Exchange ActiveSync Problem - Hero, G2 Touch General

Hi all,
I have a Hero from T-Mobile UK, and I'm not able to setup EAS. Going over the web or local network, using SSL or not, the server details verify, but when attempting a sync I all 3 data types (mail/contacts/calendar) fail with 'Sync protocol error'. I can see the hits in my web server logs, no HTTP error codes are being returned. Server is Exchange 2007.
Anybody come across this? Does anyone know if the HTC Exchange client makes any logs on the device?

I use EAS on my hero to Exchange 2010, and Exchange 2007 and I havent had any problems at all (apart from certificate signing issues).
Id say it would be a good idea to check your port settings, your outlook anywhere settings and your account permissions on your exchange server, as it seems odd for the phone to spew an error like that without something on the server playing up.

It's syncing with a Windows Mobile device without problems, and an iPhone. The Hero also sync's with a 2003 Exchange server I have access to with no issues.
I agree it could be some configuration option on the server which is tripping it up, but I've gone through everything I can think of. Having a look through adb logcat doesn't really tell me anything else, for example:
Code:
D/EAS_AppSvc( 271): 06021143 SyncThreadManager.checkQueue() Mail
W/System.err( 271): com.htc.android.mail.eassvc.core.SyncException: Protocol error
W/System.err( 271): at com.htc.android.mail.eassvc.core.SyncManager.getSyncCmdError(SyncManager.java:6225)
W/System.err( 271): at com.htc.android.mail.eassvc.core.SyncManager.syncEASEMail(SyncManager.java:3988)
W/System.err( 271): at com.htc.android.mail.eassvc.core.SyncManager.doSync(SyncManager.java:563)
W/System.err( 271): at com.htc.android.mail.eassvc.EASAppSvc$MailINCommandHandler.handleMessage(EASAppSvc.java:4850)

Hi! I have also an Exchange 2003 SP2 server and had similar issues. Be sure that you don't have "require SSL" for the /exchange folder of your IIS server activated. OMA works by simply accessing /exchange for getting access to your mailbox - but only without SSL. If you need SSL required for /exchange, you have to create a new virtual directory especially for OMA (e.g. /exchange-oma). Check out this guide by Microsoft:
http://support.microsoft.com/kb/886346
Another problem is using a primary email address which is different to the default Recipient Policy. If that's the case, EAS is not able to locate the mailbox. You have to tell EAS to use the secondary email address:
http://support.microsoft.com/kb/817379

Related

PUSH MAIL ISSUES

All need some help. I'm trying to utilize the Push Mail technology. I have set up to sync with an exchange server correctly, however within our company we use certificates to authenticate. So I expported my certificate and imported it into my 8125. When I go to look at my certs in my 8125 I see that it imported successfully. Now when I try to sync it asks for the password and it comes back with an error code of 0x85030028 (cannot obtain a valid cert). Now if I use my PIE and go to the OWA which utilizes the cert as well it sees it and authenticates just fine. For some reason activesync isn't seeing it. Any ideas how to fix?
Geno
From what I know, you can't use certificates with Push email. You have to setup a new virtual site on the server running OWA called it Exchange-PPC or something and have it set for Intergrated Authentication, then you would configure your device to hit the new site like http://www.site.com/exchange/username or something like that.
There's a little more than just setting up the site, some registry changes, check Microsofts site for the error number, you'll find a KB document explaining how to setup the Virtual Site for syncing with your device.

