Iphone with MS Exchange

[Mark M]

Tried a few guides on the net and havent been able to get it working.

Ive got all the details in but it wont verify? Are there any ports that need opening on the router perhaps or anything else I should look out for as Ive exhausted all options I know of

 

[Mark M]

Sorry, using Exchange which comse with SBS2003.

Not sure about active synch? Where do I need to check for that?

 

[Mark M]

Exchange System Manager > Global Settings > Mobile Services

Right click > properties

Everything is ticked: enable user initiated syhchronization, enable uo to date notification and enable notificiations to user specified SMTP addressess.

Is your version of exchange fully up-to-date?

Pre SP1, exchange 2003 didn't have mobile push support.

I believe everything is up to date, the version is 6.5.7226.0. No mention of any service packs.

 

[Mark M]

Right finally got a chance to have another look at this.

The phone is 3G but a newer 3GS will need to be connected in a couple of weeks from another member of staff.

Ive opened port 443 on the router

Ive got the user details and server address from outlook email options

Ive also downloaded and installed the lastest exchange 2003 release from the MS site.

But it still wont verify.

The only thing I can think of which Im not sure if it will be the problem or not is that recently when you try to log on remotely it comes up with a certificate error? Not sure if I should post the link for security reasons? But it basically says:

There is a problem with this website's security certificate. 
 
   
 The security certificate presented by this website was not issued by a trusted certificate authority.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.  

We recommend that you close this webpage and do not continue to this website.  
  Click here to close this webpage.  
  Continue to this website (not recommended).  
     More information

It started doing this when the dns setting was changed from https://mail.domain.com/mail to https://mail.domain.com/remote. Not sure why it was changed but it never did it before.

Whether thats the issue or not, any advice on how to solve it would be appreciated.

Thanks

 

[Mark M]

I believe we bought one yes, when the server was installed. Sadly the IT company we bought it from have gone out of business and we are looking for a new company but havent found one we feel the service levels match the price tag but thats another story.

Do they need to renewed every year or something?

Im sure it happened when we had an IT guy come in to do a few things with the antivirus, he said he changed the DNS settings of the remote log in address and then the certificate problem came about.

 

[Mark M]

Ok just checked the certificate in the IIS properties and its valid until 08/06/11

Issued to mail.domain.com

Issued by mail.domain.com

The address we log onto is https://mail.domain.com/remote.

Cant see anything obvious but is this even anthing which could affect the Iphone verifying or am I barking up the wrong tree?

 

[Mark M]

Yes it can cause an issue. Thats a self signed certificate and you need to get it onto the iphone as it dosen't trust the certificate authority (which is you in this case). A copy of it should be in clientapps\sbscert on your sbs server. Get it onto the iphone by what ever means then click on it and it should install. Once installed it should show the activesync https server as trusted and robert should be your mothers brother as they say.

Managed to get the cert on the iphone, good old hotmail lets you send anything!! Still doesnt verify though!

That's a self signed certificate then, hence the untrusted errors.


As Paradigm says, a GD SSL is £20/year, which make self-signed not worth the agro'.

Whats the difference between a selfcert and a GD SSL? Im happy to pay the £20 a year but if self cert wont work why will this?

Thanks

 

[Mark M]

Ah right, that makes sense. Why didnt the IT company just do it properly in the first place and bill us for it everyear?!

Right, GoDaddy here I come.

Thanks for all the help, but I cant see this being the end of it quite just yet!

 

[Mark M]

https://www.testexchangeconnectivity.com/ might be useful for you.

Ran this and its not good! Lots of fails Report below

esting Exchange ActiveSync
Exchange ActiveSync test Failed
Test Steps
Attempting AutoDiscover and Exchange ActiveSync Test (if requested)
Failed to test AutoDiscover for Exchange ActiveSync
Test Steps
Attempting each method of contacting the AutoDiscover Service
Failed to contact the AutoDiscover service successfully by any method
Test Steps
Attempting to test potential AutoDiscover URL https://domain.net/AutoDiscover/AutoDiscover.xml
Failed testing this potential AutoDiscover URL Test Steps
Attempting to resolve the host name domain.net in DNS.
Host successfully resolved
Additional Details
IP(s) returned: 195.XX.XXX.XX

Testing TCP Port 443 on host domain.net to ensure it is listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
Tell me more about this issue and how to resolve it
Additional Details
A network error occurred while communicating with remote host
Exception Details:
Message: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 195.XX.XXX.XX:443
Type: System.Net.Sockets.SocketException
Stack Trace:
at System.Net.Sockets.TcpClient.Connect(String hostname, Int32 port)
at Microsoft.Exchange.Tools.ExRca.Tests.TcpPortTest.PerformTestReally()




Attempting to test potential AutoDiscover URL https://autodiscover.domain.net/AutoDiscover/AutoDiscover.xml
Failed testing this potential AutoDiscover URL
Test Steps
Attempting to resolve the host name autodiscover.domain.net in DNS.
Host successfully resolved
Additional Details
IP(s) returned: 195.XX.XXX.XX

Testing TCP Port 443 on host autodiscover.domain.net to ensure it is listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
Tell me more about this issue and how to resolve it
Additional Details
A network error occurred while communicating with remote host
Exception Details:
Message: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 195.XX.XXX.XX:443
Type: System.Net.Sockets.SocketException
Stack Trace:
at System.Net.Sockets.TcpClient.Connect(String hostname, Int32 port)
at Microsoft.Exchange.Tools.ExRca.Tests.TcpPortTest.PerformTestReally()




Attempting to contact the AutoDiscover service using the HTTP redirect method.
Failed to contact AutoDiscover using the HTTP Redirect method
Test Steps
Attempting to resolve the host name autodiscover.domain.net in DNS.
Host successfully resolved
Additional Details
IP(s) returned: 195.XX.XXX.XX

Testing TCP Port 80 on host autodiscover.domain.net to ensure it is listening and open.
The port was opened successfully.
Checking Host autodiscover.domain.net for an HTTP redirect to AutoDiscover
Failed to get an HTTP redirect response for AutoDiscover
Additional Details
A Web Exception occurred because an HTTP 404 - NotFound response was received from Unknown



Attempting to contact the AutoDiscover service using the DNS SRV redirect method.
Failed to contact AutoDiscover using the DNS SRV redirect method.
Test Steps
Attempting to locate SRV record _autodiscover._tcp.domain.net in DNS.
Failed to find AutoDiscover SRV record in DNS.
Tell me more about this issue and how to resolve it

The port 443 is definately open when checked via a web port checker (on server and another workstation) so not sure whats up there?

EDIT - going to get the GD cert this afternoon once the company credit card returns.

 

[Mark M]

Ok going to get the GD cert, is all I need a single domain standard SSL for $29.99?

There is an option for single domain with unlimited subdomains for $199.99!

I only need the one subdomain mail.domain.com/remote

Thanks

 

[Mark M]

Ok, got the BG cert and it worked great. No more certificate errors when you try and log on remotely.

However the Iphone still wont connect! Exchange account verification failed!

Basically what Im doing, incase you can spot anything obvious, is as follows.

Settings>Mail>Add Accont>Microsoft Exchange

Email - [email protected]
Domain - domainname.local << not sure about this?
Username - username (as used to log into windows)
Password - windows password

Phone has a think about it for a little while and then a server box pops up to which I enter servername.domainname.local and then it tries to verify but fails.

Anyone spot anything Ive done wrong?

Thanks.

 

[Mark M]

Cracking! Worked a treat!

Thanks to everyone for the help.