Hello Folks,
We recently changed the Active Sync Attachment limit to 50 MB from 10 MB in web.config file , but some how we are not able to send the messages over 35 MB is that due to that as our organization attachment limit size which is 35 MB. ?
Will internally also organization wide setting will applied or only when any email will send or receive from internet.
Thanks
Current Issue: devices on android 4.0.2 and above are not syncing with a fully applied policy leading to issues with emails syncing and when network password expires.
Investigation to date: Apple devices work with no issues, Also a newly created active directory/exchange accounts work and syncs on the ECP with a fully applied policy.
We are running exchange 2013 and have multiple devices models and android versions all having similar issues.
Any assistance would be appreciated.
Hello,
This concerns Echange, please bear with me.
I just tried to migrate my AD CS role from a 2008R2 to 2012R2 server, and the migration failed. Unable to go back to old server mor an unknown reason, despite all precautions taken to have a plan to do so.
I then decided to simply install the role on the new server, using the old Root CA certificate. Now, this certificate was renewed to get it's expiration date well in the future. All other services that rely on certificates still work, either with the old certificates or the new ones generated by the new role.
Only ActiveSync refuses to take certificates on my mobile devices. Everything else about the Exchange system works (Outlook, OWA, mail flow, etc. None of these use client certificates to authenticate users). The old certificates worked perfectly before the operation, but now either new or old, ActiveSync returns a 403. I searched high and low on the forums, documentation colleagues, without results.
Up to now I've tried:
- Going through ActiveSync configuration to accept certificates. Everything checks out
- Made sure all the Root CA certificates are present on all servers
- Made sure the certificates used on my mobile devices include the Root CA with the client certificate.
- Made sure all the correct rights are applied to the AD objects that are related to CS, although I'm not completely sure about this one. But since certificates work for everything else, I'm inclined to believe this part is OK.
I am frankly at a loss, and would appreciate any ideas what to look for next.
Thanks
Hi,
I'm trying to run multi-tenant exchange, and I had installed hc control panel. When I setup up everything is work perfect finally. But when I try to setup to run exchange on my phone that is Windows Phone 10. I get message that it couldn't found configuration. This is my dns configuration.
Be attention on that on my head domain is work perfectly. But when I try to run tenant is little bit difficult.
Can somebody come with some solutions how to fix this.
Future thanks.
Best regards
ZS
Hi there,
We are getting MSexchangeActiveSync warning messages -event ID 1033 on Exchange 2013 CU3. Details can be seen below. As we are in the process of mailbox migration from exch 2007 to 2013, we are also noticing activesync issue once a while. I couldn't come across anything regarding to warning message and I'm curious if this is somehow link to activesync issue that we are noticing?
"The setting SupportedIPMTypes in the Web.Config file was missing. Using default value of System.Collections.Generic,List`1[System.String]."
PS: Restarting activesync pool helps and restart the activesync connections as it is mentioned on the link.
Thanks,
Cem
We have a single mailbox that has an activesync problem. the mail client keeps "connecting" and not fetching any mails even it is set to automatically push, until the mail client is closed and reopened. when I configured a different mail account on the same device it worked fine. I also tried to configure that mailbox on different devices (android , IOS), it has the same problem.
any advice please.
Thanks
Hi,<o:p></o:p>
In our test lab we are running Exchange 2007 SP3 and Exchange 2013 CU13 and we want to use LoadGen 2013 to test Activesync for mailboxes that are still on the Exchange 2007 and proxying
back to Exchange 2013 for Activesync/MDM testing. Can we do this? I assume we can’t as the error in the Loadgenrecipient.log for all Exchange 2007 mailboxes
is as follows:<o:p></o:p>
##User bgates003 cannot be used as the server hosting the user’s mailbox is running an unsupported version of Exchange for this release of the Loadgen tool.<o:p></o:p>
Makes sense, though is there some way to test performance of mailboxes (1000s) on Exchange 2007 proxying back to Exchange 2013 for ActiveSync/MDM? Also, we would want to force all the Exchange 20007 mailboxes to use a specific Exchange 2013 server to simulate the proxying. <o:p></o:p>
Thanks<o:p></o:p>
Hi,
In our test lab we are running Exchange 2007 SP3 and Exchange 2013 CU13 and we want to use LoadGen 2013 to test Activesync for mailboxes that are still on the Exchange 2007 and proxying
back to Exchange 2013 for Activesync/MDM testing. Can we do this? I assume we can’t as the error in the Loadgenrecipient.log for all Exchange 2007 mailboxes
is as follows:<o:p></o:p>
##User bgates003 cannot be used as the server hosting the user’s mailbox is running an unsupported version of Exchange for this release of the Loadgen tool.<o:p></o:p>
Makes sense, though is there some way to test performance of mailboxes (1000s) on Exchange 2007 proxying back to Exchange 2013 for ActiveSync/MDM? Also, we would want to force all the Exchange 20007 mailboxes to use a specific Exchange 2013 server to simulate the proxying.
Thanks
The Outlook App on the Android/IOS platform will not configure or connect to my mail servers.
When Attempting to setup the Connection I get the error The connection the Mail server timed Out.
The Native Application on IOS, Android and OutlookAnywhere work without failuer.
The IOS & Android app don't give any error messages that give me details as to why this is not working,
Any suggestions on how I can track down why this is not working ?
Thank you for the suggestions.
