Good day,

We have:

* Existing Exchange 2007 Sp3 latest Rollup on Server 2008 (With user certs for ActiveSync(External + Internal)

* Fresh Installed Exchange 2013 CU10 on Server 20012 R2 (Only Test user on other side)

* Enterprise CA on Server 2008

Problem:

A 2013 test user is able to do ActiveSync test with EAD Mobilitydojo.net tool (No cert)

Same test user is unable to authenticate with a user cert file and >User based Certificate Authentication on IIS8.5< for Acticesync

* Exchange 2013 clean and fully de-installed (No ADSI Entrys left ina yn form for that server). Could clean deinstall. All Abitary and Health/Search moved.

* Exchange 2013 clean and fully re-installed

* Did rebuild of Acticesync Virtual Directory

WORSE I GOT it running IN LAB: Same Setup in VM Lab BUT withNONE 2007 in Place and fresh installed CA seems to work.

MAY BE SOURCE BUT UNABLE TO SOLVE. If we Import the user Cert PFX from the user in the Computer/personal store of the Exchange 2013 and run the test tool direct there IT works

IF i take out the Personal Cert from STORE and Clean with (certutil -urlcache crl delete,certutil -urlcache ocsp delete ) and test again it does not work. So in that case hes not able to autheticate to the CA. But if he has it local it works.

And the Exchange Activesync MD test Tool from Mobilitydojo.net we have the cert correct with Filename and Password. H:\migration\exchange_2007_2013\eas\2007_personal.pfx

--------------------------------------------- ERROR we see there if it does not work -----

testing HTTP GET:
Response: The remote server returned an error: (403) Forbidden.
Explanation:
The server requires SSL and will not let you connect over HTTP.
(For instance trying to connect over HTTP while IIS requires SSL.)
Status: Further action required

--------------------------------------------- ERROR we see there if it does not work -----

All root / intermediate to my knowledge (only weakness PKI sometimes ;-)) ok BUT the if we import Manual and then it works worries me. For me that means something between the Exchange 2013/2012R2 and the SRV 2008 CA is not ok.

We use a SAN-With 4 names but TWO Domains. webmail.test01.com autodiscover.test01.com and webmail.test02.com (Old). Have made a self signed for Debug but was the source.

* IIS settings are complete identical and we verified them (REAL Server and LAB we build 2 times)

* Cert Authentication IIS feature installed

* The Meta ENABLE for Authentication Certs is on TRUE

Please help if you can. ;-) Any help welcome.

Hi Guys

I recently encounted wierd scenario regarding Exchange's autodiscover for Outlook and Activesync.

Here's my scenario:

Exchange server 2010 SP3 in hosting mode

tenants was setup before had no trouble of using autodiscover for setting up phones and outlook.

Recently they have trouble of setting up phones and outlook, and I had to use the manual process.

autodiscover are setup using SRV record

Another wierd thing is:

Tenants1 can be setup using autodiscover in their offices, whereas some tenants2 can't be setup in their offices. Looks like it varies from certain ISPs???

I am wondering if anyone has encounted this, and any suggestions?

Thank you!

Microsoft Windows Server 2012 R2 with all the updates

Microsoft Exchange 2016 (Build 225.42 which is RTM)

Issue: ActiveSync isn't working for anyone on any mobile platform, whether it's Android, iOS, Blackberry 10, etc. No useful error message, just the generic "Unable to verify account information" with iOS and similar messages on other platforms.

- server's been in production for 2 weeks and is sending / receiving just fine as an authoritative host and receives two forwarded external relays

- webmail works fine internally and externally (on the internet, from home) no issues

- I have not yet purchased a certificate for this site but that shouldn't be an issue since other sites are functioning fine without

- Can't run through the ActiveSync test Microsoft offers as it fails to get past the certificate issue. I fired the test at a number of other sites without certificates that are happily working fine with hundreds of phone and tablet ActiveSync users and it fails there too. Even if you select the 'ignore' option on the test site, it still craps out.

