Exchange 2003, SBS 2003, Activesync 4.1 Windows Mobile 5 and no Syncronisation

Hi all,

Looking at this forum and other sites lots of people appear to have the same
problem as me but I can't find the solution.

I'm running SBS 2003 with SP2, Activesync 4.1 and an Orange SPV M5000
running Win Mobile 5.

Basically, I can't sync with exchange and get the 85010004 error.

I'm setup as follows:-

1. Self sign SSL cert on the server. This is installed on the mobile device
and included in the root cert list.
2. I can browse to /remote and /oma from the device and login without a
pop-up asking me to accept a certificate.
3. All the permissions are set on Exchange as per "Deploying Windows Mobile
5.0 . . " white paper.

If I try to sync with SSL on: On the Device I get a 85010004 error "You
account in Microsoft Exchange Server does not have permission . . ." On
the server I get "Unexpected Exchange server mailbox error: Server xxxx User
xxxx HTTP status code [409] Verify that Exchange mailbox server is working
correctly.

If I try to sync without SSL, the device keeps promoting for a password and
I get the same error on the server.


Any ideas?

Many thanks,

Craig.

Craig,

Does the user account on the SBS/Exchange have permission for Mobile access
activated?
Check the settings on the Exchange-Features tab for the user.

Franz


"Craig" <tba> schrieb im Newsbeitrag
news:...
> Hi all,
>
> Looking at this forum and other sites lots of people appear to have the
> same problem as me but I can't find the solution.
>
> I'm running SBS 2003 with SP2, Activesync 4.1 and an Orange SPV M5000
> running Win Mobile 5.
>
> Basically, I can't sync with exchange and get the 85010004 error.
>
> I'm setup as follows:-
>
> 1. Self sign SSL cert on the server. This is installed on the mobile
> device and included in the root cert list.
> 2. I can browse to /remote and /oma from the device and login without a
> pop-up asking me to accept a certificate.
> 3. All the permissions are set on Exchange as per "Deploying Windows
> Mobile 5.0 . . " white paper.
>
> If I try to sync with SSL on: On the Device I get a 85010004 error "You
> account in Microsoft Exchange Server does not have permission . . ." On
> the server I get "Unexpected Exchange server mailbox error: Server xxxx
> User xxxx HTTP status code [409] Verify that Exchange mailbox server is
> working correctly.
>
> If I try to sync without SSL, the device keeps promoting for a password
> and I get the same error on the server.
>
>
> Any ideas?
>
> Many thanks,
>
> Craig.
>

Franz,

Many thanks - if only it was that easy.

Yes the account has permission and I have also tried other accounts.

Any ideas?

Many thanks,

Craig.



"Franz Leu" <franz.spam-> wrote in
message news:...
> Craig,
>
> Does the user account on the SBS/Exchange have permission for Mobile
> access activated?
> Check the settings on the Exchange-Features tab for the user.
>
> Franz
>
>
> "Craig" <tba> schrieb im Newsbeitrag
> news:...
>> Hi all,
>>
>> Looking at this forum and other sites lots of people appear to have the
>> same problem as me but I can't find the solution.
>>
>> I'm running SBS 2003 with SP2, Activesync 4.1 and an Orange SPV M5000
>> running Win Mobile 5.
>>
>> Basically, I can't sync with exchange and get the 85010004 error.
>>
>> I'm setup as follows:-
>>
>> 1. Self sign SSL cert on the server. This is installed on the mobile
>> device and included in the root cert list.
>> 2. I can browse to /remote and /oma from the device and login without a
>> pop-up asking me to accept a certificate.
>> 3. All the permissions are set on Exchange as per "Deploying Windows
>> Mobile 5.0 . . " white paper.
>>
>> If I try to sync with SSL on: On the Device I get a 85010004 error "You
>> account in Microsoft Exchange Server does not have permission . . ." On
>> the server I get "Unexpected Exchange server mailbox error: Server xxxx
>> User xxxx HTTP status code [409] Verify that Exchange mailbox server is
>> working correctly.
>>
>> If I try to sync without SSL, the device keeps promoting for a password
>> and I get the same error on the server.
>>
>>
>> Any ideas?
>>
>> Many thanks,
>>
>> Craig.
>>
>
>

One thought!

I don't have a published domain for this site just the IP address. So I
have a self cert certificate based on the IP address and this is installed
on the Windows Mobile 5.0 device.

When I enter the server into Activesync I enter the IP address.

Does it work OK with an IP address or does it need a formal www.xxxxx ?

Thanks,

Craig.





