ActiveSync not working

Hi all,
Need help. Running SBS 2003 SP1, Exchange 2003 SP2 and ActiveSync
3.8 with Pocket PC 2003. I can not get activesync to sync with exchange
server. I keep getting the message "You account does not have permission".

I have tried everything. Permissions are set on the Server. OWA & OMA
work. Certificate is issued CA. Installed on the PDA. CertCkd disabled on
the PDA. Tried both with & without SSL.

ANY IDEAS?????

Default users should have permission, its funny I have this problem now and
yet I never have in the past.. I tried putting a certificate on the site but
it was invalid (not from verisign ) and when I tried to revert back I get the
same errors even though its the same account as before....

Therefore I can only assume its not account related.
J

"Nick" wrote:

> Hi all,
> Need help. Running SBS 2003 SP1, Exchange 2003 SP2 and ActiveSync
> 3.8 with Pocket PC 2003. I can not get activesync to sync with exchange
> server. I keep getting the message "You account does not have permission".
>
> I have tried everything. Permissions are set on the Server. OWA & OMA
> work. Certificate is issued CA. Installed on the PDA. CertCkd disabled on
> the PDA. Tried both with & without SSL.
>
> ANY IDEAS?????
>
>
>

Have you checked that "Integrated Windows authentication" is selected in
Directory Security on the \Exchange virtual directory in the IIS. I had the
the same problem and this solved my problem.

I have checked and it is on. It is on on the whole directory "Default Web
Site"

I do not know if this will help, but this is the ActiveSync Error Log

=-= Build 14235 =-=
=-= No XIP Information Available =-=
mail.xxxxxxx.xx/Microsoft-Server-ActiveSync

=-=- [21/11/2005 22:20:30.0] -=-=
=-=-=-= Client Request =-=-=-=
OPTIONS
Microsoft-Server-ActiveSync?User=xxxx&DeviceId=FD0E083600000xxxxxxx xxxxxxxxxxxx&DeviceType=PocketPC
Accept-Language: en-ca

-=-=-=- Start of Body -=-=-=-


=-=- [21/11/2005 22:20:36.0] -=-=
=-=-=-= Server Response =-=-=-
HTTP/1.1 400 Bad Request
Content-Type: text/html
Date: Mon, 21 Nov 2005 22:06:34 GMT
Connection: close
Content-Length: 39



=-=- [21/11/2005 22:20:36.0] -=-=
=-=-=-= Client Request =-=-=-=
POST
Microsoft-Server-ActiveSync?User=xxxx&DeviceId=FD0E0836xxxxxxxxxxxx xxxxxxxxxxxx&DeviceType=PocketPC&Cmd=Sync
Accept-Language: en-ca
Content-Type: application/vnd.ms-sync.wbxml

-=-=-=- Start of Body -=-=-=-
<?xml version="1.0" encoding="utf-8"?><Sync
xmlns="AirSync:"><Version>1.0</Version><Collections><Collection><Class>Calendar</Class><SyncKey>0</SyncKey></Collection></Collections></Sync>

=-=- [21/11/2005 22:20:38.0] -=-=
=-=-=-= Server Response =-=-=-
HTTP/1.1 400 Bad Request
Content-Type: text/html
Date: Mon, 21 Nov 2005 22:06:36 GMT
Connection: close
Content-Length: 39

Thank You
"Henrik" <> wrote in message
news:C47C43BB-727B-4659-9EE8-...
> Have you checked that "Integrated Windows authentication" is selected in
> Directory Security on the \Exchange virtual directory in the IIS. I had
> the
> the same problem and this solved my problem.

Perfect, well thats me fixed... I had done everything but that folder as I
was figuring on that getting used
for web based email rather than the activesync.

Can someone run through any folders which need "Anonymous Users" SECURITY
SET as
I know there were a few, cant work out why and it seems pretty insecure to
have that on there
when authentication is done but I want to ensure I have it down to the
minimum.

J

"Nick" wrote:

> I have checked and it is on. It is on on the whole directory "Default Web
> Site"
>
> I do not know if this will help, but this is the ActiveSync Error Log
>
> =-= Build 14235 =-=
> =-= No XIP Information Available =-=
> mail.xxxxxxx.xx/Microsoft-Server-ActiveSync
>
> =-=- [21/11/2005 22:20:30.0] -=-=
> =-=-=-= Client Request =-=-=-=
> OPTIONS
> Microsoft-Server-ActiveSync?User=xxxx&DeviceId=FD0E083600000xxxxxxx xxxxxxxxxxxx&DeviceType=PocketPC
> Accept-Language: en-ca
>
> -=-=-=- Start of Body -=-=-=-
>
>
> =-=- [21/11/2005 22:20:36.0] -=-=
> =-=-=-= Server Response =-=-=-
> HTTP/1.1 400 Bad Request
> Content-Type: text/html
> Date: Mon, 21 Nov 2005 22:06:34 GMT
> Connection: close
> Content-Length: 39
>
>
>
> =-=- [21/11/2005 22:20:36.0] -=-=
> =-=-=-= Client Request =-=-=-=
> POST
> Microsoft-Server-ActiveSync?User=xxxx&DeviceId=FD0E0836xxxxxxxxxxxx xxxxxxxxxxxx&DeviceType=PocketPC&Cmd=Sync
> Accept-Language: en-ca
> Content-Type: application/vnd.ms-sync.wbxml
>
> -=-=-=- Start of Body -=-=-=-
> <?xml version="1.0" encoding="utf-8"?><Sync
> xmlns="AirSync:"><Version>1.0</Version><Collections><Collection><Class>Calendar</Class><SyncKey>0</SyncKey></Collection></Collections></Sync>
>
> =-=- [21/11/2005 22:20:38.0] -=-=
> =-=-=-= Server Response =-=-=-
> HTTP/1.1 400 Bad Request
> Content-Type: text/html
> Date: Mon, 21 Nov 2005 22:06:36 GMT
> Connection: close
> Content-Length: 39
>
> Thank You
> "Henrik" <> wrote in message
> news:C47C43BB-727B-4659-9EE8-...
> > Have you checked that "Integrated Windows authentication" is selected in
> > Directory Security on the \Exchange virtual directory in the IIS. I had
> > the
> > the same problem and this solved my problem.
>
>
>