Re: What is correct authentication type for OMA?
- From: v-natliu@xxxxxxxxxxxxxxxxxxxx ("Nathan Liu [MSFT]")
- Date: Fri, 22 Jul 2005 09:42:39 GMT
Hi Edward,
Thank you for your kindly reply.
I'm glad to hear that things are working correctly for you now.
Additionally, for your next project working, to configure the SmartPhone to
access Outlook Mobile Access (OMA), please refer to the below information:
We can synchronize Smartphone with Exchange 2003 or access mailbox on the
Exchange server. For SBS 2003, these mobile access features are by default
enabled and you need not to do extra configurations. To do this, check:
1. OMA: Outlook Mobile Access.
On the server's IIS, it has a virtual directory named OMA and we use it to
access mailbox. To access it:
a. Run CEICW from SBS 2003 (To Do List->Connect to the Internet), and then
select OMA to allow access when you are prompted.
b. On the Smartphone, use http://SBS-FQDN/OMA to access the OMA site.
2. ActiveSync:
ActiveSync (installed on the desktop) can be used to synchronize Smartphone
with Exchange server or Outlook.
a. Install ActiveSync on the computer.
http://www.microsoft.com/windowsmobile/resources/downloads/pocketpc/activesy
nc37.mspx
b. Connect Smartphone to the computer and use ActiveSync.
c. You will be prompted to set up partnership with the Smartphone if it is
running properly.
d. You will have the option to select synchronize with Exchange server or
client.
- If you select client, it will synchronize with Outlook.
e. Follow the wizard to complete the request and perform synchronization.
For more information about Exchange 2003 mobile access feature, please
refer to the following WebCast:
819270 Support WebCast: Microsoft Exchange Server 2003: Flexible Mobile
Access
http://support.microsoft.com/?id=819270
To get additional detailed information, you may refer to the following
article:
Mobile Access in Exchange Server 2003 Tour
http://www.microsoft.com/exchange/evaluation/tour/ma_1.mspx
Exchange Server 2003 Client Access Guide
http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/cliaccgde
mspx
Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or
forms-based authentication is required for Exchange Server 2003
http://support.microsoft.com/?id=817379
I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you.
Best regards,
Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>From: "Edward Lee" <elee@xxxxxxxx>
>References: <OUwo#dbfFHA.3304@xxxxxxxxxxxxxxxxxxxx>
<OCQFmqcfFHA.3692@xxxxxxxxxxxxxxxxxxxx>
<LSxJQZhfFHA.944@xxxxxxxxxxxxxxxxxxxxx>
<ubm#VP$hFHA.4000@xxxxxxxxxxxxxxxxxxxx>
>Subject: Re: What is correct authentication type for OMA?
>Date: Thu, 21 Jul 2005 15:52:53 -0500
>Lines: 227
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-RFC2646: Format=Flowed; Response
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <#4zI6ajjFHA.1416@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: h69-128-105-106.69-128.unk.tds.net 69.128.105.106
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:137909
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Nathan Liu posted a response to this query that, for some reason, never
>showed up in my newsreader. For those that might come across this in the
>future, I pasted his response below. FYI, the issue that I was having was
>the Anonymous Authentication was ENABLED on the three virtual directors
>referenced below, when it should have been disabled.
>
>Open IIS Manager
>
>Open properties of virtual directory exchange-oma Select Directory
Security
>tab Select Authentication and access control\Edit Authentication Methods
>
>Enabled Basic authentication
>
>Enabled Integrated Windows authentication
>
>Disabled anonymous access
>
>Open properties of virtual directory OMA Select Directory Security tab
>Select Authentication and access control\Edit Authentication Methods
>
>Uncheck Enable anonymous access
>
>Uncheck Integrated Windows authentication
>
>Check Basic authentication
>
>Open properties of virtual directory Microsoft -Server-ActiveSync
Properties
>Select Directory Security tab Select Authentication and access
control\Edit
>Authentication Methods
>
>Uncheck Enable anonymous access
>
>Uncheck Integrated Windows authentication
>
>Check Basic authentication
>
>Open properties of Default Web Site
>
>Click the Advanced tab and make sure there are no host headers.
>
>Run IISReset to restart the IIS services and check if the issue disappears.