ActiveSync Issue

Hi,
I have a HTC TyTN ll and I am having problems synchronising my work email.
The server at work has exchange 2003 SP2 and Activesync. We also have both OWA and OMA and I can access these succesfully through the PDA.
The OWA/OMA both use SSL and have a instantssl certificate installed which I have downloaded and installed onto my device.
My credentials are correct, I have recreated the data source and resetted device but..
During snychronisation on the PDA I get the following error:
"ActiveSync encountered a problem on the server" Support Code: 0x85010014.
Following a google I found that this is as a result of having the SSL port 443 defined in IIS for the webmail site. Now if I remove this port I get the message "waiting for network". I have read this is temporary, but I have tried for the past few days and it still doesnt get past this stage. I am using our wireless and the GPRS as provided by orange to connect.
Also removing the port 443 has concequences on anyone else accessing the OWA as it does not work.
Do any of you guys know any ideas on how I can get the PDA to synchronise?
Will I have to first create an activesync partnership with the server?
Many Thanks in Advance
I now recieve the following error on the server:
Exchange Server 2003" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=817379). For information about how to properly configure IIS to support Kerberos and NTLM authentication, see Microsoft Knowledge Base article 215383, "How To Configure IIS to Support Both Kerberos and NTLM Authentication" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=215383). This issue may occur after installing Windows SharePoint Services on a server running Exchange Server 2003. For information about how to properly configure a server to run both Windows SharePoint Services and Exchange Server 2003, see Microsoft Knowledge Base article 823265, "You receive a "Page not found" error message when you use Outlook Web Access (OWA) to browse the Exchange Server 2003 client after you install Windows SharePoint Services" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=823265).
Exchange is installed on an SBS 2003 and I dont believe the microsoft kb is useful for this. Even if it is, I can work around this by removing ssl. However at this point I dont get any errors on the server and all I get from the HTC is "waiting for network". As mentioned earliar.
Any suggestions would be highly appreciated.
Thanks

Syncing and Exchange Server

Since I've had this phone I've failed to sync with the Sync Centre. It just results in errors every time.
However, because I will be syncing everything that will be on my exchange server, how can I set up this exchange server on the X1? I don't mean the email address only, I need it to connect to my exchange calender, contacts, mail - everything.
I sync to my exchange server via mail2web with no problems - keep in mind if you are syncing to a pc as well you need to select only one location for calendar & contacts.
Isn't it possible to put in the exchange server details directly into teh phone without using 3rd party software?
Is it true that vodafone have removed the exchange feature from their handset?
I'm getting this error.. 0x85010014
Jammy2 said:
Isn't it possible to put in the exchange server details directly into teh phone without using 3rd party software?
Is it true that vodafone have removed the exchange feature from their handset?
Click to expand...
Click to collapse
you don't need 3rd party to set up exchange activesync, it's out of the box.
Jammy2 said:
I'm getting this error.. 0x85010014
Click to expand...
Click to collapse
this is relating to the SSL. Either you have setup an activesync w/o SSL connection, or your PDA clock might be wrong that makes the SSL certificate invalid.
That's assuming your exchange server side is okay.
I've just discovered that everything part from mail will sync if I don't specify my exchange in Vista. When I do that's where the errors show up.
As for exchange on the phone, I will get "network waiting" when I disable SSL. This actually appears to be an issue with many WM devices. What do you mean when you say my clock might be wrong?
The simple Version:
Authentication inside of Active Directory runs over "Tickets" for every User. If the clocks between 2 Ressources are too tifferent, the Ticket becomes invalid, cause the time is an important component of the encryption.
The savest way is to let the phone sync its clock with the exchange server - after Active Sync configuration
For doing this you only need working SSL-encrypted "Outlook Web Access" and your Exchange account have to be "Active Sync"-enabled (an admin has to do this).
Windows Mobile shows you all information yout need to set Active Sync up.
Ah, so the exchange server needs to be active sync enabled?
At the moment I am syncing everything from outlook on my pc, not directly to the server as the device was designed to do
Mine works with my Exchange 2007 server without a problem, out of the box. I just entered my server address, my domain username and password.
Are you sure the server is set up correctly. The exchange server has to have OMA (Outlook Mobile Access) set up. Are there any other devices syncing with the server correctly? Is port 443 open?
Something to note I had to install the security certificate of the server on my phone before it could sync.
I use mine with an Exchange 2007 too. After installing the server
all the necessary features are turned on automatically:
- OWA (Outlook Web Access - website)
- OMA
- Active Sync user role for every account
The OWA-website has to be accessible for public. And the server certificate (for SSL) has to be installed if it is selfsigned
(it is if your browser shows a certificate warning on computers
outside of the company network). Copy it from the browser to
your phone and (double)click it for install. Alternativly ask your network administrator for help.
If the cert is bought from an official worldwide trusted cert
seller like thawte or verizon this should not be neccessary.

