test activesync fail with exchange 2007 sp1
We have exchange 2007 sp1 under window 2003 sp2. Our Activesync can not work with apple I-phone. We ran https://www.testexchangeconnectivity.com/Default.aspx and have result as follows:
:
Testing Exchange ActiveSync
Exchange ActiveSync test Failed
Test Steps
Attempting to resolve the host name mail.fairplex.com in DNS.
Host successfully resolved
Additional Details
IP(s) returned: 208.77.72.175Testing TCP Port 443 on host mail.fairplex.com to ensure it is listening and open.
The port was opened successfully.
Testing SSL Certificate for validity.
The certificate passed all validation requirements.
Test Steps
Validating certificate name
Successfully validated the certificate name
Additional Details
Found hostname mail.fairplex.com in Certificate Subject Common nameValidating certificate trust for Windows Mobile Devices
The test passed with some warnings encountered. Please expand additional details.
Additional Details
Certificate is only trusted on Windows Mobile 5.0 AKU2 (MSFP) and later. Windows Mobile 5.0 devices will not be able to sync. Root = E=info@valicert.com, CN=http://www.valicert.com/, OU=ValiCert Class 2 Policy Validation Authority, O="ValiCert, Inc.", L=ValiCert Validation NetworkTesting certificate date to ensure validity
Date Validation passed. The certificate is not expired.
Additional Details
Certificate is valid: NotBefore = 6/28/2008 1:17:59 AM, NotAfter = 6/28/2010 1:17:59 AM"Testing Http Authentication Methods for URL https://mail.fairplex.com/Microsoft-Server-Activesync/
Http Authentication Methods are correct
Additional Details
Found all expected authentication methods and no disallowed methods. Methods Found: BasicAttempting an ActiveSync session with server
Errors were encountered while testing the ActiveSync session
Test Steps
Attempting to send OPTIONS command to server
Testing the OPTIONS command failed. See Additional Details for more info
Tell me more about this issue and how to resolve it
Additional Details
Could not find MS-Server-ActiveSync and MS-ASProtocolVersions header. Headers received were: Allow: OPTIONS, TRACE, GET, HEAD
Public: OPTIONS, TRACE, GET, HEAD, POST
Content-Length: 0
Date: Tue, 20 Oct 2009 22:30:45 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
We use cisco ASA firewall and there is no proxy for https.
Basically, testexchangeconnectivity.com's result shows test Exchange Activesync failed when attempting to send OPTIONS command to server. We are not sure what causes it. Three questions:
1. How to test send OPTIONS command from internal network to exchange server?
2. How to test activesync locally to make sure it works 100%?
3. How to reset (reinstall) activesync when it is necessary?
Many Thanks!
William Xu
Network Admin
Fairplex
wxu@fairplex.com
All Replies
- Hi, William-Xu
2. How to test activesync locally to make sure it works 100%?
Try to use Windows Mobile SDK aka Emulator:
Software Development Kit for Windows Mobile 5.0
Windows Mobile 6 SDK
Windows Mobile 6.1.4 emulator
Windows Mobile 6.5 Developer Tool Kit
For Symbian and iPhone, if you plan to use them, you need Nokia and Apple SDK.
3. How to reset (reinstall) activesync when it is necessary?
You can use backup/restore options in IIS console or, if you have great issues, you can try to reset IIS settings - http://support.microsoft.com/kb/883380
"Нет высшего наслаждения для интеллигентного человека, чем уничтожить мировой шедевр" © Using Windows Mobile tools for checking out why "our Activesync can not work with apple I-phone," seems a bit like carrying coals to Newcastle :-). Here are two fine free tools:
AccessMyLan ActiveSync Tester for Windows and the iPhone / iPod touch
https://store.accessmylan.com/main/diagnostic-tools?pos=footer
Make sure your iPhone is update with the latest OS:
This PowerShell command provides some useful information:
Get-ActiveSyncDeviceStatistics –Mailbox <mailbox name>
Another usefull option is to add ActiveSync Light-Weight Server Logging to track details of the last 15 (configurable) requests/responses and possible errors for problem diagnosis. The user can retrieve this information from Outlook Web Access, select Options, Mobile Devices, Retrieve Log. This log will be mailed to the user's inbox with a request to forward the attachment to support.
By default, the logging is off. It can be turned on and tweaked easily from web.config, located in C:\Program Files\Microsoft\Exchange Server\ClientAccess\Sync on the Exchange 2007 CAS servers:<add key="MailboxLoggingEnabled" value="true"></add>
<add key="NumOfQueuedMailboxLogEntries" value="15"></add>
<add key="MaxSizeOfMailboxLog" value="8000"></add>
Managing your Active Sync Device from Outlook Web Access in Exchange 2007 SP1
http://msexchangeteam.com/archive/2007/05/30/439568.aspx
You might have to change a time out value in your firewall:
Enterprise firewall configuration for Exchange ActiveSync Direct Push Technology
http://support.microsoft.com/Default.aspx?id=905013
Heartbeat Interval Adjustment
http://technet.microsoft.com/en-us/library/cc182270.aspxiPhone OS Enterprise Deployment Guide
Second Edition, for Version 3.1 or later
http://manuals.info.apple.com/en_US/Enterprise_Deployment_Guide.pdf
Jon-Alfred Smith MCTS: Messaging | MCSE: S+M
- You might want to start with running this powershell command on you CAS server :
Test-ActiveSyncConnectivity -MailboxCredential (Get-Credential domain\user) -UseAutodiscoverForClientAccessServer
Note : Please replace domain\user with your credentails.
Cheers Wayne
Airloom
