Login not working even if the password is right

September 24, 2014, 1:30 am

≪ Previous: ActiveSync Notification Mail to EAS approvers not working.

Greetings,

We have a strange problem with our users happening in the morning on their mobile devices (Samsung Galaxy, Ipads, etc.): event if the password is stored on the device it's being asked again and after entering the correct one it keeps saying that it's incorrect. I found that restarting the IIS service on the Exchange server seems to resolve the issue and everything starts to work again until the next morning.

Do you have any idea on what could be causing the problem or where I can start investigating?

↧

ABQ - Allow user exemption

September 25, 2014, 2:12 am

≫ Next: Push stops working on a DAG'ged system

≪ Previous: Login not working even if the password is right

Hi,

we are running Exchange 2013 SP1 and have Exchange ActiveSync Access Settings set to Quarantine any new device that tries to connect. This works well for the few users that have Activesync access allowed.

But now the person that hands out new mobiles to employees came up with an idea that even the employees that are not authorized to use Activesync against their mailbox should have all company contacts uploaded to their new phone when they get one.

So we came up with a dummy mailbox that has contacts imported from GAL (well... don't ask :) ) and the mobile guy connects each new phone via Activesync to the dummy account, synces the Contacts, deletes the account, and hands out the mobile to the user.

So this dummy accounts all of a sudden has hundreds of mobile devices connecting via Activesync and ending up in Quarantine.

Is there any way to set up an exemption for the dummy account, that any new device can connect regardless of the device type and not end up in Quarantine ? I know about the ActiveSyncAllowedDeviceIDs parameter for a mailbox, but this only works for known devices afaik, so I'd need something like Set-CASMailbox dummyaccount -ActivesyncAllowedDevicesIDs *

Any help appreciated

↧

Push stops working on a DAG'ged system

September 29, 2014, 2:13 am

≫ Next: 1 mailbox activesync with multiple devices

≪ Previous: ABQ - Allow user exemption

Hi All,

We have 5 brand new Exchange 2013 CU5 Servers. Two CAS servers, an Edge Server, and two Mailbox servers in DAG. (All of them are virtual by the way, on Hyper-v 2012 R2).

All of the mailbox databases are on both mailbox servers (of course), and some of them are active on MBX1, and the others on MBX2.

It happened twice in 2 weeks thatthe Push service wasstoppedworking. None of us received any mails on our phone (iOS and Android) or OSX -without manual refresh. Exchange Connectivity Analizer could not find any errors.

Then I have found a strange "resolution": after I made the mailbox database (where our mailboxes reside)active on the other server, Push started to work suddenly! (It worked even after I reactivated it on the original server!)

It's really annoying, because there was no error message, no event log entry, so we do not know if something goes wrong.

Did anyoneexperiencedsomething similar?

Thank you!

Adam Toth

P.S.: CU6 is not installed, but this issue is not in the list of the resolved ones.

↧

1 mailbox activesync with multiple devices

October 3, 2014, 9:24 pm

≫ Next: Delay in ActiveSync after Mailbox Move from Exchange 2010 to Exchange 2013

≪ Previous: Push stops working on a DAG'ged system

Dear Sir,

Would anyone know if activesync with multiple devices use queue technology or it would be push the notifier to all of the devices I have connected to the mailbox?

Thanks

Best Regards,

Elroy

↧

Delay in ActiveSync after Mailbox Move from Exchange 2010 to Exchange 2013

August 8, 2013, 8:09 am

≫ Next: OWA file name is truncated.

≪ Previous: 1 mailbox activesync with multiple devices

After a mailbox move from Exchange 2010 to 2013, there seems to be an hour or so delay before ActiveSync starts working again for that mailbox. External and internal DNS is pointing to the Exchange 2013 CAS, which proxies everything just fine for mailboxes still on the Ex2010 server. After a mailbox move from Ex2010 to Ex2013, Outlook and OWA work perfectly fine and get proxied to the proper mailbox by the Ex2013 CAS immediately, but activesync does not for about an hour or so.

Running the ExRCA for Activesync with the credentials of the mailbox that just moved it fails at the Attempting to send the OPTIONS command to the server,with a HTTP 403: forbidden. Interestingly, even though the mailbox is fully on the Ex2013 server, it seems that the Ex2013 CAS is still trying to proxy the activesync session to the Ex2010 mailbox (in the ExRCA error, theX-CalculatedBETarget is still pointing to the Ex2010 server), and since the user is no longer on that mailbox you get the permission error. If you wait an hour or so after the mailbox has moved everything starts working properly and X-CalculatedBETarget points to the proper server when you run the ExRCA.

So my question is: is it normal for there to be a delay in ActiveSync after moving the mailbox? Is there some kind of cache on the Ex2013 CAS for proxies that just takes a while to time out before it starts proxying activesync to the proper mailbox? is there any way to change this behavior if it is normal? Both Ex2010 and Ex2013 servers are in the same AD site, so there isn't any cross-site AD replication lag, and I'm not seeing any ActiveSync related errors in any of the logs. Thanks!

(Also I should note, the accounts I've tested moving are just normal AD accounts that have the 'Inherit permissions' checked in AD. I'm aware of the issue with privileged AD accounts sometimes not getting the proper Exchange permissions inherited causing ActiveSync to fail, but that is not the case here)

↧

OWA file name is truncated.

October 7, 2014, 6:59 am

≫ Next: ActiveSync not configured correctly - iPAD cannot connect

≪ Previous: Delay in ActiveSync after Mailbox Move from Exchange 2010 to Exchange 2013

We have Exchange 2010. Our OWA users are reporting that their file names of their attachments are being truncated

such as "Herbert Expense Report 2014-09.xlsx" gets truncated to "Herbert Expense Report 2~1.xlsx"

When the recipient receives the attachment, the attachment is named correctly as "Herbert Expense Report 2014-09.xlsx", it is just that the view of the sender gets truncated.

Any thoughts?

↧

ActiveSync not configured correctly - iPAD cannot connect

October 9, 2014, 9:27 am

≫ Next: False activesync warning

≪ Previous: OWA file name is truncated.

Hello All,

This is my first post and also new to the FORUM. Let me explain current setup.

1. Running Exchange 2013 on Server 2012 R2. Internal Outllook is working fine, Internal OWA is working fine. My staff in the office are not able to connect to exchange through their iPAD. I have enabled ActiveSync for all mailbox + configured internal certificate for POP IMAP IIS SMTP.

I used remoteconnectivity tool to find out the issue with ActiveSync. Below is the error message. Not sure how to fix the issue. Appreciate your help.

Thanks / RL

Attempting the FolderSync command on the Exchange ActiveSync session.
The test of the FolderSync command failed.
Tell me more about this issue and how to resolve it

Additional Details

Exchange ActiveSync returned an HTTP 500 response (Internal Server Error).
HTTP Response Headers:
request-id: b42ffca7-438e-41fe-b273-aab7faf71d04
X-CalculatedBETarget: ex.infotechram.com
MS-Server-ActiveSync: 15.0
X-MS-RP: 2.0,2.1,2.5,12.0,12.1,14.0,14.1
MS-ASProtocolVersions: 2.0,2.1,2.5,12.0,12.1,14.0,14.1
MS-ASProtocolCommands: Sync,SendMail,SmartForward,SmartReply,GetAttachment,GetHierarchy,CreateCollection,DeleteCollection,MoveCollection,FolderSync,FolderCreate,FolderDelete,FolderUpdate,MoveItems,GetItemEstimate,MeetingResponse,Search,Settings,Ping,ItemOperations,Provision,ResolveRecipients,ValidateCert
X-MS-BackOffDuration: L/-215
x-ms-diagnostics: &Log=PrxFrom:%3a%3a1_V120_HH:mail.infotechram.com_SmtpAdrs:Ram%40infotechram.com_NMS1_St:F_Sk0_Srv:17a0c0d0s0e0r0A0sd_Ers1_Cpo3212_Fet20521_ExStk:H4sIAAAAAAAEAOVWS2%2fjNhC%2bL9D%2fMEcvoAi20%2b3BWARQJXtXQB0Hlrd7dGlybLOhSZWkAqu%2fvkPLkp1uNmncFuhDFz7Emflm5pshp5Jb48zax%2bM93zK9wTiRtqg1b8c7tDumUXs6gKWXRsPV1dUNTL%2bUzJhncSYtcm9sHSfZrETLgkgnO4KEe%2fmA0B0D0x6CNZMKBdAsS%2bP8djJbjNOP82Qap7NpDIutdIDWGgs00caDRW8lWymMIRFCBh1MgdRrQ5BbaxydCwICtUQRf%2fPmCEB0ACy60miHI%2bg337sRFMjH1o4gK%2fLsqn89eDf8bjCMoLSGzO3g237%2fGnr5bfFpMlkmaTouiuU8%2f%2fBxUbyNQFAYoP%2bmCVNRO4%2b7U1QKtA%2bSMMV31njDjXKnf0%2bFa7FFqBxa2DJyQ7tqvZZcUjqANa5Zudl6R34BAPN%2fxN4PgpWp0ZoOkImYps7bivv5MQ69XPvrIexIO9tgLiIIEh24U8IiIJFK%2bUSpEESaLeoSI1jIHRYl07T5S4XOh%2fWs8hF8b4xC2sfWv5k%2b%2fnt7Of4CtZg3hnqd2HGjRfA0JnNm92U63wXw4iLjj%2bOnzlcR3FZKBRL%2fNACuQmYLKbBAZvn2CDKC%2fEBa6euCU%2fQp9WerCAoqA70BzpRCmxP9X%2bFVkoWNgnId3BnvkVcep0ZIotkBYOsdVfPqZxICQmjrCL7ubXsyp1ImdkoqykCiLvm70tfNiaPZ2Ynwp2PShe7TeEKVBGNN6tZUApqKoSMQOM%2f4PXjLOIZjlzqeEMj6V%2bx%2bj0Of6T2VcuDd9LkgnDR1UAWlqiktbzxT89C90LV7tlnOdGA82v9aCv%2bNnlyMvGAPeMJIXdszzXFhwj7le6yrHZV%2fU%2fN0pVAv8AcmtKhWdcmc%2b5EpKdhLQLrrOsswdMop09S1bfz%2bhi%2bXmXSlYnWqSN1wGL9PLTKPzQ0YpBoRIrdnkurqZrVcDrD3Kr9vje%2fSk1CleLI9r%2fTZ5d87mwMTZ63vxPw6NZV%2btht%2fzc8XXOq1MT1YydeTwxvjL2wrfwOuSwxNzYoUNH96H5RZEc%2fpJoBNN41gvKfsYbhUwJGmgjJIGg7y5HPYP1GQb5HfT4ydsn2j9IyejyBHMKVxZfZH8sPu0fKf7dGfhp6aHb2ORfypFCHb2XNwX6OPxlKhP7rfvGLpBRQGuuqfrdDfq%2fps7D3axZaCIoIgvYCfeJgPRv%2bbh%2flvK8EdqvQMAAA%3d_S111_Error:ADOperationException1%3aActive+Directory+operation+failed+on+DC.INFOTECHRAM.COM.+This+error+is+not+retriable.+Additional+information%3a+Access+is+denied.%0d%0aActive+directory+response%3a+00000005%3a+SecErr%3a+DSID-03152612%2c+problem+4003+(INSUFF%5FACCESS%5FRIGHTS)%2c+data+0%0a_Mbx:EX.INFOTECHRAM.COM_Dc:DC.INFOTECHRAM.COM_Throttle0_SBkOffD:L%2f-215_DBL7_DBS1_CmdHC-1477255686_TmRcv16:12:43.0153436_TmSt16:12:43.1715201_TmFin16:12:59.5999575_TmCmpl16:13:03.3342766_ActivityContextData:ActivityID%3db42ffca7-438e-41fe-b273-aab7faf71d04%3bDbl%3aST.T%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d851%3bDbl%3aSTCPU.T%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d75%3bI32%3aMB.C%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d37%3bF%3aMB.AL%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d42.40541%3bDbl%3aBudgUse.T%5b%5d%3d16428.4375%3bDbl%3aMAPI.T%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d1657%3bI32%3aRPC.C%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d37%3bI32%3aATE.C%5bDC.INFOTECHRAM.COM%5d%3d13%3bF%3aATE.AL%5bDC.INFOTECHRAM.COM%5d%3d40.92308%3bDbl%3aRPC.T%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d1569%3bI32%3aADW.C%5bDC%5d%3d1%3bF%3aADW.AL%5bDC%5d%3d2.5878%3bI32%3aROP.C%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d35861492%3bI32%3aMAPI.C%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d85%3bI32%3aADS.C%5bDC%5d%3d12%3bF%3aADS.AL%5bDC%5d%3d54.92707%3bI32%3aADR.C%5bDC%5d%3d4%3bF%3aADR.AL%5bDC%5d%3d79.91052%3bDbl%3aMBLB.T%5bEX.2acb051d-c873-471d-9d36-3df4422ed8bf%5d%3d8093%3bS%3aWLM.Cl%3dCustomerExpectation%3bS%3aWLM.Type%3dEas%3bS%3aWLM.Int%3dTrue%3bS%3aWLM.SvcA%3dFalse%3bS%3aWLM.Bal%3d225131.4%3bS%3aWLM.BT%3dEas_Budget:(D)Owner%3aSid%7eINFOTECHRAM%5cramlan%7eEas%7efalse%2cConn%3a0%2cMaxConn%3a10%2cMaxBurst%3a240000%2cBalance%3a225131.4%2cCutoff%3a600000%2cRechargeRate%3a360000%2cPolicy%3aGlobalThrottlingPolicy%5F32228d9d-0ca1-4fcc-91e0-9087121e2c35%2cIsServiceAccount%3aFalse%2cLiveTime%3a00%3a00%3a22.3451891_
X-DiagInfo: EX
X-BEServer: EX
X-FEServer: EX
Content-Length: 5868
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Thu, 09 Oct 2014 16:13:04 GMT
Set-Cookie: X-BackEndCookie=S-1-5-21-3186780680-2122448609-4237058925-1155=u56Lnp2ejJqBzZ6cnc/KzpvSnMfIzNLLyM6b0sabzMnSzJuZy8vNzZqbx52ZgYHOztDPx9DNz87L387Jxc7Mxc/K; expires=Sat, 08-Nov-2014 21:13:05 GMT; path=/Microsoft-Server-ActiveSync; secure; HttpOnly
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET

Elapsed Time: 24020 ms.

↧

False activesync warning

June 22, 2013, 1:13 pm

≫ Next: Exchange 2013 WAp and cross-froest authentication

≪ Previous: ActiveSync not configured correctly - iPAD cannot connect

Hi,

every 5 minutes I receive the following warning in the eventlog:

-----------

A non-compliant phone is trying to connect with Exchange ActiveSync. However, the Exchange ActiveSync mailbox policy for user [SWV\SM_48e8ae1095d24aeb9] and device ID [EASProbeDeviceId141] requires phones to be compliant before they synchronize with Exchange ActiveSync.

-----------

The account mentioned is one of the Healthmonitoring mailboxes of Exchange 2013 CU1. We've disabled non-compliant phones from the default policy, the message is being generated. It's a bit strange though that Exchange's own HealMonitoring mailbox isn't compliant with ActiveSync. I've tried creating a separate policy spefic for the healt monitoring mailboxes, but there's no way to apply it to this special mailbox. Any idea how to suppres these 5 minute warnings without changing our default policy?

Frank.

↧

Exchange 2013 WAp and cross-froest authentication

October 13, 2014, 3:17 am

≫ Next: Since Exchange 2013 CU6 update Activesync Clients hitting throttling policy limit

≪ Previous: False activesync warning

Hello guys,

I planned to migrate my exchange 2003 users to exchange 2013.

To do this i setup a new forest with a new domain, my question is:

How publish OWA by wap and adfs with cross-forest, because the exchange forest is only a resource forest, do i need Windows 2012 R2 as domain controller on each forest like as read on some forums ?

thanks for your reply.

Jérôme.

↧

Since Exchange 2013 CU6 update Activesync Clients hitting throttling policy limit

October 10, 2014, 11:01 am

≫ Next: Contacts not visible?

≪ Previous: Exchange 2013 WAp and cross-froest authentication

I noticed something odd was going on when my IIS logs files on my mailbox servers blew up over the past week and a half since we installed the CU6 update. We went from an average of 400mb log file daily to over 2gb! What I'm seeing in the log file now are tons of Global Throttling Policy messages. Did something change with the Global Throttling Policy from 2013 SP1 to 2013 CU6?

↧

Contacts not visible?

October 16, 2014, 5:30 am

≫ Next: View/Sync Global Address List With Android 4.x.x

≪ Previous: Since Exchange 2013 CU6 update Activesync Clients hitting throttling policy limit

When I set up our exchange account on each employee phone (android) none of the contacts show up unless one of two things happen.

1. You manually search the name (then it pops up)

2. I go to each individual computer and copy the global address book to the contacts in outlook.

Why don't the exchange contacts show up on the phone unless I do one of the two things above? I have that account choose as the contacts to display, but it shows none unless you manually copy or search the name. What is the point of having a synced exchange account if you cannot easily access the contacts?!!

↧

View/Sync Global Address List With Android 4.x.x

October 19, 2014, 8:09 am

≫ Next: ActiveSync has stopped on Mobile Device

≪ Previous: Contacts not visible?

Hi,

I've installed new Exchange 2013, everything is working fine so far with the OWA and IMAP/POP, some of our user are using smartphone and most of them are using Android, I've setup the email account using Exchange Activesync, the email and calendar is working great, but the Contacts is not. It won't display the GAL, even using the TO button when create an email, it won't show the GAL, how to show the GAL in Android using Exchange Activesync? is should be possible, right?

I've been trying many way to solve this problem, re-configure the account is not helping me, turn off and turn on the sync contact is also not working.

Anyone can help me on this issue? fyi, our exchange server is Exchange 2013 SP1 (cu4) and fresh installed

Thx
Irwan

↧

ActiveSync has stopped on Mobile Device

October 18, 2014, 12:52 pm

≫ Next: Calendar modify by an attendant problem

≪ Previous: View/Sync Global Address List With Android 4.x.x

I use a Samsung Galaxy S4 to access my work emails through Microsoft Exchange ActiveSync. Just over a week ago it no longer shows all the emails in the account only the current and prior day. When the application opens now it appears to jump or skip when it initially loads. I've tried removing the account and reloading but no luck there. When I check the application manager in the device the only button on for me to use is the clear cache, the other four buttons are grayed out.

Is there any way to reload or reset the application, or even remove and re-install?

Thank you for your help.

Regards,

Steve

↧

Calendar modify by an attendant problem

October 22, 2014, 1:32 pm

≫ Next: Remote Connectivity Test Error

≪ Previous: ActiveSync has stopped on Mobile Device

Hi ,

I've got a problem with ceo calendar update via active sync.

Everything works fine if a new appointment is inserted on the ceo's calendar by his secretary.

(she has editor pemission on the calendar). If Ceo's secretary changes an existing appointament modification aren't replicated on ceo Iphone.

I checked IIS log without notice someting strange.

Also check didn't show any issue.

What are the further troubleshooting that I can take to investigate the issue

Thanks a lot

Luca Pozzoli

↧

Remote Connectivity Test Error

October 21, 2014, 7:04 pm

≫ Next: ActiveSync disabled overnight

≪ Previous: Calendar modify by an attendant problem

Hi Everyone,

I'm finished setting up the Exchange Server 2013 but when I tried to test using Exchange Server Remote Connectivity Analyzer I got the following error.

Server Setup:

Exchange Server

Single LAN

Mail Box Role and Client Access Role are installed in one Server

Internal IP: 172.0.0.111

External IP PAT: 103.17.xxx.xxx

Internal and External DNS:

CNAME : autodiscover.redfoxtechnologies.net point to mail.redfoxtechnologies.net

SRV: _autodiscover._tcp.redfoxtechnologies.net point to mail.redfoxtechnologies.net

A: mail.redfoxtechnologies.net point to 172.0.0.111 and External IP (PAT)

↧

ActiveSync disabled overnight

October 23, 2014, 10:51 pm

≫ Next: Mx record and Mail Exchanger

≪ Previous: Remote Connectivity Test Error

Hi, my activesync disables itself overnight and no one can figure out why. Does anyone have any direction on what to look for, so I can give my email department some sort of direction on what to check? Thanks.

↧

Mx record and Mail Exchanger

September 8, 2014, 1:17 pm

≫ Next: windows phone (lumia 930) cannot receive office365 email (company email) via internetional data roaming

≪ Previous: ActiveSync disabled overnight

hi guys

i need your help hope someone can point me to the right direction

one of client has their website hosted by a 3rd party company , however they needed exchange 2013 on their environment.

at the 3rd party CP has deleted the mx record and A record of the email, and created a A record and poit it to the client External IP.

Exchange OWA is configured with SSL Certificate https://cloud.domain.com

external when i log to the https://cloud.domain.com i get the exchange log in page and i can log with the domain and password info.

when i send email from the cloud.domain.com i get a MAILER-DAEMON@Mail.gmx.com back

This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address failed: "test@domain.com": mail exchanger not found, name="cloud.domain.com.domain.com"

↧

windows phone (lumia 930) cannot receive office365 email (company email) via internetional data roaming

October 27, 2014, 4:10 am

≫ Next: Active Sync Not Working for NEXUS MOBILE in Exchange 2010 SP3 Enivironment..

≪ Previous: Mx record and Mail Exchanger

when I travelled overseas, i found I cannot receive the office365 (company) email via mobile data roaming (even with manual sync), only can get email via WIFI. The internet access is OK, I even can receive the hotmail / gmail / yahoo mail...

Why?

Thanks!

↧

Active Sync Not Working for NEXUS MOBILE in Exchange 2010 SP3 Enivironment..

October 26, 2014, 10:20 am

≫ Next: How to mark an instance of recurring task complee?

≪ Previous: windows phone (lumia 930) cannot receive office365 email (company email) via internetional data roaming

HI Exchange Techy's.

We have Exchange 2010 SP3 Servers. Now All mobiles are working fine Through Active Sync Except Google Nexus.

Problem: Account has been activated successfully in Mobile, But Mails are not synchronized.

Kindly help fix me out of this problem.

We are welcome & Appreciate who are giving Comments & Solutions for this problem.

Regards,

One of your Exchange Person

B@l@.N

↧

How to mark an instance of recurring task complee?

October 27, 2014, 11:24 pm

≫ Next: Composing new messages using smtp alias doesn't return results

≪ Previous: Active Sync Not Working for NEXUS MOBILE in Exchange 2010 SP3 Enivironment..

I have a daily recurring task starting and ending on a specific dates. When I mark today's instance complete, I am

1. Adding a copy of the task, mark it complete and set the completion date

2. Change the original task - Move due date/UTC due dates to one day ahead.

By enabling the logs, I found that the server sends the following commands (Add for new completed instance, and change for the original instance with due date moved by oneday). Please see the log below.

I am sending the same exact response, when I want to mark task complete from the exchange activesync client. But that results in the original task move one day backward! (It says overdue).

What is the right way of doing this? I dont see any example in the protocol documents (MS-ASTASK).

I tried the following, but not able to fix it consistently.

- Move Duedate to two days in advance

- Modify the recurrence start date as well. Do we need to modify the recurrence as well?

- If the task has a start date, does that need to be advanced as well?

- Which one does server use? UTC Due date or Due date?

- What is the significance of regenerate? Does client need to behave differently for different regenerate values?(0/1)?

it is very frustrating that Microsoft charges for licensing the protocol, but does not provide proper documentation and support.

Thanks!

↧