Rich
I am running into an intermittent problem with EAS and it appears to be iOS devices running 10.2 or 10.2.1 (we only have corp iPhones and most users are now on this iOS level).
We have the EAS profile pushed to the devices and the username and password is 100% correct within the profile. However after a period of time mail will stop syncing and users may see "Cannot Get Mail, The connection to the server failed" other users see password incorrect update the password, upon re-entering the same password in the profile mail will work again for a number of days.
On the CAS server I see the following event in the security log:
Event 4625 Audit Failure Logon
An account failed to log on.
Subject:
Security ID:
SYSTEM
Account Name:
SERVERNAME$
Account Domain:DOMAIN1
Logon ID:
0x3e7
Logon Type:3
Account For Which Logon Failed:
Security ID:
NULL SID
Account Name:
Account Domain:
Failure Information:
Failure Reason:Unknown user name or bad password.
Status:
0xc000006d
Sub Status:
0xc0000064
The mailboxes are in a different AD site and should be proxied but it appears that the auth is failing before the proxying takes place, once re-entering the credentials it proxies and works fine.
the application pool for EAS is set to basic auth, internalauthenticationmethods is blank which means all authentication methods are ok.
My gut feeling is its something to do with the IIS token that is issued to the device that allows mail to sync for 24 hours or so before re-authentication, at the next re-auth its failing for some reason...
Does anyone have any ideas?
Thanks
Dear Experts
We are on test lab running Two Virtual Machines (VM1, VM2) using VMware workstation, on top of that we installed Domain controller with windows server 2012R2 on VM1 and VM2, then we have linked them together using static routing, then we built trust relation from VM1 toward VM2 one way trust using Active Directory Trust and services. VM1 on one forest(client.com.tr) and VM2 on another separated forest (server.com.tr). the Forest and domain functional level for both is windows server2012R2.
Now We are planning to install Exchange 2013 on VM2 which is on ( server.com.tr) forest, but at the same we would like to allow users from (client.com.tr) to Access that exchange which is in another forest.
the question is
1-How can we implement that step-by-step procedure?
2- Is there any Pre or Post configuration ?
On Exchange 2013, I setup a public folder and a calendar-enabled subfolder for one office to use. I added permissions, and everyone can see it and use it as intended in Outlook 2013. When the calendar was added to the user's mobile devices (the calendar shows up just as intended) the appointments are not there. When a user adds an appointment from their mobile device to the shared calendar, it syncs across all shared mobile devices, but not with Outlook.
Has anyone else seen this behavior, and are there any suggestion to overcoming it?
I thought about just creating a common mailbox that everyone adds as a separate account to their mobile devices, but I don't want mail to flow to or from that account by anyone.
We currently have three ActiveSyncDEviceAccess rules based on DeviceModel qurantining for Value "Android","Ipad","iPhone".
We have an MDM management tool now that will append its name in the DeviceFamily, "MDMAndroid","MDMiPad","MDMiPhone".
If I create an ALLOW rules for the above DeviceFamily's, while keeping the QUARANTINE rules for the generif DeviceModels, will this allow my MDM managed device, while still quarantining the generig, non-managed devices?
Thanks? Tom
Hello,
Please check the error below:
"The following items couldn't be sent to your mobile phone. They haven't been deleted. You should be able to access them using either Outlook or Outlook Web App." This happens when I select in Microsoft Outlook in the Calendar the option "Working elsewhere", it seems my iPhone does not recognize this. Is there any solution for this issue?
Thank you and have a nice day!
| Item Folder: | Calendar |
| Item Type: | IPM.Appointment |
| Item Created: | 4/12/2018 8:30:59 AM |
| Item Subject: | Test |
hi,
for some users it would be interesting to be able to delete messages from the mobile device but not from the mailbox.
the generic answer is no, it can not be done.
if you could add some code to the sync process, maybe you could do it.
but from the little I know, ActiveSync is not customizable, is it true?
It seems a stupid request, but in some cases it can make sense.
Hi,
I am trying to restrict Mailbox to one Mobile Device, I ran the following commands
Get-MobileDeviceStatistics -Mailbox:"Test.Mail2" |fl DeviceID
Set-CASMailbox -Identity: "Test.Mail2" -ActiveSyncAllowedDeviceIDs: "xxxxxxxxxxxxx"
Both commands ran succefully , If i am not wrong now Active sync for this mailbox should be configured on above specific Mobile device with ID "xxxxxxxxxxxxxxxxx"
But i can configure this mailbox on multiple devices. How can i restrict to
Regards
Usman Ghani
Usman Ghani - MCITP Exchange 2010
Hi,
Is this possible that I can create a Device access rule for specific mailbox , so devices will be quarantine for that mailbox and then i will approve . I don't want to apply the rule for all organization.
Regards
Usman Ghani
Usman Ghani - MCITP Exchange 2010
Hi,
Which device versions are supported to be inserted in this list?
Or should this list not be edited?
#PATH
E:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\Autodiscover\web.config
#Original
<add key="MobileSyncRedirectBypassClientPrefixes" value="Acer,ADR9,Ally,Amazon,Android,ASUS,EasClient,FUJITSU,HTC,HUAWEI,LG,LS,Moto,Mozilla,NEC,Nokia,Palm,PANASONIC,PANTECH,Remoba,Samsung,SEMC,SHARP,SONY-,TOSHIBA,Vortex,VS,ZTE" />
What is the correct and supported way to insert new devices in this known list?
My sources:
