March 28, 2012 Ok have run the test and we have the one error now (did have an issue with DNS but that's sorted) Google this error and I am not coming up with anything An ActiveSync session is being attempted with the server. Errors were encountered while testing the Exchange ActiveSync session. Test Steps Attempting to send the OPTIONS command to the server. Testing of the OPTIONS command failed. For more information, see Additional Details. Additional Details An HTTP 500 response was returned from Unknown.
edie209 Posted March 29, 2012 Author Posted March 29, 2012 The error seem different today compare to yesterday, any suggestions really would be apprieciated. ExRCA is testing Exchange ActiveSync. The Exchange ActiveSync test failed. Test Steps Attempting the Autodiscover and Exchange ActiveSync test (if requested). Testing of Autodiscover for Exchange ActiveSync failed. Test Steps Attempting each method of contacting the Autodiscover service. The Autodiscover service couldn't be contacted successfully by any method. Test Steps Attempting to test potential Autodiscover URL https://liskeard.cornwall.sch.uk/AutoDiscover/AutoDiscover.xml Testing of this potential Autodiscover URL failed. Test Steps Attempting to resolve the host name liskeard.cornwall.sch.uk in DNS. The host name couldn't be resolved. Tell me more about this issue and how to resolve it Additional Details Host liskeard.cornwall.sch.uk couldn't be resolved in DNS InfoNoRecords. Attempting to test potential Autodiscover URL https://autodiscover.liskeard.cornwall.sch.uk/AutoDiscover/AutoDiscover.xml Testing of this potential Autodiscover URL failed. Test Steps Attempting to resolve the host name autodiscover.liskeard.cornwall.sch.uk in DNS. The host name resolved successfully. Additional Details IP addresses returned: 217.179.12.185 Testing TCP port 443 on host autodiscover.liskeard.cornwall.sch.uk to ensure it's listening and open. The port was opened successfully. Testing the SSL certificate to make sure it's valid. The certificate passed all validation requirements. Test Steps ExRCA is attempting to obtain the SSL certificate from remote server autodiscover.liskeard.cornwall.sch.uk on port 443. ExRCA successfully obtained the remote SSL certificate. Additional Details Remote Certificate Subject: CN=mail.liskeard.cornwall.sch.uk, O=South West Grid for Learning Trust, L=Liskeard, S=Cornwall, C=GB, CN=autodiscover.liskeard.cornwall.sch.uk, Issuer: CN=TERENA SSL CA, O=TERENA, C=NL. Validating the certificate name. The certificate name was validated successfully. Additional Details Host name autodiscover.liskeard.cornwall.sch.uk was found in the Certificate Subject Alternative Name entry. Certificate trust is being validated. The certificate is trusted and all certificates are present in the chain. Test Steps ExRCA is attempting to build certificate chains for certificate CN=mail.liskeard.cornwall.sch.uk, O=South West Grid for Learning Trust, L=Liskeard, S=Cornwall, C=GB, CN=autodiscover.liskeard.cornwall.sch.uk. One or more certificate chains were constructed successfully. Additional Details A total of 2 chains were built. The highest quality chain ends in root certificate CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE. Analyzing the certificate chains for compatibility problems with versions of Windows. No Windows compatibility problems were identified. Additional Details The certificate chain has been validated up to a trusted root. Root = CN=UTN-USERFirst-Hardware, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US. Testing the certificate date to confirm the certificate is valid. Date validation passed. The certificate hasn't expired. Additional Details The certificate is valid. NotBefore = 3/23/2012 12:00:00 AM, NotAfter = 3/23/2015 11:59:59 PM Checking the IIS configuration for client certificate authentication. Client certificate authentication wasn't detected. Additional Details Accept/Require Client Certificates isn't configured. Attempting to send an Autodiscover POST request to potential Autodiscover URLs. Autodiscover settings weren't obtained when the Autodiscover POST request was sent. Test Steps ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.liskeard.cornwall.sch.uk/AutoDiscover/AutoDiscover.xml for user [email protected]. ExRCA failed to obtain an Autodiscover XML response. Additional Details None of the expected XML elements were found in the XML response. Attempting to contact the Autodiscover service using the HTTP redirect method. The attempt to contact Autodiscover using the HTTP Redirect method failed. Test Steps Attempting to resolve the host name autodiscover.liskeard.cornwall.sch.uk in DNS. The host name resolved successfully. Additional Details IP addresses returned: 217.179.12.185 Testing TCP port 80 on host autodiscover.liskeard.cornwall.sch.uk to ensure it's listening and open. The port was opened successfully. ExRCA is checking the host autodiscover.liskeard.cornwall.sch.uk for an HTTP redirect to the Autodiscover service. ExRCA failed to get an HTTP redirect response for Autodiscover. Additional Details An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: ErrorSecure Channel Required Secure Channel RequiredThis Virtual Directory requires a browser that supports the configured encryption options. Attempting to contact the Autodiscover service using the DNS SRV redirect method. ExRCA failed to contact the Autodiscover service using the DNS SRV redirect method. Test Steps Attempting to locate SRV record _autodiscover._tcp.liskeard.cornwall.sch.uk in DNS. The Autodiscover SRV record wasn't found in DNS. Tell me more about this issue and how to resolve it
sukh Posted March 29, 2012 Posted March 29, 2012 "The Autodiscover service couldn't be contacted successfully by any method." Has this ever worked? Seem like your autodiscover records may not be set correctly
edie209 Posted March 29, 2012 Author Posted March 29, 2012 Everything was working fine with a self signed certificate, however the problems began when we installed a JANET certificate issued via SWGFL.
