Exchange 2003 Pushmail active sync Single Server

[blkj]

Pushmail works on 2 user accounts/mobile5 devices
Environment: Win2k3 Std Server, Exchange 2003, firewall ports 80,443 open.
No other global cat servers or AD replicas.

When I added another user it fails to sync:
“Your account in Microsoft Exchange Server does not have permission to synchronize with your current settings. Contact your Exchange Server Administrator.”
Support code:0x85010004

The new account and windows mobile5 device can browse the internet and login to OWA (credentials OK)

Exchange System manager --> mobile services --> has global allow user initiated sync and enable direct push over http(s) enabled
enforce device security is unchecked.

I figured it was a security/rights issue with group membership so I copied my user (admin rights) to a new user and that fails with the same error.
So it does not look like an active directory rights issue.

I am not forcing SSL (not using it for this test)

Then thought it could be denying rights to the Exchange virtual directory or the exchsvr folder, but administrator rights should cover that as my account works.

Any hints, tips or ideas would be great.

 

[ShackDaddy]

In the properties in ADUC for that user, does the user have ActiveSync permissions?

Dave Shackelford
MCSE, CCNA, Microsoft MVP: Exchange
Shackelford Consulting

 

[blkj]

In Active Directory Users and computers properties of the user in exchange feature tab it has all enabled.
I cannot find any specific reference to activesync.

 

[ShackDaddy]

Did you try looking at the Microsoft-Server-ActiveSync virtual directory? I read somewhere that if you are having the problem you are having, you can go into the Security tab on that vdir and look at the Auth options and uncheck the "Integrated Security" box to fix things. I figure you could always try it and put it back if it makes things worse or doesn't help.

Dave Shackelford
MCSE, CCNA, Microsoft MVP: Exchange
Shackelford Consulting

 

[blkj]

Thanks for the idea, tried it and it made no difference to the error.

I am very close to uninstalling IIS and exchange and reinstalling.
I have 3 other sites and they are all working fine.

 

[blkj]

RESOLVED

I kicked all the users off and:
Stop IIS & Exchange services including smtp
Remove IIS
Includes:
Active Server Pages
ASP.net

http://WWW Service

App Server Console
SMTP
NNTP

Reinstall IIS

It is all working now, only took 45mins.
(I must have screwed the config somewhere along the line)