Exchange 2003 iphone problems

[jackb70]

We have exchange 2003 and we have mobile emails working on Blackberry and we have OWA working but when we connect to iphone we have all the ticks and when we try and request mail we get "The Connection to the server Failed"

Helpp please

[AJWhite1970]

Happy to be corrected but I think iphones only work like that with Exchange 2007 and above....

[jackb70]

Thats exactly what i thought at first but i have saw it working within my old company and i have no access to the configuration now that i have left

[Abaddon]

Try this:

 

If you open up Active Directory Users and Computers and locate one of your users that is not working, Double-Click into the account and click on the Security Tab (if this is not visible, Click on View> Advanced Features from the Menu at the top of the screen then navigate back to your user). Once on the security tab, click on the Advanced Button and make sure that the ‘Include Inheritable Permissions From This Object’s Parent’ is ticked. Click OK twice to close the user account.

[jackb70]

Try this:

 

If you open up Active Directory Users and Computers and locate one of your users that is not working, Double-Click into the account and click on the Security Tab (if this is not visible, Click on View> Advanced Features from the Menu at the top of the screen then navigate back to your user). Once on the security tab, click on the Advanced Button and make sure that the ‘Include Inheritable Permissions From This Object’s Parent’ is ticked. Click OK twice to close the user account.

 

Nothing has changed with the problem

[FN-GM]

Is Exchange 2003 fully patched? I think activsync comes in with a service pack

 

You should upgrade by the way

[jackb70]

yes everything only 2 security updates to be installed

[Ergo]

I would recommend starting with https://www.testexchangeconnectivity.com/ which can help you test whether your exchange server is connectable to from the outside world. iPhones will use the ActiveSync service to collect their emails (if you are setting them up as a connection to Exchange Email) so that is the test you need to run.

 

Should give you a good indication of what the problem may be.

 

You will need to ensure that you have published ActiveSync fully (if you are using something like ISA or TMG as your gateway) with Integrated authentication (as opposed to forms based which is nicer for OWA users).

 

Dave

[AJWhite1970]

Had a couple of minutes as my curiosity got the better of me and found this

 

Exchange 2003 and Activesync Configuration and Troubleshooting « Alan Hardisty's Blog – All Things IT Related

 

May be of some help?

[jbunoomally]

We have exchange 2003 and we have mobile emails working on Blackberry and we have OWA working but when we connect to iphone we have all the ticks and when we try and request mail we get "The Connection to the server Failed"

Helpp please

 

We use Ex2003 sp2 with a number of iOS devices. Looking back at my file when we migrated our hardware a few years ago and introduced iOS devices, i have these bookmarked - hope they're of some use:

 

iOS: Troubleshooting Exchange ActiveSync 'Push' issues

iOS 4.0: Exchange Mail, Contacts, or Calendars may not sync after update

 

I also guess you're using a proper SSL cert, and have tried reapplying SP2?

 

JB

[jackb70]

https://www.testexchangeconnectivity.com/#&&1xik8UGVHH7Hl9Ee1KMgA/NffuQ/krRWMErqNmb2ssuX4ppqA24WauuLWSNJn9StW9gAxo0OkWeE/7HSKI8mkVDPtEaKfaZIuSmRRDBV2XGfx4MH7mEICvRwb1LUQBkOpQDy0/5dSPSMXNv6CwFrlWej62qWR+ySKZ/PYY4mMPG2T2w4+rRjHbg1GfDv4yvJzcfZNQ==

 

These are my results

[alanhardisty]

Is your Exchange 2003 server part of SBS 2003?

 

If not, do you have Forms-Based Authentication (FBA) enabled for OWA (pretty login screen)?

 

If you do, please follow KB817379 (Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003) and add the Exchange-OMA virtual directory as you have SSL on the Exchange Virtual Directory in IIS and you have to have one with no SSL enabled for Activesync to work properly.

 

If you don't have FBA enabled, please run through my article on my blog that AJWhite1970 posted.

 

Thanks

 

Alan

[jackb70]

https:\\owa.sirusautomotive.co.uk

 

Thats from SBS2003

[alanhardisty]

Okay - from your test results:

 

"The following authentication methods are enabled, but they aren't allowed authentication methods for this service. Methods: Negotiate, NTLM"

 

Please use my article and change your Microsoft-Server-Activesync authentication settings as they are incorrect. Once changed, run iisreset from a command prompt and then re-test on the test site.

 

Alan

[jackb70]

Okay - from your test results:

 

"The following authentication methods are enabled, but they aren't allowed authentication methods for this service. Methods: Negotiate, NTLM"

 

Please use my article and change your Microsoft-Server-Activesync authentication settings as they are incorrect. Once changed, run iisreset from a command prompt and then re-test on the test site.

 

Alan

 

Could you please link the article please

[alanhardisty]

Sure - here you go:

 

Exchange 2003 and Activesync Configuration and Troubleshooting « Alan Hardisty's Blog – All Things IT Related

 

Alan

[jackb70]

i havent even got past Open Port Check Tool

We have got port 443 forwarding to Exchange and we have allowed HTTPS In ISA

[Ergo]

Apologies I may have made a mistake - based on the blog above, and the authentication error on your test you need to set the authentication to "Basic" for ActiveSync, not NTLM or Integrated.

 

Dave

[alanhardisty]

As you have OWA working, you will have port 443 open, so you can skip that part, but having ISA server will make the process a lot harder.

 

Was ISA configured using the SBS Connect To The Internet Wizard as this auto-creates the ISA rules accordingly correctly or manually created?

 

Alan

[jackb70]

was configured manually by an external Cisco engineer

[alanhardisty]

Okay - let's not worry about ISA right now. Please change the authentication on the Microsoft-Server-Activesync virtual directory as per my earlier comment, run iisreset, re-test and see where you are.

 

Thanks

 

Alan

[jackb70]

im on this step and when i click connect to the internet the bottom radio button is grayed out

[alanhardisty]

Leave the Connect to the internet Wizard for now and just change your IIS settings for the Microsoft-Server-Activesync virtual directory please.

[jackb70]

Thats done

Integrated windows authentication Ticked and Basic Authentication ticked

 

Default Domain: Sirus

Realm: Sirus

i got the Sirus From the SET command in CMD

[alanhardisty]

Okay - the Domain / Realm could have been fine as they were, but no worries for now. Have you re-tested on https://testexchangeconnectivity.com? If not, please do, if you have, what are the results?

 

Alan