sukh Posted March 29, 2012 Posted March 29, 2012 Can you run Get-exchangecertificate | fl >c:\cert.txt Get-activesyncvirtualdirectory | fl > c:\activesync.txt
sukh Posted April 10, 2012 Posted April 10, 2012 Sorry, I havent, no idea where they are, can you try again?
edie209 Posted April 10, 2012 Author Posted April 10, 2012 I have fixed it now thanks, it has been quite a process and I will document it tomorrow as I am too tired to do it now.
edie209 Posted April 11, 2012 Author Posted April 11, 2012 As I said in the last post I have found a solution to this problem and I will go through what I did below just in case anyone else finds themselves in the same situation. So this is what I had originally. I think i will move this to here as I think the problem is more exchange than Server 2008 Story so far, Exchange server working fine however it was a base install with no service packs. I updated the service packs to SP3 and rolls ups to No 6. After this mobile devices would not connect. We were advised that we should have a commercial certificate, which has now been installed and we were still having the same problem. I have deleted and recreated the "Microsoft-Server-ActiveSync" virtual directory. And still I have the same problem, which creates the following entry in event viewer. Event Type: Warning Event Source: ASP.NET 2.0.50727.0 Event Category: Web Event Event ID: 1309 Date: 27/03/2012 Time: 11:14:06 User: N/A Computer: MAIL Description: Event code: 3005 Event message: An unhandled exception has occurred. Event time: 27/03/2012 11:14:06 Event time (UTC): 27/03/2012 10:14:06 Event ID: 8457bcf0c81b4099b62448bc3bd5ea5f Event sequence: 152 Event occurrence: 51 Event detail code: 0 Application information: Application domain: /LM/W3SVC/1/ROOT/Microsoft-Server-ActiveSync-1-129773162326071333 Trust level: Full Application Virtual Path: /Microsoft-Server-ActiveSync Application Path: D:\ExchangeX86\ClientAccess\sync\ Machine name: MAIL Process information: Process ID: 3460 Process name: w3wp.exe Account name: NT AUTHORITY\SYSTEM Exception information: Exception type: FileNotFoundException Exception message: Could not load file or assembly 'Microsoft.Exchange.AirSync, Version=8.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified. Request information: Request URL: https://mail.liskeard.cornwall.sch.uk:443/Microsoft-Server-ActiveSync/default.eas?Cmd=OPTIONS&User=liskeard8457bcf0c81b4099b62448bc3bd5ea5fCemondm&DeviceId=validate&DeviceType=SAMSUNGGTI9000 Request path: /Microsoft-Server-ActiveSync/default.eas User host address: 92.40.255.4 User: LISKEARD\emondm Is authenticated: True Authentication Type: Basic Thread account name: NT AUTHORITY\SYSTEM Thread information: Thread ID: 5 Thread account name: NT AUTHORITY\SYSTEM Is impersonating: False Stack trace: at Microsoft.Exchange.AirSyncHandler.Handler..ctor() Custom event details: For more information, see Help and Support Center at Events and Errors Message Center: Basic Search. I searched the web high and low and never really found anyone with the exact same problem, lots of similar problems but none that really seemed the same. In the end I read a post from someone who had had problems with OWA and in the end he uninstalled and re installed Exchange. I didn't really want to be that extreme so I set about looking into uninstalling the CAS Server. Which I will document below the various steps and PowerScripts used. Uninstall IIS How to remove and reinstall IIS 5.0, 5.1 and 6.0 - make sure to take a backup first you just never know. Once you have removed IIS reboot your server Delete "watermark" from HKLM\software\microsoft\exchange\8.0\client access Uninstall the CAS Server Role open a command prompt and navigate to the \exchange\bin folder then run exsetup.exe /mode:uninstall /roles:ca Then open Exchange Management Shell and run the following Powershell scripts REPLACING SERVER2 WITH THE NAME OF YOUR EXCHANGE SERVER remove-autodiscovervirtualdirectory -identity "server2\autodiscover (default web site)" remove-oabvirtualdirectory -identity "server2\oab (default web site)" remove-owavirtualdirectory -identity "server2\owa (default web site)" remove-owavirtualdirectory -identity "server2\exchweb (default web site)" remove-umvirtualdirectory -identity "server2\unifiedmessaging (default web site)" remove-ActiveSyncVirtualDirectory -identity "server2\microsoft-server-activesync (default web site)" remove-webservicesvirtualdirectory -identity "server2\ews (default web site)" Reboot your server at this point Re install IIS..... I had a really strange problem at this point in that IIS installed as IIS 5 it took 4 uninstalls before IIS 6 installed re install the CAS Server Role open a command prompt and navigate to the \exchange\bin folder then run exsetup.exe /mode:install /roles:ca At this point my sever was up and running and mobile devices were working again. However I was back to a self signed cert I am about to try the Cert I got from JA.net I will post the results of that later. This worked for me and I take no responsibility if you try this and do more damage ( I have to say that don't I?) I would like to thank Sheepds on Technet for some of the above, I have pinched bits and pieces from many different post so if I haven't mentioned you sorry.
edie209 Posted April 12, 2012 Author Posted April 12, 2012 just a quick update the JA.net cert is working fine
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now