Quantcast
Channel: Exchange Server 2013 - Mobility and ActiveSync forum
Viewing all 1206 articles
Browse latest View live

Quarantine Active Sync Devices and language

$
0
0

Hi,

I have set up quarantine activesync devices in my Exchange 2010 organization. And I have a problem that I can't suppose how to deal with.

I have set up the message to send to the people which device is quarantined. The operating system and the Exchange server software itself are installed in English. The regional settings of the server are configured only with English language. But when a user tries to attach his device to the Exchange, he receives a notification telling that the device has to be aproved by an administrator, but that message is received in Spanish. 

How and where have I to change that? I need that all users receive that notification in English!

Thanks.


Email restriction on mobile devices by OU

$
0
0

Greetings,

Hope this finds you well. How can I restrict (via shell or EAC) a particular group in AD to only receive email on iPads? Everything else should be blocked (OWA, iPhones and all other devices). Any advice/help will be highly appreciated.

Thank you!


Carlos

ActiveSync stops working after migrating from Exchange 2007 to Exchange 2013

$
0
0

We have started the migration from Exchange 2007 to Exchange 2013. We've followed best practices and everything is working great except ActiveSync. I've performed Exchange migrations in the past so this is nothing new for me. I've also been referring to a great guide which has been a big help, http://www.msexchange.org/articles-tutorials/exchange-server-2013/migration-deployment/planning-and-migrating-small-organization-exchange-2007-2013-part1.html.

Once a user is migrated from Exchange 2007 to 2013, ActiveSync stops working properly. Email can be pulled to the device (Nokia Lumia 625 running Windows Phone 8) by performing a manual sync. But DirectPush is not working. The strange part is it's not affecting everyone who's been migrated. Anyone who is still on Exchange 2007 is not affected.

At first I thought it was our wildcard certificate. 99% of our users are running Outlook 2013 on Windows 7 or higher but we do have a few terminal servers still running Outlook 2010. Outlook 2010 was giving us certificate errors. I realized it was the wildcard certificate. Rather than making changes to the OutlookProvider I simply obtained a new SAN certificate. Although that resolved the issues for Outlook 2010 users, ActiveSync was still a problem.

Rebooting the phones and removing the email account from the user's device and re-adding it didn't resolve the issue either.

Then I performed an iisreset on the CAS server. This didn't help either. I didn't know it at the time, but I was getting closer...

I tried using the cmdlet Test-ActiveSyncConnectivity but it gave me the following error:

WARNING: Test user 'extest_0d9a45b025374' isn't accessible, so this cmdlet won't be able to test Client Access server
 connectivity.
 Could not find or sign in with user DOMAIN.com\extest_0d9a45b025374. If this task is being run without
 credentials, sign in as a Domain Administrator, and then run Scripts\new-TestCasConnectivityUser.ps1 to verify that
 the user exists on Mailbox server EX02.DOMAIN.COM

I started reviewing how Exchange 2013 proxied information from the CAS to the mailbox server and realized the issue may in fact be on the mailbox server.I performed an iisreset on the mailbox server and all of a sudden ActiveSync started working again. Awesome!

I can't explain why. The only thing I can assume is when some users were migrated from 2007 to 2013 something wasn't being triggered on the Exchange 2013 side. Resetting IIS resolved the issue. I guess I'll have to do an IIS reset after I perform a batch of migrations. Disabling ActiveSync and re-enabling it for the affected users didn't help - only the IISRESET resolved the issue.

If anyone has any information as to why this happens, please chime in. Also, if anyone knows why I can't run the Test-ActiveSyncConnectivity cmdlet, I'd appreciate the help.

Thanks.


IPhone/IPad "Cannot Get Mail - The connection to the server failed."

$
0
0

Hello,

Symptom:

1 user syncs more than 1 week of mail they receive the error "Cannot Get Mail - The connection to the server failed."

We have tried all of the following:

Removed/re-added accounts on the device

Added the account on several other IPhones/IPads, different iOS versions, all receive this error

Removed the devices from OWA, ECP

Deleted the AD account and recreated and created a new mailbox, imported PST

New-MailboxRepairRequest -Mailbox user -CorruptionType ProvisionedFolder, SearchFolder, AggregateCounts, Folderview - completed with no errors

IIS logs all show 200 on authentication

User is not part of any protected groups and has permissions set to be inherited.

Had user move all mail older than 2014 to folders, in hopes to shrink main inbox

Get-CASMailbox -Identity user | ft Name, ActiveSyncEnabled - returns "True"

Manually removed CN=ExchangeActiveSyncDevices from ADSI edit

Works fine syncing on my Android device

I'm out of ideas here guys! Please help!


Share contacts between mobile devices

$
0
0

Hello,

I am currently using Exchange. I am trying to sync contacts on Windows Phone/iOS between two accounts (I want to add contact on one phone so other could see it). 
How my situation looks like:
2 Exchange accounts configured with my domain

2 Windows Phone (2x Lumia 735) 

I checked everywhere in OWA and WP settings but I am unable to see what I am doing wrong. Any advices?

Cheers!


Non Default Ports for Activesync

$
0
0
A customer is looking for change his ActiveSync ports from (80, 443) to something else. Is this even supported by Microsoft? Everything I have found says its not.

ActiveSync issue event id 4023 MSExchangeADAcces

$
0
0

Hi team,

I have Exchange 2013 CU7 with two MBX and Two CAS, separate Role

suddenly I have a issue with Exchange ActiveSync. some error event is show at mailbox server

Log Name:      Application
Source:        MSExchange ADAccess
Date:          9/2/2015 2:23:21 PM
Event ID:      4023
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      MBX01.contoso.com
Description:
Process w3wp.exe (AirSync) (PID=36012). The budget for user 'contoso\xxx_SEC1071958C27CA8_SAMSUNGxxxxx' is locked out until 9/2/2015 7:28:21 AM.  Max Burst: 480000, Recharge Rate: 1800000, CutoffBalance: -600000

when is test activesync connectivity. the error is bellow

PS] C:\Windows\system32>test-activesyncconnectivity -URL https://email.contoso.com/Microsoft-Server-Activesync
 -MailboxCredential (Get-Credential contoso\xxx) | fl

RunspaceId                  : 1f17bc73-df51-4c50-8977-19b772ef8b8d
LocalSite                   : Central
SecureAccess                : True
VirtualDirectoryName        :
Url                         :
UrlType                     : Unknown
Port                        : 0
ConnectionType              : Plaintext
ClientAccessServerShortName : email
LocalSiteShortName          : Central
ClientAccessServer          : email.contoso.com
Scenario                    : Options
ScenarioDescription         : Issue an HTTP OPTIONS command to retrieve the Exchange ActiveSync protocol version.
PerformanceCounterName      : DirectPush Latency
Result                      : Failure
Error                       : [System.Net.WebException]: The request was aborted: The request was canceled.
UserName                    : xxx
StartTime                   : 9/2/2015 2:25:10 PM
Latency                     : -00:00:01
EventType                   : Error
LatencyInMillisecondsString :
Identity                    :
IsValid                     : True
ObjectState                 : New

I already change user throttling policy, but issue still persist.

I check at CAS Server, I found that issue is come

before this issue, I already rasie eas value at CAS webconfig into 5000 after update CU7

<add key="HttpProxy.ConcurrencyGuards.TargetBackendLimit" value="5000" />

as mention in this forum

https://social.technet.microsoft.com/Forums/office/en-US/08e53279-810f-48fa-9931-fa10f575affc/active-sync-issue?forum=exchangesvrgeneral

and then I change the eas, from 5000 to 50000. but when I test-activesyncconnectivity the issue still same.

is there any suggestion?

Please Help

Allow ActiveSync devices based on security group

$
0
0

Hello,

Is there any way to allow devices which are part of a security group?

I need to enable the Device Access Rules in a coexistence scenario of Exchange 2013 and Exchange 2010 and allow users one by one, based on security group partnership after migrated them to new Exchange server. If I'm trying to  modify the Exchange ActiveSync access settings on Exchange 2013, all users from Exchange 2010 are quarantined.

In fact.. I think that this will not resolve my issue:(...

I need to:

1. move a user to new Exchange server

2. assign mailbox policies

3. set to allow this user and his mobile device to sync and never send him on quarantine list

4. When all users are moved, send to quarantine list new users.

Thank you.






Disable Server-side search

$
0
0

Hello,

I have a question regarding exchange 2013 activesync policies. 

We have enabled ActiveSyncMailboxPolicy MaxEmailAgeFilter property to oneWeek. It works OK, but the user (who uses Microsoft outlook client for android https://play.google.com/store/apps/details?id=com.microsoft.office.outlook ) still have the possibility to search emails even older than this limit. As I understand this is due to the "server-side search" mechanism. For the security purpose I'd love to disable this feature, so that the user is only able to search those emails, that are downloaded on his device. Is this possible? 

Thanks in advance! 

Smartphones won't connect to Exchange

$
0
0

I am having a headache with my Exchange 2010 Server. I have some smartphones that will connect and be able to access email remotely and others that won't.

It started with a Motorola Droid Turbo I had. It wouldn't connect and I thought it was the phone. I replaced it with a Lumio 735 and it has the same problem. It acts like everything is fine, then it will try to sync and it comes back and says "Not up to date." I have tried with my personal phone, a Galaxy S5. It goes though the setup fine and completes. Then when I go into my app there are no messages, and if I try to send something it fails. I know the phone is talking to the Exchange server because if I type in my password incorrectly it will say I have the wrong credentials.

Meanwhile, I have an employee with an iPhone 4S who has no problems, and other with smaller Samsung smartphones that work fine as well. I don't understand how some phones work and others don't. What am I missing?

BTW, we are using SSL.

Blocking Unauthorized SmartPhone Apps accessing Corporate e-mails using Exchange Web Services

$
0
0
Hi All,

Can anyone please guide me in restricting unauthorized apps available with various smartphones accessing the Corporate Emails using Exchange Web Services? 

The specific Exchange Web Service traffic is not passing through TMG. Hence the restriction cannot be applied on TMG.

We are looking for using EWSBlockList and it works perfectly with a single app (user agent). No luck with multiple apps or user agents. Checked the forum as well as support knowledge base and could not find anything specific powershell command to block multiple apps using EWS blocklist.

Set-CASMailbox -identity "Test App1" -EWSApplicationAccessPolicy:EnforceBlockList -EWSBlockList:"*CloudMagic*","*Aqua*" -EWSAllowOutlook:$True -EWSAllowMacOutlook:$true -EWSAllowEntourage:$true -EWSEnabled:$true

The above command blocks the app - "CloudMagic". However the other app  - "AquaMail" works perfectly.

Appreciate your thoughts and guidance.


Cannot find user using display name as like outlook from mobile

$
0
0

I have recently migrate my Exchange server from exchange 2007 to Exchange 2013 and AD 2003 to 2012. I am using my display name like MHT (Md. Mahatab Hossain) where MHT is my login name. If i search any address from outlook using MHT (Login name) then i can easily find out. But in my mobile i have to write email address like mahatab.hossain@example.com then i find out.

In exchange 2007 i was able find out address using MHT (Login name) in my mobile.

Please help me on this.

 

ActiveSync minimum search character GAL lookup

$
0
0
we have a business requirement to change the minimum number of characters from 4 to 3 (or even 2) when searching GAL from ActiveSync devices.

Md. Ramin Hossain

AD RMS 2012 Templates/Permissions [Option] is not visible at Outlook 2013 in Nokia Windows 8 Mobile Device

$
0
0
I have AD RMS 2012 Server, its working fine by applying restricted Templates/Permissions on OWA, Outlook & other MS Office Tools (Word Excel, PowerPoint). But the AD RMS Templates/Permissions [Option] is not visible at Outlook 2013 in Nokia Windows 8 Mobile Device.

Actually I would like to protect email with RMS templates (defined by me on AD RMS 2012 Server) but the [Permission] tab is not visible at Outlook 2013 in Nokia Windows 8 Mobile Device.

But I can do same with Android OS in Samsung Galaxy Mobile Device & I can see [Permission] tab as well to protect an email messages.

Any idea??