"Craig" <tba> wrote in message news:...
> Franz,
>
> Many thanks - if only it was that easy.
>
> Yes the account has permission and I have also tried other accounts.
>
> Any ideas?
>
> Many thanks,
>
> Craig.
>
>
>
> "Franz Leu" <franz.spam-> wrote in
> message news:...
>> Craig,
>>
>> Does the user account on the SBS/Exchange have permission for Mobile
>> access activated?
>> Check the settings on the Exchange-Features tab for the user.
>>
>> Franz
>>
>>
>> "Craig" <tba> schrieb im Newsbeitrag
>> news:...
>>> Hi all,
>>>
>>> Looking at this forum and other sites lots of people appear to have the
>>> same problem as me but I can't find the solution.
>>>
>>> I'm running SBS 2003 with SP2, Activesync 4.1 and an Orange SPV M5000
>>> running Win Mobile 5.
>>>
>>> Basically, I can't sync with exchange and get the 85010004 error.
>>>
>>> I'm setup as follows:-
>>>
>>> 1. Self sign SSL cert on the server. This is installed on the mobile
>>> device and included in the root cert list.
>>> 2. I can browse to /remote and /oma from the device and login without a
>>> pop-up asking me to accept a certificate.
>>> 3. All the permissions are set on Exchange as per "Deploying Windows
>>> Mobile 5.0 . . " white paper.
>>>
>>> If I try to sync with SSL on: On the Device I get a 85010004 error "You
>>> account in Microsoft Exchange Server does not have permission . . ."
>>> On the server I get "Unexpected Exchange server mailbox error: Server
>>> xxxx User xxxx HTTP status code [409] Verify that Exchange mailbox
>>> server is working correctly.
>>>
>>> If I try to sync without SSL, the device keeps promoting for a password
>>> and I get the same error on the server.
>>>
>>>
>>> Any ideas?
>>>
>>> Many thanks,
>>>
>>> Craig.
>>>
>>
>>
>
>

Craig,

I really don't know if it works with an IP instead of a FQDN. Sorry. Maybe
some of the 'real' experts can answer this.
However, I have exactly the same setup here and it works by WLAN as well as
by GPRS from the wild side.
How do you get email to this Exchange server if there is no MX record?
You're not using the POP-connector, are you?

Franz



"Craig" <tba> schrieb im Newsbeitrag
news:O%...
> One thought!
>
> I don't have a published domain for this site just the IP address. So I
> have a self cert certificate based on the IP address and this is installed
> on the Windows Mobile 5.0 device.
>
> When I enter the server into Activesync I enter the IP address.
>
> Does it work OK with an IP address or does it need a formal www.xxxxx ?
>
> Thanks,
>
> Craig.
>
>
>
>
>
> "Craig" <tba> wrote in message
> news:...
>> Franz,
>>
>> Many thanks - if only it was that easy.
>>
>> Yes the account has permission and I have also tried other accounts.
>>
>> Any ideas?
>>
>> Many thanks,
>>
>> Craig.
>>
>>
>>
>> "Franz Leu" <franz.spam-> wrote in
>> message news:...
>>> Craig,
>>>
>>> Does the user account on the SBS/Exchange have permission for Mobile
>>> access activated?
>>> Check the settings on the Exchange-Features tab for the user.
>>>
>>> Franz
>>>
>>>
>>> "Craig" <tba> schrieb im Newsbeitrag
>>> news:...
>>>> Hi all,
>>>>
>>>> Looking at this forum and other sites lots of people appear to have the
>>>> same problem as me but I can't find the solution.
>>>>
>>>> I'm running SBS 2003 with SP2, Activesync 4.1 and an Orange SPV M5000
>>>> running Win Mobile 5.
>>>>
>>>> Basically, I can't sync with exchange and get the 85010004 error.
>>>>
>>>> I'm setup as follows:-
>>>>
>>>> 1. Self sign SSL cert on the server. This is installed on the mobile
>>>> device and included in the root cert list.
>>>> 2. I can browse to /remote and /oma from the device and login without a
>>>> pop-up asking me to accept a certificate.
>>>> 3. All the permissions are set on Exchange as per "Deploying Windows
>>>> Mobile 5.0 . . " white paper.
>>>>
>>>> If I try to sync with SSL on: On the Device I get a 85010004 error "You
>>>> account in Microsoft Exchange Server does not have permission . . ." On
>>>> the server I get "Unexpected Exchange server mailbox error: Server xxxx
>>>> User xxxx HTTP status code [409] Verify that Exchange mailbox server is
>>>> working correctly.
>>>>
>>>> If I try to sync without SSL, the device keeps promoting for a password
>>>> and I get the same error on the server.
>>>>
>>>>
>>>> Any ideas?
>>>>
>>>> Many thanks,
>>>>
>>>> Craig.
>>>>
>>>
>>>
>>
>>
>
>

Craig,

It does work with an IP address however a DNS name is ideal.