Nexus & Exchange email

Morning - looks like I am one of the few in the Uk to have got my Nexus - arrived yesterday morning complete with engraving on the back.
As an aside the DHL tracking on the web still shows as only "shipment details received"!
The reason for my post is getting email from my Exchange server - it all works fine with my iPhone and Hero, but when ever I try to connect with the Nexus I keep getting "Setup could not finish - Unable to open connection to the server"
I have tried Touchdown and it is also upable to get the activesync profile from my server! gets a Error 500:
Is there something simple I am missing? I am able to browse the wen and get my gmail on the device but no exchange!
Any help would be great
Thanks
John
I have been able to use both the Android mail connection & Touchdown to connect to my hosted Exchange server (2007) using SSL, I guess as you have connected from other devices you must know the settings of the server.
Are you connecting via Wifi or 3G ?
Shouldn't make a difference, but which carrier are you on & did you get the 3G correct ?
Can you connect to the server on OWA via the browser ?
Good luck
Working fine for me, have you tried playing around with the settings? E.g. mine doesn't work unless I've checked the SLL box (but not the accept SLL certificates box), and make sure you precede the username with domain\
tried on both 3g and wifi - both no joy
just been looking for roadsync on the market and I don't appear to have any paid apps either...
been using an O2 sim just putting my orange sim to see if it makes a difference but doubt it will as wifi doesn't work...
stumpted!
I originally had a problem connecting with the native activesync with a similar error, however touchdown worked fine. I would try touchdown quick config and see if it can figure it out. You also might need to look at the certificate options under touchdown. Forcing that might help.
I have tried again with Touchdown - and managed to capture these results from the log:
I have reset my hero and reconnected to my exchange server and it connects fine...
I have called HTC to arrange a hardware replacement but the guy on the phone didn't seem to know what he was doing.
Checking Certificate...
Checking ActiveSync with SSL...
ActiveSync location returned HTTP code 500 : ( The request was rejected by the HTTP filter. Contact the server administrator. )
ActiveSync Version :ActiveSync ERROR :500
Trying activesync protocol 121...
ActiveSync provisioning returns HTTP:400
Error provisioning ActiveSync: Policy status is 0
Trying activesync protocol 2.5...
ActiveSync provisioning returns HTTP:200
ActiveSync provisioning success
The following policies have been requested :
- Allow Simple password
Refreshing AS folders
Error refreshing folders
Socket is not connected:Exception performing request
ActiveSync version check returned negative, but still trying for 12.1
Checking 2007 with SSL...
attr value delimiter missing! (position:START_TAG <HTML dir='null'>@2:11 in [email protected]) for operation: Subscribe-> Error renewing a subscription
Socket is not connected for operation: Subscribe-> Error renewing a subscription
Checking 2003 with SSL...
Checking 2003 without SSL...
Socket is not connected:Exception performing request
Would welcome any help from someone wiser than me
Cheers
John
How did you capture the log from Touchdown?
I'm using Touchdown here as well and have no issues to speak of. From what it looks like it might be something server-side?
Quick connect in touchdown captures the log as it tries to connect.
I agree it all points towards a server issue, but what is different between the nexus and the hero? I have reset my hero and reconnected with the standard android active sync connnector and it works fine. I use a neuxs with the exact same settings on either touchdown or the android connector and it fails!
It is driving me mad - I have synced my outlook contacts with my gmail account so I at least have numbers etc. but without email this phone is going to end up on ebay real fast
John
Not sure, but have you set the simple password in Touchdown? It looks like that is a required policy and if touchdown doesn't report back that it is set you won't be able to configure.
because the hero doesn't support the simple pin I got my exchange admin to remove this requirement for me
An even bigger thing for me was the lack of Exchange Calendar Sync on the N1. Seems a terrible omission when the Droid/Milestone supports it without trouble.

SSL issue with Android?

I noticed something interesting today. I changed the certificate for my mail server from z.net to a.com (moving domains - long story). The mail server that is listed in the email client (using built in email client - not the gmail app - with ActiveSync) is z.net - however the email client is not complaining that the host in the SSL certificate does not match the server name. Which had me thinking - so I installed "Packet Capture" and started to capture (and did NOT install the generated certificate into the trust store - which makes the certificate an untrusted self-signed certificate which could be used in a MITM attack). Android email happily connected and checked for email. Opened up the browser to browse the webmail and it complained that the certificate is not trusted (as it should).
I'm not an expert of ActiveSync by any stretch but is this a "feature" of ActiveSync? To ignore SSL verification???? I also use Outlook 2016 and it did prompt about the certificate mismatch.
I fired up an old phone that was using activesync with the gmail app and while it did not seem to update - it also did not show any certificate mismatch errors. Outlook for Android also seems to ignore the certificate mismatch.
Am I missing something really obvious?
(This could be a wider Android issue - but I found this issue specifically on my V20)

Categories

Resources