- Checking IIS logs shows the users 404'ing with external addresses (I sanitized the name and address):

2015-10-20 15:35:02 192.168.0.2 OPTIONS /Microsoft-Server-ActiveSync/default.eas &CorrelationID=<empty>;&ClientId=AA1B5FOPF0CD8FPRGPX2RW&cafeReqId=ddb352-cc1f-4323-914d-247e0be1a862; 443 realdomain.com\johnsmith 157.56.75.164 Apple-iPad2C1/1102.55400001 - 404 0 0 43

There's piles of these for every test on every platform. The errors all end with 404 0 0 followed by a different number (hundreds of lines of this). Clearly they're getting in from the internet but they're... 404'ing.

- I see people asking what happens when you attempt to https://realdomain.com/autodiscover/autodiscover.xml and it asks for username and password, then provides error code 600 with invalid request, which is the same I see with the sites that are working fine.

- I ran through all IIS authentication settings and they're all set to appropriate defaults, compared with a functioning site.

I'm pulling my hair out here since this is the second Exchange 2016 install I've done and the first is working fine. There's one minor difference between this site and the other site in that this site is hosting an internal web application so other people have had their hands in IIS, but evaluating all sorts of settings doesn't show anything out of the ordinary.

Any guidance would be appreciated!

I am going thru the pain of trying to get OLK Anywhere to work have set this up many times for other clients.

The scenario

• Dell Venue Pro 11 Tablet with Windows 7 Professional SP1 (not domain joined as they wont be used at the office)
• On Prem Exchange 2013 Server with CU7 Installed
• SSL cert for this config installed from Go-Daddy, confirmed as fine according to remote connectivity analyser
• Office 2013 Pro Plus

Do client devices need to be joined the Active Dir Domain to be allowed to use, OLK Anywhere?  I am having issues getting them to connect via OLK Anywhere, when the Exchange Remote Connectivity Analyser says all is good.

Hi,

Our iDevices recently got a bunch of Status Code 111 (https://msdn.microsoft.com/en-us/library/ee218647%28v=exchg.80%29.aspx) from the Exchange server. However, we cannot determiner which CAS server was sending it. We enabled EAS Mailbox logging (http://blogs.technet.com/b/jasonsla/archive/2013/03/19/exchange-activesync-mailbox-logging.aspx) on all of the CAS. But there is no 111 showing up in this log. I'm not sure if I was looking at the correct log. The ServerName filed of the log shows different name of our CAS server, does it mean that it has already included all?

thank you!

Ah_Chao|| MCSE,VCP,EMCSAe

Hi,

I would like to have Company Contacts (Exchange 2013 GAL) available on the Mobile Phones of our employees.
I've read about synchronization options from GAL to personal contacts (and personal contacts are synced with ActiveSync, so this will do the job). Itrezzo.com
Most likely there are other third party tools as well.

What are your experiences?

Hi to all, I'm writing you about an issue that i'm not able to resolve in my exchange 2010 CU9. I've set message size for the organization to 50BM maximum with this command:

get-transportconfig | Set-TransportConfig -maxsendsize 50MB -maxreceivesize 50MB; get-receiveconnector | set-receiveconnector -maxmessagesize 50MB; get-sendconnector | set-sendconnector -maxmessagesize 50MB; get-mailbox | Set-Mailbox -Maxsendsize 50MB -maxreceivesize 50MB

All worked and from outlook of my pc i can send attachments of 30-40Mb without problems. The issue is from Iphones ad Apple Mail client. If i send a message with an attachment the maximum dimensione accepted is quite 8MB after that i receive and alert telling me the attachment is too large for the organization. I also tried this solution 

How I set these settings in Exchange:

Create Message Size Limits (50 MB
OWA Attachment Sizes:  (Note: This must be completed on every CAS server)
Use Notepad to change the maxRequestLength value

1. Find the Outlook Web App Web.config file on the Client Access server. The default location is <drive>\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa.
2. Make a backup copy of the web.config file.
3. Open the original file using an editor such as Notepad. Don't use Internet Information Services (IIS) Manager to edit the Web.config file.
4. Find maxRequestLength and change it to the value that you want. The value is stored in kilobytes (KB). The default value is 35000. The following example shows the maxRequestLength value in the Web.config file.
<httpRuntime maxRequestLength="51200" />
Note: This is 50 MB (1024 X 50)
5. Save and close the file.

