Exchange Activesync

snotty54 · May 13, 2011

Activesync down-reviewing IIS 7.0 logs and found this:
"2011-05-13 13:26:59 ::1 GET /Microsoft-Server-ActiveSync/App_Data - 80 - ::1 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.0;+WOW64;+SLCC1;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.21022;+.NET+CLR+3.0.30729;+.NET+CLR+3.5.30729) 403 4 5 2105"

It is difficult to decipher the logs but this one has the word "Activesync" in it so I am hoping it will give a clue as to why my activesync is not working. My Nokia e63 returns an error from the server when it queries it.

If anyone can understand the log and point me in a direction to resolve this appreciate it. This log was in the "w3svc1" folder

snotty54 · May 13, 2011

Still looking at these error codes trying to figure out where to go to fix this, here is another:

"2011-05-13 14:17:40 192.168.0.2 POST /EWS/Exchange.asmx - 443 - 192.168.0.20 Microsoft+Office/12.0+(Windows+NT+6.1;+Microsoft+Office+Outlook+12.0.6554;+Pro) 401 1 2148074254 0"

58sniper · May 13, 2011

Try running though

https://www.testexchangeconnectivity.com/.

It will often get you going in the right direction. That's Microsoft's official tool.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.exchangeblogs.com/

snotty54 · May 13, 2011

Thanks Pat. I have tried using that before but don't have enough experience to understand the results. I just did the activesync test and it fails on every step and then using autodiscover it goes green for every step until it hits the certificate:

Checking the IIS configuration for client certificate authentication.
Client certificate authentication wasn't detected.
Additional Details
Accept/Require Client Certificates isn't configured.

On the next test I get this:

Attempting to resolve the host name autodiscover.scottroe.ky in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 208.157.149.3

Testing TCP port 80 on host autodiscover.scottroe.ky to ensure it's listening and open.
The port was opened successfully.
ExRCA is checking the host autodiscover.scottroe.ky for an HTTP redirect to the Autodiscover service.
ExRCA failed to get an HTTP redirect response for Autodiscover.
Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from IIS7. Body of the response: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "

http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="

http://www.w3.org/1999/xhtml">

<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>403 - Forbidden: Access is denied.</title>
<style type="text/css">

</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
<div class="content-container"><fieldset>
<h2>403 - Forbidden: Access is denied.</h2>
<h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
</fieldset></div>
</div>
</body>
</html>

It seems to indicate my certificate isn't set up properly. My problems with activesync started around the time I was trying to resolve an autodiscover error everytime I opened up outlook anywher on my remote client at the office, and I upgraded to a GoDaddy UCC cert to fix the autodiscover error. For the novice, loading a certificate successfully in SBS2008/Exchange2007 is not easy. How can I fix the IIS "client certificates aren't configured"? Maybe that'll get my activesync working again.

Thanks for any help, appreciated,

Scott

snotty54 · May 14, 2011

I've been trying to get my activesync working for a couple of months now, with no luck. There are 3 different threads on here and I've appreciated the help by you Pat and others. I think I've established that the problem is that somehow the UCC GoDaddy cert is not enabled with IIS properly but I'm not sure how to do that. When I use the Exchange Management shell and the command get exchange cert it brings up the GoDaddy but also 3 self signed certs so I'm wondering if I need to delete all those self signed ones in the IIS console?

snotty54 · May 14, 2011

I'm at my wit's end with this activesync problem. The more I delve into trying to find the answer, the more complexity and questions come up about what it might be, and I seem to be on this never ending spiral of complexity with no clear cut way to resolve the issue. I realize this is a voluntary help site but if anyone has a moment, maybe you can answer this one: "In IIS console, under default web site\Microsoft-Server-ActifeSync, and ssl settings, under "alerts" it says "The site does not have a secure binding (HTTPS) and cannot accept SSL connections". Would this have anything to do with the activesync not working?

Thanks,

Scott

Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Exchange Activesync

snotty54

Technical User

snotty54

Technical User

58sniper

MIS

snotty54

Technical User

snotty54

Technical User

snotty54

Technical User

Similar threads

Part and Inventory Search

Sponsor