[itdiscuss] iPhone and Exchange 2003 Active Sync

Tue Aug 19 11:31:29 EDT 2008

One more thing that keeps biting me on this...

If there is a significant time difference between the device and the
server it will not sync.

Bobby Stewart
Network Analyst
Brentwood Baptist Church
Brentwood, TN
(615) 324-6149 office
(615) 830-0012 cell

-----Original Message-----
From: discuss-bounces at itdiscuss.org
[mailto:discuss-bounces at itdiscuss.org] On Behalf Of Marcia Wright
Sent: Monday, August 18, 2008 11:19 PM
To: IT Discussion Forum
Subject: Re: [itdiscuss] iPhone and Exchange 2003 Active Sync

I had a similar problem syncing with a newer AT&t phone and it turned
out to be the SSL Cert was using Equifax and the newer security didn't
recognize it.  I change my ssl cert and it worked great.  I don't'
remember all of the details but it had to do with the chain not being
with newer security in the phones.

Marcia L. Wright
Network Administrator
-----Original Message-----
From: discuss-bounces at itdiscuss.org
[mailto:discuss-bounces at itdiscuss.org] On Behalf Of Dave Ketcham
Sent: Monday, August 18, 2008 6:18 PM
To: IT Discussion Forum
Subject: Re: [itdiscuss] iPhone and Exchange 2003 Active Sync

OWA/Web access has been working fine for a long time.  Our SonicWall Pro
2040 routes https traffic to a DMZ where our ISA 2004 server acts as the
web proxy for OWA and bridges https to http to "talk" to the EX2003
server.  This all works great for OWA.  We have a public certificate
installed on the ISA server - "webmail.northcoastchurch.com".

However, active sync is still not working from my iTouch (2.0) when on a
wireless connection to the internet.  I have the exchange server name as
"webmail.northcoastchurch.com" which is the same as the owa address
except that we use "webmail.northcoastchurch.com/exchange" but I have
tried that as well and the iTouch can't verify the account during setup.

Any ideas?

Dave Ketcham.

-----Original Message-----
From: discuss-bounces at itdiscuss.org
[mailto:discuss-bounces at itdiscuss.org] On Behalf Of Stone, Dave
Sent: Monday, August 18, 2008 2:00 PM
To: IT Discussion Forum
Subject: Re: [itdiscuss] iPhone and Exchange 2003 Active Sync

Using Exchange 2003:

I tried several variations of the domain and server values until this
combination finally worked:

Server: 66.xx.xx.xx
[our firewall IP that forwards SSL traffic to our Exchange server; I
tried several combinations in this field, including adding /Exchange and
/OWA; in the end, it worked without either of those...just the IP of my
firewall -- btw, no ISA server or other proxy in between]

Username: [domain name]\dave stone

If you can access OWA in a browser using SSL (e.g.,
https://yourmailserverIP/Exchange) then the iPhone should be able to
connect.

Hope this helps.

--Dave Stone
Bethel Church
Richland, WA

-----Original Message-----
From: discuss-bounces at itdiscuss.org
[mailto:discuss-bounces at itdiscuss.org] On Behalf Of Lee, Jason
Sent: Monday, August 18, 2008 12:10 PM
To: IT Discussion Forum
Subject: Re: [itdiscuss] iPhone and Exchange 2003 Active Sync

We have had windows mobile 5 & 6 devices working with no issue for over
6 months.. and used the same settings on the iphone and nothing except
the error: "Exchange address verification failed" and you have the
option to save the settings or edit them.

-jason

-----Original Message-----
From: discuss-bounces at itdiscuss.org
[mailto:discuss-bounces at itdiscuss.org] On Behalf Of Kevin Brunson
Sent: Monday, August 18, 2008 1:36 PM
To: 'IT Discussion Forum'
Subject: Re: [itdiscuss] iPhone and Exchange 2003 Active Sync

Is it getting a 500 error?  Can you sync with windows mobile?

If you can't sync with Windows Mobile, or you haven't tried, and if it
is getting a 500 error, you might want to check out this page.  This is
fixed in 2007, but a big problem in 2003.  Ignore the part about
forms-based auth, it doesn't matter whether it uses forms-based or not.

http://www.petri.co.il/problems_with_forms_based_authentication_and_ssl_
in_activesync.htm

-----Original Message-----
From: discuss-bounces at itdiscuss.org
[mailto:discuss-bounces at itdiscuss.org] On Behalf Of Lee, Jason
Sent: Monday, August 18, 2008 1:18 PM
To: IT Discussion Forum
Subject: Re: [itdiscuss] iPhone and Exchange 2003 Active Sync

We haven't enabled IMAP, we do have a firewall in place and the NATing
of the external DNS points to the exchange server.

When the iphone trys to sync, it just returns a failed connection
error...

-jason

-----Original Message-----
From: discuss-bounces at itdiscuss.org
[mailto:discuss-bounces at itdiscuss.org] On Behalf Of Derek Schwab
Sent: Monday, August 18, 2008 11:38 AM
To: IT Discussion Forum
Subject: Re: [itdiscuss] iPhone and Exchange 2003 Active Sync

You shouldn't need IMAP. Activesync only requires HTTPS. As far as ISA
goes, it's not required, but having a proxy between exchange and the
Internet is a really good idea.

Derek

On Aug 18, 2008, at 12:10 PM, "Ed Buford" <ebuford at gccwired.com> wrote:

> Jason did you enable IMAP?
>
>
> -----Original Message-----
> From: discuss-bounces at itdiscuss.org
> [mailto:discuss-bounces at itdiscuss.org] On Behalf Of dave at bitbud
> Sent: Monday, August 18, 2008 11:45 AM
> To: IT Discussion Forum
> Subject: Re: [itdiscuss] iPhone and Exchange 2003 Active Sync
>
> The IPhone does not require you to have an ISA server to synchronize.
> ISA is not required for at all.  However, having some sort of firewall

> in place is highly recommended.
>
> Dave Waters
> http://bitbud.com
>
> MyPGP:
> http://bitbud.com/component/docman/doc_download/1-davespublickey
>
>
>
> Lee, Jason wrote:
>> Does the iphone require ISA?
>>
>>
>>
>> The iphone enterprise guide reads:
>>
>> Exchange ActiveSync Setup
>>
>> Network configuration
>>
>> * Check to ensure port 443 is open on the firewall. (Note: If your 
>> company allows Outlook Web Access, port 443 is most likely already 
>> open on your firewall.)
>>
>> * On the Front-End Server, verify that a server certificate is 
>> installed and enable SSL for the Exchange ActiveSync virtual 
>> directory
>
>> (require basic SSL authentication).
>>
>> * On the Microsoft Internet Security and Acceleration (ISA) Server, 
>> verify that a server certificate is installed and update the public 
>> DNS to properly resolve incoming connections.
>>
>> * On the ISA Server, create a Web listener as well as an Exchange Web

>> client access publishing rule according to Microsoft documentation.
>> This is a necessary step in enabling Exchange ActiveSync.
>>
>> * For all firewalls and network appliances, set the Idle Session 
>> Timeout to 30 minutes (check your Microsoft Exchange documentation 
>> for
>
>> alternative heartbeat and timeout intervals).
>>
>>
>>
>> -jason
>>
>>
>>
>> From: discuss-bounces at itdiscuss.org
>> [mailto:discuss-bounces at itdiscuss.org] On Behalf Of Dolan, Richard
>> Sent: Friday, August 15, 2008 9:09 PM
>> To: IT Discussion Forum
>> Subject: Re: [itdiscuss] iPhone and Exchange 2003 Active Sync
>>
>>
>>
>> Apple has great directions on their website (on the right side bar of

>> the iPhone page). Note that the iPhone will also work seamlessly with

>> the remote wipe feature, etc. Other than the general buggy-ness of 
>> the
>
>> iPhone 2.0 software, the continued lack of cut-copy-paste, the lack 
>> of
>
>> tasks (zenbe is a decent substitute), and the fact that it won't work

