Hi, I hope someone can help me on that one.  We just moved on Exchange Server 2013 and I'm trying to get the activesync to work but when I'm trying the website https://testconnectivity.microsoft.com I'm getting an error on the session but first I'm getting a warning on the section: 

Testing HTTP Authentication Methods for URL https://myexchangeserver.com/Microsoft-Server-ActiveSync/

The following authentication methods are enabled, but they aren't allowed authentication methods for this service. Methods: NTLM
HTTP Response Headers:
Date: Sat, 07 Feb 2015 22:14:46 GMT
WWW-Authenticate: Basic Realm="Outlook Proxy",NTLM
Content-Length: 0

And then I get this error:

Attempting to send the OPTIONS command to the server. 
  Testing of the OPTIONS command failed. For more information, see Additional Details. 
   Tell me more about this issue and how to resolve it 
  
 Additional Details 
  
An HTTP 401 Unauthorized response was received from the server. This may be the result of invalid credentials or a configuration problem on the Exchange Server.
HTTP Response Headers:
Date: Sat, 07 Feb 2015 22:14:46 GMT
WWW-Authenticate: Basic Realm="Outlook Proxy",NTLM
Content-Length: 0

Let me know if you have any help or things I can try on this.

Thanks in advance.

Jason

Hi Paul, yes I did that and everything is setup with the default settings.  Any other idea I can try?

Thanks

Jason

I can get the activesync working from inside the company but not from outside.  Port 443 is opened and I verified with Wireshark and it does receives and sends communications but still getting the error when I'm trying ton the https://testconnectivity.microsoft.com/ website and no device can communicate outside.  Let me know if you have any other things I can look?

Thanks

Jason

 

Did you make any changes to the default virtual directory settings, for example the IIS authentication settings?

FYI you can review your current settings against the defaults here:

https://technet.microsoft.com/en-us/library/gg247612(v=exchg.150).aspx

Are external connections going through a reverse proxy?

Yes we are using a reverse proxy.  Is there another setup we have to do because we are using a reverse proxy on exchange server 2013?

Jason

You say it works internally, just not externally. If external clients are going through a reverse proxy, then that is where you should focus your attention.

Look at the error you posted earlier:

The following authentication methods are enabled, but they aren't allowed authentication methods for this service. Methods: NTLM

Compare that to the auth that is supposed to be set on the ActiveSync vdir - Basic Authentication

https://technet.microsoft.com/en-us/library/gg247612%28v=exchg.150%29.aspx

Looks like a mismatch between what Exchange wants and what your reverse proxy is doing.