I've followed numerous guides, but I can't get Exchange Activesync working on my SBS 2003
I've been working on this for the last 5 or so days now and I just can't get it working. At one point, I had Exchange Activesync working from a fresh install... but even after numerous installs I can't get it working again. I'm running Small Business Server 2003 and MS Update updates Exchange Server 2003 to SP1. I've tried Exchange Activesync with SP1, and I've also tried with SP2... neither work. I am able to connect and sync from Outlook 2007 locally to my Exchange Server. I can access mysite.com/oma, as well as mysite.com/exchange. When I run a test from testexchangeconnectivity.com I get the following error: Attempting to send OPTIONS command to server Testing the OPTIONS command failed. See Additional Details for more info A Web Exception occured because an HTTP 401 - Unauthorized response was received from Unknown I've been pulling out my hair and I've done about 4 fresh installs over the last few days trying to figure out how to make this work correctly. From all the reading I've been doing, it appears SBS 2003 configures Exchange Server 2003 correctly. The "exchange-oma" virtual directory is already added to IIS. From a completely default install (including all updates and service packs), I have not been able to get Exchange Activesync working. I've tried disabling forms based authentication on the Exchange Virtual Server (default was turned on). This didn't work. I followed this guide: http://support.microsoft.com/kb/817379. My IIS Exchange-OMA authentication methods are both Integrated and basic, IP's are denied except for my server IP, and I do NOT require SSL. This didn't fix the problem. Ports are correctly forwarded from my router (both 80 and 443). There is no firewall install on this server (therefor no ports to configure). I've ran the internet connection setup wizard multiple times. If you go to the last post on this thread: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/SBS_Small_Business_Server/Q_24507160.html I've followed everything he did (as he had the same error I have). He got his working... but I can't seem to get mine working even following all those steps. Any help would be greatly appreciated. I'm not sure how this worked at one time for me... but for the life of me I can't get it working again.
October 7th, 2009 3:00pm

I think it would be better if you Recreate IIS virtual directories for OMA http://searchexchange.techtarget.com/tip/0,289483,sid43_gci1240016_mem1,00.html also make sure you have the SSL certs in place and also you have published Active Sync over forewall and have selected the unsupported devices in mobile support options under ESM http://www.petri.co.il/configure_oma.htm also it would be good if you post this in SBS 2003 forum also. so that sbs profs can also shed light on this http://www.microsoft.com/communities/newsgroups/list/en-us/default.aspx?dg=microsoft.public.windows.server.sbs&cat=en_us_25c94334-6e44-45f5-8952-88f3cf9b5d24&lang=en&cr=us Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
Free Windows Admin Tool Kit Click here and download it now
October 7th, 2009 3:13pm

Thank you for the reply. I recreated virtual directories for exchange following this guide: http://support.microsoft.com/kb/883380 I followed all the instructions, except I also deleted the exchange-oma virtual directory (even the the guide didn't tell me to delete that one). Once it was completed all my my directories were showing up again (except exchange-oma). In any case, a quick test and I'm still getting the same error from testexchangeconnectivity.com. Unsupported devices is already selected in ESM (the default setting). I installed a server generated SSL certificate when I went through the internet connection settings setup. What do you mean by "you have published Active Sync over forewall? " If you mean Firewall, I'm not running one on my SBS 2003. But like I said, the ports that activesync requires (80 and 443) and enabled and forwarded to my SBS 2003 IP. I'll create a post in the SBS 2003 forum as well. I wasn't sure if double posting was allowed here (it usually isn't). Any other help/ideas would be appreciated :)
October 7th, 2009 3:47pm

Does that means your server is running without OMA directories now? What is the error message you get when you try to do testexchangeconnectivity.com? have you seen this? Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
Free Windows Admin Tool Kit Click here and download it now
October 7th, 2009 4:00pm

It's running without the exchange-oma directory right now. It still has the new OMA directory that was created when I followed the recreate exchange directories guide you mentioned. The error message I get is: A Web Exception occured because an HTTP 401 - Unauthorized response was received from Unknown And yes... I've seen that. I have disabled forms and I disabled SSL being required.
October 7th, 2009 4:03pm

I'm doing another fresh install right now. Should take a few hours to complete. What I'm looking for is what exactly do I need to do from a complete fresh install of SBS 2003. Because if I do nothing, it doesn't work. And when I start making changes to things, it still doesn't work.
Free Windows Admin Tool Kit Click here and download it now
October 7th, 2009 4:05pm

Hi, It seems that you are trying to use active-sync feature without any valid certificated for your domain. Actually I once faced the same problem when I used the self-signed certificate for active-sync which is created during installation. And installing certificate from certification authority solved my problem. Thanks.
October 7th, 2009 6:33pm

Hi, It seems that you are trying to use active-sync feature without any valid certificated for your domain. Actually I once faced the same problem when I used the self-signed certificate for active-sync which is created during installation. And installing certificate from certification authority solved my problem. Thanks. Thanks for the reply. Yep... I was trying to use a self signed certificate. As suggessted in the Small Business Server 2003 newsgroup I posted this same question in, someone told me to install an SSL cert from a trusted authority. I'm re-installing SBS 2003 right now and once everything is installed and updated I'll try creating a cert from GoDaddy. Thanks again for the info... I'm hoping a trusted certificate fixes this problem for me :)
Free Windows Admin Tool Kit Click here and download it now
October 7th, 2009 6:43pm

I agree . Self Signed Certs has its own limitations. I am sure once you install third party cert then OMA should work. Limitations of the Self-Signed Certificate The following list describes some limitations of the self-signed certificate. Expiration Date: The self-signed certificate expires 12 months after Exchange 2007 is installed. When the certificate expires, a new self-signed certificate must be manually generated by using the New-ExchangeCertificate cmdlet. Outlook Anywhere: The self-signed certificate cannot be used with Outlook Anywhere. We recommend that you obtain a certificate from a Windows PKI or a trusted commercial third party if you will be using Outlook Anywhere. Exchange ActiveSync: The self-signed certificate cannot be used to encrypt communications between Microsoft Exchange ActiveSync devices and the Exchange server. We recommend that you obtain a certificate from a Windows PKI or a trusted commercial third party for use with Exchange ActiveSync. Outlook Web Access: Microsoft Outlook Web Access users will receive a prompt informing them that the certificate being used to help secure Outlook Web Access is not trusted. This error occurs because the certificate is not signed by an authority that the client trusts. Users will be able to ignore the prompt and use the self-signed certificate for Outlook Web Access. However, we recommend that you obtain a certificate from a Windows PKI or a trusted commercial third party. Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
October 7th, 2009 6:56pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics