Quantcast
Channel: Exchange Server 2013 - Mobility and ActiveSync forum
Viewing all 1206 articles
Browse latest View live

Public folder calendar

$
0
0

Hi,

We recently migrated to Office365 and so far I am very happy with it.  I'm trying to figure out how to do something though.  We have some public folder calendars, and I have users who would like to view these public folder calendars on their smartphones.

Obviously they can view their personal calendar by default on the phones, but is there an app or something that would allow them to view a public folder calendar on a smartphone?

Thanks for any help!


View Mobile Device Properties

$
0
0

Our support staff use to be able to see the IMEI number and other properties for a mobile device by double-clicking on it in the EAC display for devices connecting to a particular mailbox (i.e. mailbox properties/mailbox features/mobile devices(view details) and then double-click on a device in the list).  Now when they double-click on a mobile device they are presented with the "New Device Access Rule" page instead of the device properties page.  Does anyone know how/why this has changed and how to get back to the original behaviour? We are running Exchange 2013 CU10.

Cheers

Alan

Exchange 2013 Cert Based Auth (CBA) and user certificate management within Active Directory

$
0
0

Dear all,

I'm still in the process of reviewing Paul’s book "iPhone with Microsoft Exchange Server 2010: Business Integration and Deployment" as I'm in search of some answers regarding Cert Based Auth (CBA) for Exchange 2013 ActiveSync (EAS) devices, i.e. iOS devices, and management of corresponding user certificates in Active Directory, user accounts, and the iOS device. I didn’t find any answers on your site and Paul’s site, yet. Thus I decided to get in touch with you guys.

Please let me elaborate:

We're facing the aforementioned request from one of our clients (ca 20.000 users), who wants to implement CBA on Exchange 2013 (EAS and OWA) to secure endpoint devices, i.e. Apple iPhones. How to implement CBA and corresponding Active Directory, and PKI requirements is not an issue here. Thing is, we're still struggling with how to automate user certificate enrollment on a yearly basis (as user certificate will only be valid for 1 yr), and to ensure that renewed certificates will be placed on the user account appropriately. We know how to provide users with renewed user certificates for the mobile device (with a separate MDM solution in place, being able to push certificates to the mobile device), but we don't know whether and how the Active Directory side of things in terms of CBA and certificate management can be fully automated and functionality ensured w/o interruption of services.

Is this even possible?

I'd appreciate any help.

Kind regards
Alex



Alexander Ollischer Diplom-Wirtschaftsinformatiker (FH) Citrix & Microsoft Certified Engineer (CCEA, CCEE, MCSA, MCSE, MCDBA, MCTS) Afontis IT+Services GmbH Baierbrunner Straße 15 81379 München Deutschland Telefon (089) 74 34 55-0 Fax (089) 74 34 55-55 mailto:a.ollischer@afontis.de http://www.afontis.de http://www.itganzeinfach.de Amtsgericht München, HRB 109 005 Geschäftsführer: Thomas Klimmer

problem with iphones and calendar

$
0
0

Hi,

i've exchange 2013 with cu11 and i have problems that all iphones (not specific iOS) can't send calendar outside the organization.

this is a fresh install with windows 2012 R2.

please help..

this is the error that i get back from the exchange

Remote Server returned '550 5.6.0 M2MCVT.StorageError.Exception: ConversionFailedException, Content conversion internal failure.; storage error in content conversion.'

‏‏

Received: from ex server name (ip) by
 ex server name (ip) with Microsoft SMTP Server
 (TLS) id 15.0.1156.6; Tue, 17 May 2016 14:25:06 +0300
Received: from ex server name ([ip]) by
 EX server name ([ip]) with mapi id
 15.00.1156.000; Tue, 17 May 2016 14:25:06 +0300
Content-Type: application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding: binary
From: Shikma Turgeman -  <email>
To: Avi Grinberg <email>
Subject: =?iso-8859-8-i?B?8Onx6eXvIODn+OXvIA==?=
Thread-Topic: =?iso-8859-8-i?B?8Onx6eXvIODn+OXvIA==?=
Thread-Index: AQHRsC7DHZ1OXEDF0UWP7bMW2QH7wg==
Date: Tue, 17 May 2016 14:25:05 +0300
Message-ID: <17F0D6FD-83E6-4B86-8242-EDA9B570916A@domain>
Accept-Language: he-IL, en-US
Content-Language: he-IL
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: <17F0D6FD-83E6-4B86-8242-EDA9B570916A@bdomain>
MIME-Version: 1.0
X-MS-Exchange-Transport-FromEntityHeader: Hosted
Return-Path:email

Event 1033, MSExchangeActiveSync Warning

$
0
0

Hi there,

We are getting MSexchangeActiveSync warning messages -event ID 1033 on Exchange 2013 CU3. Details can be seen below. As we are in the process of mailbox migration from exch 2007 to 2013, we are also noticing activesync issue once a while. I couldn't come across anything regarding to warning message and I'm curious if this is somehow link to activesync issue that we are noticing?

"The setting SupportedIPMTypes in the Web.Config file was missing. Using default value of System.Collections.Generic,List`1[System.String]."

PS: Restarting activesync pool helps and restart the activesync connections as it is mentioned on the link.

http://social.technet.microsoft.com/Forums/exchange/en-US/2c52ab78-a6b2-4fd0-8239-808b67a6d427/event-logs-repeating-event-id-5011-was-and-6002-ping-of-mdb?forum=exchangesvrmobility

Thanks,

Cem

Disable ActiveSync for a Group with Exceptions for Members of a Sub-Group

$
0
0

               I’ve seen lots of posts on similar topics but nothing exactly like this. Our global ActiveSync policy is enabled.  However, one of our divisions, HR, requested to have ActiveSync disabled for their users who deal with a lot of PII/HIPPA information except for a select sub-group of managers in that division. Yes, the code is a little klunky.  I’m sure there are much easier ways to do it. It would especially be easier if I could compare a CASMailbox object to see if it might be contained in an array of CASMailbox objects.  But that's beyond my scripting capabilities for now. Since I couldn’t get that down, I resorted to comparing a string to see if it’s contained in an array of string objects. I welcome your feedback!

$inctime = Get-Date -Format HHmmss
$filename = "HRDisableActiveSync_" + $inctime
$outfilepath = "D:\" + $filename

$HRASAllowedMbxs = @()
$HRASAllowedMembers = Get-DistributionGroupMember -Identity "HR ActiveSync Allowed"
# $HRASAllowedMembers is an array of elements of type ReducedRecipient which has
# properties such as DisplayName and PrimarySMTPAddress

ForEach ($HRASAllowedMember in $HRASAllowedMembers) {
  $a = $HRASAllowedMember.PrimarySMTPAddress.ToString()
  $HRASAllowedMbxs += $a
}
#At this point, $HRASAllowedMbxs is an array of text strings which are SMTP addresses

$HRNoASMbxs = (Get-CASMailbox | Where-Object {$_.DisplayName -like "*(HR)"})

#$HRNoASMbxs = (Get-CASMailbox | Where-Object {$_.SAMAccountName -match "[Hh][Rr]\d\d\d\d"})

#At this point, $HRNoASMbxs is an array of CASMailbox objects

ForEach ($HRNoASMbx in $HRNoASMbxs)
{
  $b = $HRNoASMbx.PrimarySMTPAddress.ToString()
  $c = $HRNoASMbx.DisplayName

  if ($HRASAllowedMbxs -NotContains $b)
  {
    Set-CASMailbox -Identity $b -ActiveSyncEnabled $false

 $MbxOutput = "ActiveSync disabled for $c"
 $MbxOutput | Out-File -Filepath $outfilepath -Append
  }
  else
  {
    $MbxOutput = "ActiveSync ENABLED for $c"
    $MbxOutput | Out-File -Filepath $outfilepath -Append
  }
}


KYPaul

ActiveSync certificate

$
0
0
Hello there was a question about ActiveSync and NetBios name in the certificate

Here is an example of what I'm doing.

There are Exchange 2013 with the name "Exmail"

All virtual directories are configured:

Internal: https://mail.domain.com

External: https://mail.domai.com

Issue certificates on https://www.wosign.com service certificate specifies the names

1. mail.domain.com

2. Autodiscover.mail.domain.com

All is well connected except ActiveSync do the test using Test-ActiveSyncConnectivity | fl

He says the certificate is invalid.

[System.Net.WebException]: The underlying connection was closed: Could not establis
trust relationship for the SSL / TLS secure channel. Inner error
[System.Security.Authentication.AuthenticationException]: The remote certificate is
invalid according to the validation procedure.

Not sure if I will release an additional certificate with the name of SAN ServerCAS.localdomain mistake and ActiveSync will take work. But I want that record 2, it was stated in the certificate. Articles in Google darkness, but I do not like will not understand what to do that would earn ActiveSync SAN with two names. Will it work with the two above mentioned names or be sure to add the NetBios name of the server that the CAS would have turned 3 entries in the certificate?

1. mail.domain.com

2. Autodiscover.mail.domain.kom

3. Exmaill.LocalDomail.local

Get company email on iPhone without enabling ActiveSync?

$
0
0

My supervisor at the company I work for would like me to receive company email on my personal iPhone. I recently learned that adding an Exchange mail account on the iPhone through the Settings.app (in the Mail, Contacts, Calendars section) will enable ActiveSync on the iPhone, automatically enroll the iPhone, and allow it to be remotely wiped through the Exchange Management Console (as in, the entire device wiped, not just the email).

For obvious reasons, I am not comfortable with my personal iPhone being automatically enrolled and capable of being wiped. I work in IT at the company, so I am able to see if any mobile devices are enrolled for my email account. In my tests, I have found that downloading a third-party email app such as Spark by Readdle and adding the Exchange account in the app (NOT the iPhone's Settings.app) will allow me to receive email without enrolling my device to ActiveSync.

Can anyone provide me with any insight on this?



Device blocked on exchange server

$
0
0

Hi Everyone,

many users are reporting that their device are getting blocked. we have default open policy for everyone so there is no restriction on exchange server level.  Reason showing below

Device access state reason:

Individual

please suggest.

Subject: Your mobile device has been denied access to the server via Exchange ActiveSync because of server policies.

Your mobile device won't be able to synchronize with the server via Exchange ActiveSync because of an access policy defined on the server.

Information about your mobile device:

Device model:

iPad3C6

Device type:

iPad

Device ID:

ApplDLXKD0RKF18W

Device OS:

iOS 9.1 13B143

Device user agent:

Apple-iPad3C6/1302.143

Device IMEI:

Exchange ActiveSync version:

14.1

Device access state:

Blocked

Device access state reason:

Individual

Regards,

Manjeet Singh

Enabling Client Certificate Authentication in Exchange 2013's Microsoft Active Sync IIS Virtual App

$
0
0

I am getting a 500 error in IIS on my Exchange 2013 Server whenever I enable Client Certificates in the Microsoft-Server-ActiveSync VirApp using either the Virtual Directory Edit function in the Exchange Admin Webapp or directly in IIS Manager.  I am trying to test a more secure connection between our product and the Active Sync VirApp and can't seem to get Active Sync to work even with the Windows 8 Mail App which can be set to use Active Sync.  Below is a link to a PDF that shows the steps I did to set up the Client Certificate Authentication in Exchange Active Sync and a test I did in OWA to make sure my certificates were proper.  I am seeking some knowing eyes to browse my PDF and then let me know if I am missing something in the process.  Thanks ...

Exchange 2013 Client Certificate Setup Steps

 

BAE

Mobile Email on iOS devices

$
0
0

Hi All,

I have a client that has this weird thing happening on his iOS device (iPhone4s), the current setup of their email system is everything will be moved in .pst, so if the user received an email to his/her mobile device, and he downloaded all email from his device going to his/her pst file, the email on mobile will be empty. But in his case, there's some email that remains in his mobile email, although it is already downloaded to his/her pst file.

Any workaround here? or any fix about this?

Thank you!

EMC shows 'ghost' mobile devices

$
0
0

Single Exchange 2013 Server running in a AD 2012 environment.

.

Recently had this problem pop up.

.

When using View Details in EMC under Mobile Devices, I get a list of devices.  When I click on a device, it may give me an error that 'Device cannot be found'.  When I check ADSI, that object is NOT listed.  It is also NOT listed when I run Get-MobileDevice, but DOES show up when I run Get-MobileDeviceStatistics.

.

Why am I getting different results and how do I fix?

.

Thanks....

Outlook ActiveSync lost email by em.domain.com

$
0
0

The ActiveSync account , some often unable open it , have to in safe mode , how it comes to ?  And found the outbox email can be generated many same email sent out when sending does ?

The outlook ActiveSync account lost its emails from em.domain which by exchange mail server . Meantime, the imap and pop unable to see these emails .  Did this exchange server cause the else server lost their emails ?

Mobility Sync from mobile device itself ?

Regards

BleuOisou

Mobile Device stops working under ActiveSync

$
0
0

Single Exchange 2013 running under Server 2012 AD

.

I have users (mostly using Apple iPhone or iPad, sometimes both).  For some reason (after moving them to a new database), they stopped working with ActiveSync.  Devices show up under View Details with last sync date showing date/time it stopped working.

.

The Fix is:

Remove Device from View Details (EMC).

Open ADSI and delete the ExchangeActiveSyncDevices container

Ensure that Security Inheritance is ENABLED

Restart IIS

Remove and Re-create account on device.

.

Why is this happening? Also, is there a 'better' fix?

NMStolen error message - ActiveSYnc Count All Errors

$
0
0

I'm not an exchange admin though I'm helping to run some of the log parser reports against the IIS files on each of our mail servers. The top two items we see are  the following NMstolen and OverBudget

I've found data on overbudget but not a thing on nmstolen (unless they're license plates stolen from new mexico) .

Could anyone help me out on what the NMSTOLEN error may be?


Windows 10 mail client returns 0x86000c2a syncing ActiveSync

$
0
0

When trying to sync with Exchange ActiveSync it works for about a day then starts returning the error 0x86000c2a "We weren't able to apply the security policy that's required by "eas.xxxxxx.com". Contact your company's support person to fix the problem."

But since I'm that support person it doesn't tell me what to do about it or who else I can contact. I can't imagine what I could change on the Exchange server to fix this when it works with every other platform including the Windows 8/8.1 email client.

I've just downloaded the latest version of the email client (version 17.6017.42001.0) and it still has the problem. With Win 10 build 10240.

Any additional information on this problem would be appreciated.

ActiveSync calendar not showing all meeting attendees

$
0
0

Single on premise Exchange server

Server Version:Exchange 2013 CU8  Version 15.0 (Build 1076.9)

Desktop Client version: Outlook 2013 / 2016

I have a user (Executive) who has a delegate (meeting requests only go to the delegate). Recently the user has complained that calendar meetings on his mobile device are not showing all the attendees. At first I thought this must be yet another iphone related bug. However, after troubleshooting the issue thus far, I believe this to some issue with his mailbox.

Here is the issue:

  • Mailbox with Delegate configured for meeting requests to be sent to “My delegates Only”
    • If a meeting request with more than 2 attendees is sent TO the user mailbox  and accepted by the delegate via the Outlook desktop client or via the delegate’s ActiveSync device,  the calendar meeting on any ActiveSync device (iPhone or android) only shows the meeting organizer and the mailbox user in question. We have tested with iPhone, iPad, and android devices using both the built in mail clients and the latest Outlook app.
  • Mailbox with Delegate configured for meeting requests to be sent to “My delegates and me” OR “My delegates only, but send a copy of meeting requests and responses to me (recommended)”
    • No issues – calendar meetings show all attendees whether the meeting request was accepted by the delegate or by the user.

I set up several test mailboxes and replicated the delegate configurations to match and saw no issues. This seems to be an issue specifically with this user mailbox. I tried moving the mailbox to a different mailbox database just as a first step – no change in behavior. I turned on logging for the Calendar Repair Assist but no logs for this user have been generated. I know I can pull ActiveSync logs, but I don’t know what to look for. The meetings are synchronized very quickly to the mobile device, they just don’t show all the attendees.

I know I should probably apply the latest exchange cumulative updates to my server, but this issue appears to only be affecting this one user.

Any ideas of what I can do to further isolate the root cause of this issue would be very much appreciated.


Accessing Shared Calendar on IOS Devices

$
0
0

This thread is only concerned with operations on iPhone and iPad. I have no issues working with PC's.

We are using Exchange 2013, on premises Server. My company has a shared calendar for different sales reps to schedule items with.

 I cannot SHARED CALENDARS on any IOS Device, whether I use Outlook Web Access in browser from Safari or Chrome, or the OWA App for Iphone/Ipad, or the Outlook App. The native Exchange Access on the iphones/ipads does not have a way(that I know of) to access shared Calendars. We are on Exchange Server 2013 Service Pack 1 (SP1 aka CU4)  15.0.847.32 , some research suggests that I need to update the Exchange server to the latest service release CU12.  During initial testing it did work ok My Iphone, but it is running IOS 8.3. I am thinking this is related to something with IOS 9, as others have mentioned on Apple Forums (with no solution given). So should I update the Exchange server to the latest CU12 to see if that fixes the issue? Has anyone dealt with this issue before?

Mail deleted with two activesync connections (iPad and Androïd) from the same IP address

$
0
0

Hello,

We have a few users who complained the lasts months that e-mail disappears, while they are sure they did not delete the e-mail from the Inbox. 

We investigated two cases using the audit logs (were we can believe that they did not delete by accident) and saw two times the same scenario: two ActiveSync connections from two different devices coming from the same IP address (a home router acting as a NAT).

The last case was an Ipad and a Samsung/Androïd.

Has anyone seen the same behaviour?


Herman Van Uytven

sync

$
0
0
How do I sync my work outlook account on their computer, with my home outlook on my computer
Viewing all 1206 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>