activesync to server

[johng75]

win mobil 2003 PDA's

exchange 2003 SP1 (powers that be done want to go to SP2 yet)

win 2003 server std


when i attempt to connect to the server via activesync i get the following error:

'sync failed because of a server error. try again. error code: HTTP_500'


ive never used the activesync to a server feature before, my test PDA is hooked into the 802.11b network and both the HH and server on on this side of the firewall, so i know its not a porting issue (im pointing at the internal address) the one thing i did notice was in the IIS the default folder for the active sync was pointing to the c:/program files/exchsrvr/oma/sync folder and the sync folder is empty??? should this be pointed somewhere else? is there something else that could help with this issue?


thank you in advance

 

[johng75]

found my answer

article ID 886346

multiple SMTP addresses

 

[johng75]

oops, nope that took care of the 500 error, but now im getting

sync failed. verify that you have entered the correct server name and try again error code: internet_7


ive tried

mail.domain.com < i still get the 500 error

http://mail.domain.com

< i get the new error

http://mail.domain.com/oma

< new error

http://mail.domain.com/microsoft-server-activesync

< new error

 

[johng75]

ssl is not enabled

 

[johng75]

things i have been looking at



Error code: HTTP_500

Error Message: Synchronization failed due to an error on the server. Try again.

Explanation:

a. Windows Integrated Authentication is not enabled on the Exchange virtual directory on the Exchange server. The Server ActiveSync component uses Kerberos authentication when communicating with the Exchange server.

b. Windows Integrated Authentication is enabled on the Exchange virtual directory on the Exchange server, but Kerberos is disabled via the IIS metabase.

c. Kerberos is enabled, but IIS may return HTTP Status 401 every 30 Days when using Kerberos on Windows 2000.

d. Sync is attempted while the mailbox is being moved.

e. User attempting sync is a member of more than 200 groups.

f. The Left Hand Side(LHS) and Right Hand Side(RHS) of the user’s primary SMTP address are both different from the SMTP address based on the default recipient policy.

g. The Exchange virtual directory on the Exchange Server is configured to require Secure Sockets Layer (SSL). Server ActiveSync communicates with the Exchange Server over port 80.

h. Windows SharePoint® has been installed on the Exchange server.

i. The user composes e-mail on the device and attempts a sync when mailbox limits have been reached on the Exchange server.

j. Anonymous authentication is enabled on the Microsoft-Server-ActiveSync virtual directory on the server.

 

[johng75]

User Action:

a. To enable Integrated Windows Authentication on the Exchange virtual root:

1. Start Exchange System Manager.

2. Expand Servers, expand Server Name, and then expand Protocols. Expand HTTP, and then expand Exchange Virtual Server.

3. Right-click Exchange, and then click Properties.

4. Click the Access tab, click Authentication, and then click to select the Integrated Windows Authentication check box.

5. Click OK, and then click OK again.

b. Re-enable Kerberos on the Exchange server by following the instructions in the KB Article 215383. HOW TO: Configure IIS to Support Both Kerberos and NTLM Authentication ID: 215383

c. If you are using Exchange 2003 on Windows 2000, obtain the hot fix outlined in KB 329938 by calling Microsoft Product Support Services.

d. Attempt sync later.

e. Reduce the group membership or obtain the QFE fix outlined in KB 818526 by calling Microsoft Product Support Services.

f. Add a registry key. Use Regedt32 and locate

HKLM\System\CurrentControlSet\Services\MasSync\Parameters. Under the Parameters key create a Reg_SZ value called SMTPProxy. Set the value to the domain defined by the default recipient policy. For example, Microsoft.com. Restart the IIS Admin service. If you are using a front-end/back-end configuration this registry key needs to be added on the front-end server.

g. To configure the Exchange virtual directory to not require SSL

1. On the Exchange server click Start, Programs, Administrative Tools, and then click Internet Services Manager.

2. Expand the <ServerName> and the <Default Web Site> nodes.

3. Right-click the Exchange virtual root, and then click Properties.

4. On the Directory Security tab, click Edit under Secure
Communications.

5. Verify that the "Require Secure Channel (SSL)" check box is not
selected, and then click OK two times.

6. Close Internet Services Manager.

If you must use SSL on the default Exchange directory, create an alternate Exchange virtual directory for Exchange ActiveSync to use and add a registry key as per the steps provided in the Checklist section.

h. Configure Windows SharePoint to use Kerberos authentication by following the steps in KB 832769 HOW TO: Configure Windows SharePoint Services to Use Kerberos Authentication

Try to delete items in your mailbox to bring it within limits or contact your Exchange administrator to change the limits on your mailbox.

j. Uncheck anonymous authentication on the Microsoft-Server-ActiveSync virtual directory on the server. Basic authentication should be enabled.

 

[johng75]

ssl is not enabled, kerebos is not in use, anonymous authetication is turned off, the reg key has been added, IIS restarted, and im still getting the 500 error........i think im going to force the issue of SP2 for exchange, couldnt hurt right?

im about at the end of my string, and SP2 is about the only thing i havnet tried as of yet........

the MS-AS in IIS still points to the empty folder, why does this not seem right to me????