Regards,
M.Daud Soomro

Get-MobileDevice

$
0
0

Hey Guys

Trying to use tis command hhere : Get-MobileDevice -Identity

[PS] C:\Windows\system32>Get-MobileDevice -Identity robert
The mobile device robert cannot be found.
    + CategoryInfo          : NotSpecified: (:) [Get-MobileDevice], ManagementObjectNotFoundException

[PS] C:\Windows\system32>Get-MobileDevice -Identity 385A5FAD3184235CA0837514B8A6B917
The mobile device 385A5FAD3184235CA0837514B8A6B917 cannot be found.

I am following this link here and am trying to get mobile devices based on GUID and keep getting errors. The device clearly exists and I can get statistics another way, but to me the documentation says its should work.

https://technet.microsoft.com/en-us/library/jj218706(v=exchg.150).aspx

Thanks,

Robert


Robert


Iphone cannot open message "the message has not been downloaded from the server"

$
0
0

Hi, we are actually in migration scenario from 2007 latests rollup to 2013 CU9.

Once we migrate a mailbox from 2007 to 2013 the iphone stop opening the email , showing the message "the message has not been downloaded from the server", all seems working fine, with contacts,calender and send receiving message.

But when a user try to open the email got that error.

if we move the mailbox back to 2007, the iphone restart opening mesagges - we tryed with 8.4 and 9 ios ....

Any suggestions ?


Exchange 2013 Upgrade and iPhone Notes Oddity

$
0
0

Hi everyone, I have a question about a slightly weird situation with an end users iPhone that I'm trying to narrow down as to what exactly happened. The Exchange account (2010 at the setup) was added to the iPhone (running iOS 8 at the time) and the option to sync "Notes" was turned on. Now, the end user states that in "Settings --> Notes" on their iPhone, it was set to "On this iPhone" for the default place to save notes. We migrated their account to the new Exchange 2013 environment and the end user states that the default Notes setting was changed to their exchange account and all their personal notes now appeared within Exchange (i.e. Outlook Notes). Suffice to say, we have turned of notes syncing for this user, but my question is as follows:

Did the Exchange 2013 migration really change the default notes setting to her Exchange account? I haven't been able to find much on the internet and was wondering if anyone else had heard or seen this issue before.

Thanks for all your time and help!

Exchange 2013 - iPhone version 8.4.1 issue

$
0
0

Exchange 2013 CU9 - Admin Ctr Mobile Devices

When I go to allow device access under Mobile device Details, I find the device which is an iPhone highlight and click allow I get the following error message

The mobile device iPhone§OO24K8BIQxxxxx cannot be found

It will not let me delete or allow.  It does not show any information on the device other than the info displayed on the initial screen.   

I had one iPhone before this but it eventually allowed me to allow the device.  Has anyone had this issue before?

CBA and basic authentication with one virtual directory

$
0
0

Hi,
as per
https://technet.microsoft.com/en-us/library/bb125170(v=exchg.150).aspx
Authentication settings The two methods of authentication you can configure for the Exchange ActiveSync virtual directory are Basic authentication and Client certificate authentication.

in several tutorials we read  Basic authentication should be disabled and client certificate should be required

http://blogs.technet.com/b/exchange/archive/2012/11/28/configure-certificate-based-authentication-for-exchange-activesync.aspx

The question we have is:
Can the let basic authentication active and set "Accept client certificate" in order to set up some clients with CBA without impact the existing Active Sync user using user name / Password
or do we need separate ActiveSync virtual directories?

Thanks


Eckhard

Outlook calendar of Office 365 home edition sync problems with outlook.com app on Oneplus one (Cyanogen 12.1)

$
0
0

I have two issues:

1. Events (appointments) set on my desktop (laptop) appear on my phone with a huge delay, after a day. (Events set on the phone show immediately on the desktop client)

2. The organizer of the events that were set on the desktop, when appear on the phone are empty, as if I'm not the organizer. I can't edit or delete them. I can accept or decline them as if I was invited by someone else.

I cleared the cache and reinstalled my outlook.com app on the phone, and repaired my outlook account (it's MS exchange - Active Sync, user: name.outlook.com) on the setup on the laptop's desktop client (win 10).

Note: I'm not in the US and MS does not support the Office apps except outlook.com in my place. I have version 1.3.9 (84)

Any idea?

Thank you

Viewing all 1206 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>