OWA/Mobile phone access to Email
Hi Everyone,
We have an Exchange 2010 server with a paid for SSL certificate from Comodo. We can access the website (https://mail.mycompany.co.uk) with no issues.
We're trying to configure remote access on some mobile phones that have native Mail for Exchange clients. When I try and synchronise a phone with an account it will fail, and the following is logged in my exchange servers event viewer:
- < Event
xmlns =" http://schemas.microsoft.com/win/2004/08/events/event
" >
- < System
>
< Provider
Name =" Schannel "
Guid =" {1F678132-5938-4686-9FDC-C8FF68F15C85}
" />
< EventID
> 36887 </ EventID
>
< Version
> 0 </ Version >
< Level
> 2 </ Level >
< Task
> 0 </ Task >
< Opcode
> 0 </ Opcode >
< Keywords
> 0x8000000000000000 </ Keywords
>
< TimeCreated
SystemTime =" 2010-09-16T12:43:46.313764600Z
" />
< EventRecordID
> 9718 </ EventRecordID
>
< Correlation
/>
< Execution
ProcessID =" 484 "
ThreadID =" 520 "
/>
< Channel
> System </ Channel
>
< Computer
> mailserver.domain.local </ Computer
>
< Security
UserID =" S-1-5-18 "
/>
</ System >
- < EventData
>
< Data
Name =" AlertDesc "
> 10 </ Data >
</ EventData >
</ Event >
From that message I've looked up that eventid and alert number (10) and found this : http://msdn.microsoft.com/en-us/library/ff476074%28VS.85%29.aspx
The error message seems to relate to : TLS1_ALERT_UNEXPECTED_MESSAGE. However, apart from this I'm unsure of where to go next.
As I've mentioned browser access to our OWA is fine, all our browsers accept the certificate and confirm it's valid.
Any help would be appreciated.
Thanks,
David
September 16th, 2010 9:01am
Can you test Active Sync from this website and report the issues:
https://www.testexchangeconnectivity.com/Tim Harrington - Catapult Systems - http://HowDoUC.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2010 9:15am
Hi Tim,
I performed the test with the following outcome:
An ActiveSync session is being attempted with the server.
Errors were encountered while testing the ActiveSync session
Test Steps
ExRCA is attempting to send the OPTIONS command to the server.
Testing of the OPTIONS command failed. For more information, see Additional Details.
Additional Details
A Web Exception occurred because an HTTP 401 - Unauthorized response was received from IIS7
September 16th, 2010 9:20am
401 is an authentication issue. Let's start with the cert...did the ExRCA give you any warnings or errors with the certificate? Can you go here:
http://www.digicert.com/help/ and see if you have and Cert chaining issues?Tim Harrington - Catapult Systems - http://HowDoUC.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2010 9:59am
Hi Tim,
Both apps have no issues with the certificate.
September 16th, 2010 10:15am
Are you going through a reverse proxy (ISA/TMG)?
Another thing to try is recreating the ActiveSync VD. See this:
http://www.howexchangeworks.com/2010/06/reset-virtual-directory-in-exchange.htmlTim Harrington - Catapult Systems - http://HowDoUC.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2010 10:47am
Hi Tim,
That option isn't visible for me.
September 16th, 2010 11:02am
I am sorry, what verion of exch with SP level? If not on Exch 2010 SP1 then you will need to use the shell:
http://technet.microsoft.com/en-us/library/bb124752.aspx
http://technet.microsoft.com/en-us/library/aa997160.aspxTim Harrington - Catapult Systems - http://HowDoUC.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2010 11:17am
Ok I've removed and re-added it via the shell. Still the same issue. Plus it now doesn't appear in the management console gui, but powershell confirms its existance.
September 17th, 2010 10:27am
Installed SP1, tried the recreating the ActiveSync VD via the GUI, which said it completed, but now the directory is gone from IIS itself and the gui
Not impressed with exchange 2010 at the moment, has to be said...
Edit: Recreated it via the shell again which has appeared, but still getting HTTP 401 errors.
Free Windows Admin Tool Kit Click here and download it now
September 20th, 2010 7:09am