SBS 2003 Mobile Device Connection Issue

I have decided to write this article after spending weeks troubleshooting Exchange 2003 on Small Business Servers with various active sync issues.There are many issues and many solutions, I will try to describe the majority of problems which I have come across and troubleshooting steps. 1: Check your Exchange services are started ( default services settings)

2: Service pack 2 for Exchange 2003 Not a part of standard update to download follow this link: http://goo.gl/of9DE. To check if you have service pack installed, go to Exchange System Manager, right-click your server and go to properties. This is required by iOS 3: Check that your firewall allows traffic on port 443 4: Check the Exchange network connection is at the top of the list in advance network settings 5: Check directory security in IIS Exchange Virtual Directory

• Authentication = Integrated & Basic
• Default Domain = NetBIOS domain name – e.g., yourcompany*
• Realm = yourcompany.com
• IP Address Restrictions = Granted Access
• Secure Communications = Require SSL IS ticked (very important)

Microsoft-Server-Activesync Virtual Directory

• Authentication = Basic
• Default Domain = NETBIOS domain name – e.g., yourcompany*
• Realm = NETBIOS name
• IP Address Restrictions = Granted Access
• Secure Communications = Require SSL and Require 128-Bit Encryption NOT ticked

Exchange-oma Virtual Directory

• Authentication = Integrated & Basic
• Default Domain = NETBIOS domain name – e.g., yourcompany*
• Realm = NETBIOS name
• IP Address Restrictions = Restricted to IP Address of Server
• Secure Communications = Require SSL and Require 128-Bit Encryption NOT ticked OMA Virtual Directory
• Authentication = Basic
• Default Domain = NETBIOS domain name – e.g., yourcompany*
• Realm = NETBIOS name
• IP Address Restrictions = Granted Access
• Secure Communications = Require SSL and Require 128-Bit Encryption NOT ticked

Public Virtual Directory

• Authentication = Integrated & Basic
• Default Domain = NetBIOS domain name – e.g., yourcompany* (no more than 15 characters)
• Realm = yourcompany.com
• IP Address Restrictions = Granted Access
• Secure Communications = Require SSL IS ticked (very important)

6: ASP.Net version should be set to 1.1 for all the above directories 7: HTTP keep-alives needs to be enabled Under Default Website Properties on the Web Site tab check if the http keep-alives is enabled 8: Advanced Website Identification Make sure this is set to All Unassigned with port 80 on the Web Site tab 9: Uninstall IPV6 Make sure IPV6 is not installed, if installed uninstall 10: SSL certificate Make sure the name on the certificate matches fully qaulified domain name for the ActiveSync, check on the Directory Security tab, View Certificate 11: import ssl certificate For the iPhone and windows mobile you will have to import the certificate to the phone, easiest option is to publish the cert on the web, then navigate to it with your mobile browser and install the certificate Godaddy Certificate Instructions To Install Your SSL in Microsoft IIS 6

1. From the Start menu, click Run....
2. Type mmc and click OK. The Microsoft Management Console (Console) opens.
3. From the File menu, click Add/Remove Snap In.
4. Select Certificates, and then click Add.
5. Select Computer Account, and then click Next.
6. Select Local Computer, then click Finish.
7. Click OK to close Add or Remove Snap-ins.
8. In the Console window, expand the Certificates folder.
9. Right-click Intermediate Certification Authorities, mouse-over All Tasks, then click Import.
10. In the Certificate Import Wizard, click Next.
11. Click Browse to find the certificate file.
12. In the bottom right corner, change the file extension filter to *.p7b.
13. Select the appropriate certificate file and click Open.
14. Click Next.
15. Select Place all certificates in the following store.
16. Click Browse, select Intermediate Certification Authorities, and then click Next.
17. Click Finish.
18. Close the Console window.
19. From the Start menu, go to Administrative Tools and click Internet Information Service console.
20. Right-click the website or host name for your certificate.
21. Click Properties.
22. Click the Directory Security tab.
23. Click Server Certificate..
24. The Welcome to the Web Server Certificate Wizard window opens. Click Next.
25. Select Process the pending request and install the certificate, and then clickNext.
26. Click Browse. Select all files, and select your certificate file.
27. Click Next.
28. Verify the Certificate Summary, and then click Next.
29. Click Finish.

This is another situation where a migration to our Cloud Email service would remove the pain of managing an aging SBS 2003 or 2008 system. Have a look around our website to see how our services can make your life easier. Usefull tools http://goo.gl/BA7ZJ http://goo.gl/Xsx3t Resources used http://goo.gl/rpqBh http://goo.gl/p2uwN http://goo.gl/Hm81o