>
>
>
>
>"Edward Lee" <elee@xxxxxxxx> wrote in message
>news:ubm%23VP$hFHA.4000@xxxxxxxxxxxxxxxxxxxxxxx
>> Thanks for your help Nathan. I fixed the authentication settings per
your
>> guidelines below. Still no luck. See additional info inline:
>>
>>
>>> 1. The virtual directory OMA, only enable Basic authentication.
>>
>> Was set to Integrated. I made the change.
>>
>>> 2. The virtual directory exchange-oma, only enable Basic authentication
>>> and
>>> Integrated Windows authentication.
>>
>> Was set to Integrated only. a made the change.
>>
>>> 3. The virtual directory Microsoft -Server-ActiveSync, only enable Basic
>>> authentication.
>>
>> Was set to Basic, but default domain was configured as "\" rather than
>> "ulgm.org." I update this also.
>>
>>> If the issue persists, please help me collect the following information:
>>>
>>> 1. When you use the Motorola MPx220 Smartphone 2003 to access OMA,
what's
>>> the error message is displayed?
>>
>> Is the correct address "http://mydomain/oma" or https://mydomain/oma?
>>
>> Using "http" I get the error message that "the requested page cannot be
>> displayed." At no point am I prompted for username or password.
>>
>> Using "https" I get a security certificate warning, then I get prompted
>> for a username/password, then I get the error message that "A System
error
>> has occurred while processing your request. Please try again. If the
>> progblem persists, contact your administrator."
>>
>>> 2. Please follow the steps below to enable the logging for IIS,
reproduce
>>> the problem, and check the IIS log whether there are any error messages
>>> noted on this issue, then paste the full context in your reply.
>>
>> Here's the log after an attempt to connect:
>>
>> #Software: Microsoft Internet Information Services 6.0
>> #Version: 1.0
>> #Date: 2005-07-13 21:35:12
>> #Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem
>> cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent)
cs(Cookie)
>> cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes
>> cs-bytes time-taken
>> 2005-07-13 21:35:12 W3SVC1 SERVER1 192.168.0.4 SEARCH /public/ - 443 -
>> 192.168.0.5 HTTP/1.1
>> Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) - - server1
207
>> 0 0 494 850 31
>> 2005-07-13 21:35:12 W3SVC1 SERVER1 192.168.0.4 SEARCH /public/ - 443 -
>> 192.168.0.5 HTTP/1.1
>> Mozilla/4.0+(compatible;+Win32;+WinHttp.WinHttpRequest.5) - - server1
207
>> 0 0 494 850 15
>> #Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem
>> cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent)
cs(Cookie)
>> cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes
>> cs-bytes time-taken
>> 2005-07-13 21:37:19 W3SVC1 SERVER1 192.168.0.4 GET /oma/oma.aspx - 443 -
>> 192.168.0.4 HTTP/1.0
>>
MOT-MPx220/1.030+Mozilla/4.0+(compatible;+MSIE+4.01;+Windows+CE;+Smartphone;
+176x220)
>> - - ulgm-portal.org 302 0 0 576 1062 31
>> 2005-07-13 21:37:21 W3SVC1 SERVER1 192.168.0.4 GET /oma/oma.aspx - 443 -
>> 192.168.0.4 HTTP/1.0
>>
MOT-MPx220/1.030+Mozilla/4.0+(compatible;+MSIE+4.01;+Windows+CE;+Smartphone;
+176x220)
>> - - ulgm-portal.org 401 5 0 336 1097 0
>> 2005-07-13 21:37:32 W3SVC1 SERVER1 192.168.0.4 GET /oma/oma.aspx - 443
>> elee 192.168.0.4 HTTP/1.0
>>
MOT-MPx220/1.030+Mozilla/4.0+(compatible;+MSIE+4.01;+Windows+CE;+Smartphone;
+176x220)
>> - - ulgm-portal.org 200 0 0 743 1144 15
>>
>>
>>> a. Open Internet Information Services (IIS) console <Server name>
>>> right click 'Default Web Site' to choose 'Properties'.
>>>
>>> b. Under the 'Web Site' tab, check the option 'Enable Logging'.
>>>
>>> c. With 'W3C Extended Log File Format', click 'Properties'.
