Networks

Ask something
Question Locked

Configuring ActiveSync in Windows 2003 SBS

0 helpful
2 replies

by charles

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
I am having difficulty to configure exchange 2003 (on a SBS server) for Activesync. My requirement is to synchronise exchange emails and contact with iphones.
I installed godaddy certificate in the IIS default website and OWA works fine.
I also followed MS article ID 817379.
When I tried to sync iphone, it says user authentication failed. I tested it with Exchange Remote Connectivity analyzer and got following result.

Testing Exchange ActiveSync
Exchange ActiveSync test Failed
Test Steps
Attempting to resolve the host name mail.cygresearch.com in DNS.
Host successfully resolved
Additional Details
IP(s) returned: 24.215.43.226

Testing TCP Port 443 on host mail.cygresearch.com to ensure it is listening and open.
The port was opened successfully.
Testing SSL Certificate for validity.
The certificate passed all validation requirements.
Test Steps
Validating certificate name
Successfully validated the certificate name
Additional Details
Found hostname mail.cygresearch.com in Certificate Subject Common name

Validating certificate trust for Windows Mobile Devices
The test passed with some warnings encountered. Please expand additional details.
Additional Details
Certificate is only trusted on Windows Mobile 6.0 and later. Windows Mobile 5.0 and 5.0 + MSFP devices will not be able to sync. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US

Testing certificate date to ensure validity
Date Validation passed. The certificate is not expired.
Additional Details
Certificate is valid: NotBefore = 10/26/2009 1:00:08 PM, NotAfter = 10/26/2012 1:00:08 PM"

Testing Http Authentication Methods for URL https://mail.cygresearch.com/Microso...er-Activesync/
Http Authentication Test failed
Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from IIS6. Body is:
You are not authorized to view this page

You are not authorized to view this page
The Web server you are attempting to reach has a list of IP addresses that are not allowed to access the Web site, and the IP address of your browsing computer is on this list.

Please try the following:

  • Contact the Web site administrator if you believe you should be able to view this directory or page.

HTTP Error 403.6 - Forbidden: IP address of the client has been rejected.
Internet Information Services (IIS)

Technical Information (for support personnel)

  • Go to Microsoft Product Support Services and perform a title search for the words HTTP and 403.
  • Open IIS Help, which is accessible in IIS Manager (inetmgr),
    and search for topics titled About Security, Limiting Access by IP Address, IP Address Access Restrictions, and About Custom Error Messages.

Can you please tell me where the problem is.

Thanks in advanced.

Charles

2 replies

by dedlbug

It appears that it may be an IIS issue. Check your Default Web Site IP Address Restrictions and ensure it is Granted for the following containers:
Microsoft-Server-ActiveSync
OMA (not necessarily exchange-oma)
Exchange
ExchWeb

Your permissions may be different then default, but I beileve SBS 03 out of the box should have Active Sync enabled.

If IIS looks correct and you tried to make changes, test, make changes, test, etc. then try another Certificate. I have had nothing but problems with GoDaddy Class 2 certs lately. I switched to RapidSSL and everything works, all the time. And I even got my GoDaddy certs transferred to RapidSSL for FREE.

This discussion is closed to new replies.