>> at all with our ChMS, it's nice. (The Exchange Mail portion is an 8 
>> out of 10, Calender is a 7 out of 10, and Contacts are a 4 out of 10 
>> because they make the whole address book thing slow & cause random
>> reboots.)
>>
>> Okay, I've gotten off of the original topic, sorry, I'm just hatin'
>> my
>
>> iPhone this week.
>>
>>
>> On 8/15/08 7:16 PM, "Tim Larson" <tlarson at mtw.org> wrote:
>>
>>
>>
>>
>> To get an iPhone working with Exchange:
>>
>> 1. Set up OWA with an SSL certificate.  Don't use a wildcard SSL 
>> certificate - ActiveSync on Windows Mobile devices doesn't handle 
>> wildcard SSL certs properly.  Make sure that OWA is accessible 
>> externally.
>>
>> 2. Go into the settings in Exchange Administrator for the user in 
>> question and make sure their account is allowed to use Mobile Devices

>> (each account can have OWA, Mobile Device use, IMAP, and POP enabled 
>> or disabled).
>>
>> 3. Make sure the iPhone has version 2.0 installed.  The 3G iPhones 
>> come with this out of the box, whereas the older iPhones need to be
> upgraded.
>> This is a free upgrade for anyone with the iPhone, and it's a $20 or 
>> so upgrade for anyone with the iPod touch.
>>
>> 4. Set up the iPhone with Exchange.  It's very straighforward - you 
>> add a new email account to the iPhone, tell it that it's an exchange 
>> server, then give it the server name, username, and password, and
> you're done.
>>
>>   Tim Larson
>>   Mission to the World
>>
>> _______________________________________________
>> it discuss mailing list: discuss at itdiscuss.org Mailing List:
>> http://itdiscuss.org/discuss Web Discussion Board:
>> http://itdiscuss.org/discuss-forum
>> Wiki: http://itdiscuss.org/wiki
>> Internet Relay Chat: irc://irc.freenode.net/citrt
>>
>>
>>
>>
>>
>>
>> Richard Dolan
>> Consultant, Lead Trainer
>> Viant Solutions
>> Web: http://www.viantsolutions.com
>> Blog: http://idolan.com
>> E-mail: richardd at viantsolutions.com
>> Cell: 678.640.0344
>>
>>
>>
>>
>> ---
>> -------------------------------------------------------------------
>> --
>>
>> _______________________________________________
>> it discuss mailing list: discuss at itdiscuss.org Mailing List:
>> http://itdiscuss.org/discuss Web Discussion Board:
>> http://itdiscuss.org/discuss-forum
>> Wiki: http://itdiscuss.org/wiki
>> Internet Relay Chat: irc://irc.freenode.net/citrt
>
>
> _______________________________________________
> it discuss mailing list: discuss at itdiscuss.org Mailing List: 
> http://itdiscuss.org/discuss Web Discussion Board: 
> http://itdiscuss.org/discuss-forum
> Wiki: http://itdiscuss.org/wiki
> Internet Relay Chat: irc://irc.freenode.net/citrt

_______________________________________________
it discuss mailing list: discuss at itdiscuss.org Mailing List:
http://itdiscuss.org/discuss Web Discussion Board:
http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt

_______________________________________________
it discuss mailing list: discuss at itdiscuss.org Mailing List:
http://itdiscuss.org/discuss Web Discussion Board:
http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt

_______________________________________________
it discuss mailing list: discuss at itdiscuss.org Mailing List:
http://itdiscuss.org/discuss Web Discussion Board:
http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt

_______________________________________________
it discuss mailing list: discuss at itdiscuss.org Mailing List:
http://itdiscuss.org/discuss Web Discussion Board:
http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt

_______________________________________________
it discuss mailing list: discuss at itdiscuss.org Mailing List:
http://itdiscuss.org/discuss Web Discussion Board:
http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt

_______________________________________________
it discuss mailing list: discuss at itdiscuss.org Mailing List:
http://itdiscuss.org/discuss Web Discussion Board:
http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt

_______________________________________________
it discuss mailing list: discuss at itdiscuss.org Mailing List:
http://itdiscuss.org/discuss Web Discussion Board:
http://itdiscuss.org/discuss-forum
Wiki: http://itdiscuss.org/wiki
Internet Relay Chat: irc://irc.freenode.net/citrt