EWS Attachment Sizes:  (Note: This must be completed on every CAS server)
1. Find the EWS Web.config file on the Client Access server. The default location is C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\exchweb\ews
2. Make a backup copy of the web.config file.
3. Open the original file using an editor such as Notepad. Don't use Internet Information Services (IIS) Manager to edit the Web.config file.
4. Find maxRequestLength and change it to the value that you want. The value is stored in kilobytes (KB). The default value is 35000. The following example shows the maxRequestLength value in the Web.config file.
<httpRuntime maxRequestLength="51200" />
Note: This is 50 MB (1024 X 50)
5. Save and close the file.
Restart IIS.

ActiveSync Attachment Sizes:  (Note: This must be completed on every CAS server)
1. Find the EWS Web.config file on the Client Access server. The default location is C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Sync
2. Make a backup copy of the web.config file.
3. Open the original file using an editor such as Notepad. Don't use Internet Information Services (IIS) Manager to edit the Web.config file.
4. Find maxRequestLength and change it to the value that you want. The value is stored in kilobytes (KB). The default value is 35000. The following example shows the maxRequestLength value in the Web.config file.
<httpRuntime maxRequestLength="51200" />
Note: This is 50 MB (1024 X 50)
5. Save and close the file.
Restart IIS.

Set IIS 7 settings
Open a command prompt and go to the follow directory:  cd %windir%\system32\inetsrv
Type each of these commands separately and hit enter.

appcmd set config "Default Web Site/ews" -section:requestFiltering -requestLimits.maxAllowedContentLength:51200000
appcmd set config "Default Web Site/owa" -section:requestFiltering -requestLimits.maxAllowedContentLength:51200000
appcmd set config "Default Web Site/Microsoft-Server-ActiveSync" -section:requestFiltering -requestLimits.maxAllowedContentLength:51200000

4. IISreset or reboot to apply these changes.

But..the only thing i've been able to obtain is a different message telling me "HTTP Error, the server is not able to satisfy the request" instead of the message that the attachment is too large..

I need an help because i've no more ideas where to search..

Thank you

Hi There,
I am currently in the process of trying to create a Hyrbid environment between an on-premises Exchange server (2013) and Office 365.

After many headaches, I have managed to get to the point of migrating users.
I go to migrate a user using the office 365 admin centre.
Select the migration type: Remote Move Migration
Selected a user account
Typed in my Domain Admin Account credentials
Pressed Next

and then it fails with an error:

When a user's mobile phone is configured to connect to Exchange 2013 they get a quarantined email.  When I look up the user in EMC it shows the users mobile phone but when I go allow the device I get an error that the device ID can't be found.  When I use the Get-MobileDevice -mailbox command for the user it doesn't list anything, but Get-MobileDeviceStatistics -mailbox lists the users mobile device with a DeviceAccessState of Quarantined.  

Why does the EMC see the mobile device, but EMS does not?  After adding a user's phone I usually wait an hour or two and come back to it, and then the EMS will show the quarantined device.  EMS used to show the quarantined device right away but at some point it stopped working that way.

We are exploring activesync mailbox policies in exchange 2013.

The activesync mailbox policy has the option of enabling password recovery. Also the get-mobiledevicestatistics command has the -showrecoverypassword switch.

However there is no reference of how this works. I have created a mobile device mailbox policy with the PasswordRecoveryEnabled set to true. However when this policy is applied to the user, neither is the user asked for recovery password, nor is he able to see it in owa, nor is the administrator able to see anything in the get-mobiledevicestatistics command.