Neeraj

"Craig" <tba> wrote in message
news:O%...
> One thought!
>
> I don't have a published domain for this site just the IP address. So I
> have a self cert certificate based on the IP address and this is installed
> on the Windows Mobile 5.0 device.
>
> When I enter the server into Activesync I enter the IP address.
>
> Does it work OK with an IP address or does it need a formal www.xxxxx ?
>
> Thanks,
>
> Craig.
>
>
>
>
>
> "Craig" <tba> wrote in message
> news:...
>> Franz,
>>
>> Many thanks - if only it was that easy.
>>
>> Yes the account has permission and I have also tried other accounts.
>>
>> Any ideas?
>>
>> Many thanks,
>>
>> Craig.
>>
>>
>>
>> "Franz Leu" <franz.spam-> wrote in
>> message news:...
>>> Craig,
>>>
>>> Does the user account on the SBS/Exchange have permission for Mobile
>>> access activated?
>>> Check the settings on the Exchange-Features tab for the user.
>>>
>>> Franz
>>>
>>>
>>> "Craig" <tba> schrieb im Newsbeitrag
>>> news:...
>>>> Hi all,
>>>>
>>>> Looking at this forum and other sites lots of people appear to have the
>>>> same problem as me but I can't find the solution.
>>>>
>>>> I'm running SBS 2003 with SP2, Activesync 4.1 and an Orange SPV M5000
>>>> running Win Mobile 5.
>>>>
>>>> Basically, I can't sync with exchange and get the 85010004 error.
>>>>
>>>> I'm setup as follows:-
>>>>
>>>> 1. Self sign SSL cert on the server. This is installed on the mobile
>>>> device and included in the root cert list.
>>>> 2. I can browse to /remote and /oma from the device and login without a
>>>> pop-up asking me to accept a certificate.
>>>> 3. All the permissions are set on Exchange as per "Deploying Windows
>>>> Mobile 5.0 . . " white paper.
>>>>
>>>> If I try to sync with SSL on: On the Device I get a 85010004 error "You
>>>> account in Microsoft Exchange Server does not have permission . . ." On
>>>> the server I get "Unexpected Exchange server mailbox error: Server xxxx
>>>> User xxxx HTTP status code [409] Verify that Exchange mailbox server is
>>>> working correctly.
>>>>
>>>> If I try to sync without SSL, the device keeps promoting for a password
>>>> and I get the same error on the server.
>>>>
>>>>
>>>> Any ideas?
>>>>
>>>> Many thanks,
>>>>
>>>> Craig.
>>>>
>>>
>>>
>>
>>
>
>

I performed these steps to resolve my problem on my Treo 700W and Exchange
2k# SP2 server (not a front-end/back-end or ISA configuration)

Since ActiveSync doesn’t like for SSL or Forms Based Authentication to be
required according to Microsoft’s sites and since ActiveSync uses the
Exchange virtual directory, I saved the Exchange virtual directory to a file
and created a new directory for ActiveSync that when complete won’t require
SSL (i.e. \newvirtualdirectoryname). My Exchange virtual directory uses both
Forms Based Authentication and required SSL for OWA.

I then had to get into the registry to add the following key on the Exchange
server HKLM\SYSTEM\CurrentControlSet\Services\MasSync\Par ameters. Create a
new String Value and name it the new virtual directory name (i.e.
\newvirtualdirectoryname). Then restart IIS.

I then went into the properties of the new virtual directory and verified
that SSL was not required and Integrated Windows Authentication and Basic
authentication were both checked. I also went into “IP and domain name
restrictions� in properties and denied all other IP addresses except the
Exchange server.

This configuration then cleared all the SSL errors I was receiving in the
event log on the Exchange server and the specific error I was getting on the
Treo. Though I still wasn’t able to get synchronization and had the new
error on my Treo and on the application event log, that my profile was not
able to sync and had a HTTP 409 error. Somehow my brain then triggered me to
look at Exchange System Manager and into my mailbox where I noticed that
IUSR_servername was logged on to my mailbox not my username account. I knew
then that the probable reason why I my credentials were not working is that
they were not being used and the new virtual directory I created was using
anonymous access to my mailbox from the Treo. I unchecked that box and I got
the synchronization to work!!!!

Keep in mind that before all this I had to hook my Treo to my laptop and
copy the SSL certificate from the Exchange server to the Treo and install it
to the root store manually.

I then also needed to verify that I could access OWA over the Treo which I
could, that told me that DNS and HTTP were working using the FQDN.

I had to also configure the Treo with the OWA address for synchronization,
check the box for SSL and give the proper credentials.

All this sounds like a lot to get a mobile phone to gain access to my
Exchange account, in fact it took me about 8 hours to get it together, but
hey as long at it works and I can pass my experience to others.


"Craig" wrote:

> Hi all,
>
> Looking at this forum and other sites lots of people appear to have the same
> problem as me but I can't find the solution.
>
> I'm running SBS 2003 with SP2, Activesync 4.1 and an Orange SPV M5000
> running Win Mobile 5.
>
> Basically, I can't sync with exchange and get the 85010004 error.
>
> I'm setup as follows:-
>
> 1. Self sign SSL cert on the server. This is installed on the mobile device
> and included in the root cert list.
> 2. I can browse to /remote and /oma from the device and login without a
> pop-up asking me to accept a certificate.
> 3. All the permissions are set on Exchange as per "Deploying Windows Mobile
> 5.0 . . " white paper.
>
> If I try to sync with SSL on: On the Device I get a 85010004 error "You
> account in Microsoft Exchange Server does not have permission . . ." On
> the server I get "Unexpected Exchange server mailbox error: Server xxxx User
> xxxx HTTP status code [409] Verify that Exchange mailbox server is working
> correctly.
>
> If I try to sync without SSL, the device keeps promoting for a password and
> I get the same error on the server.
>
>
> Any ideas?
>
> Many thanks,
>
> Craig.
>
>
>