>>>
>>> d. Under 'General Properties', make sure 'Use local time for file
>>> naming and rollover' is CHECKED.
>>>
>>> e. Switch to the 'Extended Properties', and then select to enable
>>> All
>>> the logging Options.
>>>
>>> f. Click OK to apply the modification.
>>>
>>> g. By Default, the log files are created in the
>>> '%systemroot%\system32\logfiles\W3SVC1' folder.
>>>
>>> Note that to gather the completed log, you will need to first Stop
>>> 'Default
>>> Web Site', copy out or zip the log, and then restart the 'Default Web
>>> Site'.
>>>
>>> For more information, please refer to the KB article:
>>>
>>> 300390 HOW TO: Enable IIS Logging Site Activity in Windows 2000
>>> http://support.microsoft.com/?id=300390
>>>
>>>
>>> I'm looking forward to your update. If you have any questions or
>>> concerns,
>>> please do not hesitate to let me know. I am always happy to be of
further
>>> assistance.
>>>
>>> Best regards,
>>>
>>> Nathan Liu (MSFT)
>>> Microsoft CSS Online Newsgroup Support
>>> Get Secure! - www.microsoft.com/security
>>> =====================================================
>>> When responding to posts, please "Reply to Group" via your newsreader so
>>> that others may learn and benefit from your issue.
>>> =====================================================
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>>
>>> --------------------
>>>>From: "Kevin Weilbacher [SBS-MVP]" <kweilbacMVP@xxxxxxx>
>>>>References: <OUwo#dbfFHA.3304@xxxxxxxxxxxxxxxxxxxx>
>>>>Subject: Re: What is correct authentication type for OMA?
>>>>Date: Thu, 30 Jun 2005 19:22:54 -0400
>>>>Lines: 27
>>>>X-Priority: 3
>>>>X-MSMail-Priority: Normal
>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>>X-RFC2646: Format=Flowed; Response
>>>>Message-ID: <OCQFmqcfFHA.3692@xxxxxxxxxxxxxxxxxxxx>
>>>>Newsgroups: microsoft.public.windows.server.sbs
>>>>NNTP-Posting-Host: pool-71-100-10-89.tampfl.dsl-w.verizon.net
>>>>71.100.10.89
>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:132240
>>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>>
>>>>take a look at some of the blogs on Sean Daniel's site regarding OMA:
>>>>http://seanda.blogspot.com/2004_12_01_seanda_archive.html
>>>>
>>>>--
>>>>Kevin Weilbacher [SBS-MVP]
>>>>"The days pass by so quickly now, the nights are seldom long"
>>>>
>>>>
>>>>"Edward Lee" <elee@xxxxxxxx> wrote in message
>>>>news:OUwo%23dbfFHA.3304@xxxxxxxxxxxxxxxxxxxxxxx
>>>>> I've been unable to access OMA using my Motorola MPx220 Smartphone
>>>>> 2003.
>>> I
>>>>> was poking around in IIS and noticed that the folder OMA is using
>>> Windows
>>>>> Integrated Authentication. I'm thinking that maybe this should be
>>>>> Basic.
>>>>>
>>>>> I also see a directory called "exchange-oma" which is using basic and
>>> has
>>>>> "\" listed as the default domain.
>>>>>
>>>>> Can anyone confirm what the correct settings should? Are there any
>>>>> other
>>>>> directories that I should be paying attention to?
>>>>>
>>>>> Thanks,
>>>>> Ed Lee
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>
>>
>>
>>
>
>
>
.
- References:
- Re: What is correct authentication type for OMA?
- From: Kevin Weilbacher [SBS-MVP]
- Re: What is correct authentication type for OMA?
- From: Nathan Liu [MSFT]
- Re: What is correct authentication type for OMA?
- From: Edward Lee
- Re: What is correct authentication type for OMA?
- From: Edward Lee
- Re: What is correct authentication type for OMA?
- Prev by Date: RE: Companyweb disappeared
- Next by Date: RE: ISA 2004 will not install on SBS 2003 SP1
- Previous by thread: Re: What is correct authentication type for OMA?
- Next by thread: Re: Recommended Specs for Premium Edition
- Index(es):
Relevant Pages
|