Searched a lot on the internet and could not find any references to exchange 2013 (though there were frequent references to exchange 2010).

also, is it supported by all device types (windows, apple, android)

Appreciate any help.

Ron

Ron

Hello Community,

In our Company we have a Windows Exchange Server 2010 SP3 and following Problem:

Some Devices can syncronize without any Problems and the Exchanges Server can create the ActiveSyncDevices-Container without any Problem.
But some Users can't syncronize with the Exchange Server and the Server can't create the Devices-Container.
The Users have the same permissions as the other Users wich got no Problem.

I tried the Solutions with giving the users the rights for Exchange Server to modify permissions and also every user got the permissions to create/delete msExchActiveSync-Objects.

Can anyone help me out?

Thanks.

I have had 3 iPhones in the past year and a half; a 4s, 5c and currently 6s. I have never been able to setup my work email on my phone. I go to setup the exchange account, it checks all of the information entered, confirms it, and when I go to update my mail it says "No mail" even though I have quite a bit of mail.

Another person in our organization had this issue, it was fixed by recreating their Active Directory profile. I tried recreating (fully deleting and creating a brand new one) mine and it was not successful.

The device confirms all of the information, shows a device ID, and allows me to save the info but does not sync anything (mail, calendar, etc). In Exchange Admin Center when I open the device details window in mailbox features it does not show any device ID even though my phone shows one. I work in IT and have talked to my coworkers and my manager and none of us can figure it out.

Thank you in advance!

Hello,

I have recently Install Exchange Server 2016, now I am trying to configure my Outlook 2013 with (Outlook.com or Exchange ActiveSync compatible service) but it won't work and send me this error

Log onto Exchange ActiveSync mail server (EAS): The server annot be found

ActiveSync enabled in my Exchange server.

But if I do MAPI (Microsoft Exchange Server or compatible service) then its working fine.

would you please help what i need to do to configure this.

Br.

Umar

Hello,

I have a question regarding exchange 2013 activesync policies. 

We have enabled ActiveSyncMailboxPolicy MaxEmailAgeFilter property to oneWeek. It works OK, but the user (who uses Microsoft outlook client for android https://play.google.com/store/apps/details?id=com.microsoft.office.outlook ) still have the possibility to search emails even older than this limit. As I understand this is due to the "server-side search" mechanism. For the security purpose I'd love to disable this feature, so that the user is only able to search those emails, that are downloaded on his device. Is this possible? 

Thanks in advance! 

Hi, I have problem connecting through ( just some ) smartphones and tablets and tried to set activesync external url but when I do I get this error.
I also want to set my autodiscover but I'll start with this part.

I'm getting this error on the Text Connectivity tool;

Exchange 2007 > 2013 migration tonight.  Everything working apart for EAS for some users and the EXRCA fails for EWS and EAS. Output:

I think these two errors are related.

Exchange ActiveSync AutoDiscover

The Microsoft Connectivity Analyzer can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled.

Exchange ActiveSync

The certificate is not trusted on any version of Windows Phone device. Root = CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

They come from the indicated tests on the Microsoft Test Connectivity site.

I've spoke to GoDaddy and they say the certificates are correct and should cover all Windows devices.

Any suggestions on how to pursue this one?

Bernie

I have Galaxy S4 GT-I9505 with android version 5.0.1.

I have configured my office email on android email. Configuration  works fine but I do not receive any email.

I just get blue circle rotating all the time

Then I downloaded outlook app and configured, but same issue I do not receive any emails.

I get message "You ve reached Inbox zero".

I have contacted our system administrator with the issue, he configured test email account on my mobile and it works fine.

I received email with test account.

He says there is some issue with configuration of my email account on MS exchange server. But not able to find out what is the issue.

All my colleagues with difference mobiles they get all emails on their phone. 

Can anyone help me please?