RE: SBS 2003 Service Pack 1 Activesync error

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hello Tom,

Thank you for posting in the SBS newsgroup.

According to your description, I understand that you received HTTP_500
error when you perform Server ActiveSync on the SBS 2003 SP1 Server. If I
have misunderstood the problem, please don't hesitate to let me know.

First, I would like to thank for your pre-troubleshooting process and
information to isolate this issue.

1. Did you install the Exchange Server 2003 SP2? If not, please install it
and then check if the issue can be reproduced.

Exchange Server 2003 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?FamilyId=535BEF85-3096-45F8-
AA43-60F1F58B3C40&displaylang=en

Important: Please first read the following Exchange 2003 SP2 Release Notes
before install it:

Microsoft Exchange Server 2003 Service Pack 2 Release Notes
http://download.microsoft.com/download/f/b/5/fb5c54af-fe5c-48e9-be97-f9e8207
325ab/Ex_2003_SP2_RelNotes.htm

2. Did you install the IIS Lockdown or URLSCAN on the SBS Server? If so,
please kindly check the following KB article, you can temporarily disable
or uninstall it to isolate this issue:

309508 - XCCC: IIS Lockdown and URLscan Configurations in an Exchange
Environment:
http://support.microsoft.com/default.aspx?scid=kb;en-us;309508

3. Please kindly refer to the following KB article to check if it is the
case:

886346 You receive an HTTP_500 error message when you synchronize your
mobile
http://support.microsoft.com/?id=886346

817379 Exchange ActiveSync and Outlook Mobile Access errors occur when SSL
or
http://support.microsoft.com/?id=817379

Systems that have changed the default Access Control List permissions on
the %windir%\registration directory may experience various problems after
you install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC
http://support.microsoft.com/?kbid=909444

4. To avoid any affect from third party software, please perform a clean
boot of your SBS server, and then check if there is any change.

To perform a clean boot, follow the steps below:

A. Click Start, click Run, type "msconfig" (without the quotation marks)
and click OK.
B. Select "Selective Startup" and remove the check box for "Load Startup
Items".
C. On the "Services" tab, click Enable All.
D. Check "Hide all Microsoft Services", click Disable All and clear "Hide
all Microsoft Services".
E. Click the OK button and then Click Yes to restart your computer.
F. Try again.


5. If the issue persists, please kindly help me collect the following
information for further analysis:

1) Steps to enable logging on the device:

A. Click Start, ActiveSync, Tools, Options, Server, Advanced.
B. Minimize the keyboard.
C. Change the logging level to Brief or Verbose.
D. Close the Options dialog.

Setting the logging level to brief logs the headers whereas setting it to
verbose logs sync requests and responses in addition to the headers. The
log is saved in text format in the Windows\ActiveSync folder, for example
windows\ActiveSync\serverlog0.

The log file gets cleared at the beginning of a sync session. It is
important to rename the file before you start another sync. If you have
configured automatic synchronization, it is especially important to rename
this file to prevent it from being overwritten.

Steps to retrieve the log file:

A. Sync till the point of failure.
B. Disconnect the device. This is to prevent the log file from getting
overwritten by the next automatic sync.
C. Click on Start, Programs, File Explorer.
D. In File Explorer, browse to the My Device\Windows\ActiveSync folder
E. Tap and hold on the file "ServerLog0" and rename it to some other name
(for example, "Log0").
F. Connect to the desktop.
G. In the desktop ActiveSync program, choose Explore, browse to the
ActiveSync folder, copy the Log file to a folder on the desktop.
H. Turn the logging back to Brief or None.

=====================
2) In addition, please help gather the IIS logs after doing the following:

A. From a command prompt on the server run iisreset to stop/start IIS and
Exchange services. (wanting to make sure there is an easy way to identify
the information in the IIS log, where it begins and ends)
B. Attempt to sync from the device.
C. After receiving the error run the iisreset again to ensure that IIS log
is written out to disk.
D. Email me a copy of the IIS log for the date in which you tested the
steps above. The IIS log files should be in
\%systemroot%\system32\logfiles\w3svc1 directory. Keep in mind that, by
default, the times are in GMT time.

=====================
3) What version of the ISA Server (ISA 2000 or ISA 2004)?

Collect the detailed ISA logs when the problem is reproduced:
Enable the full Web Proxy/firewall logging option:
a. Open ISA 2004 management console.
b. Expand the server node and highlight 'Monitoring'.
c. In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.
d. In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
e. Switch to the 'Fields' tab, and then click 'Select All'.
f. Click OK, and then click 'Apply' to save changes and update the
configuration.
g. Click 'Configure Firewall Logging'. Do step d~f to enable the full
logging options for firewall logging.

Prepare to take the trace:
a. Temporarily stop the Firewall service to clear the current existing W3C
logs: Monitoring->Services tab, and then right click 'Microsoft Firewall'
to choose 'Stop'.
b. Go to the log saving directory and clean any existing .W3C logs. By
default, the logs will be saved to 'C:\Program Files\Microsoft ISA
Server\ISALogs'. (Some MDF may not be able to deleted, that's normal.)
c. Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.

Reproduce the problem:
a. Go to the internal client computer. Try to access the POP3 server.
b. Go back to the ISA server. Stop the 'Microsoft Firewall' service. Open
Windows Explorer, navigate to the ISA log file folder. Collect the recent
w3c files. Save them to a zip package as 'isalogs.zip'. Start the
'Microsoft Firewall' Service.
c. Send the zip packages to me at v-natliu@xxxxxxxxxxxxx


I appreciate your time and cooperation. Please do not hesitate to let me
know if you have any further concerns, I am looking forward to hearing from
you.

Best regards,

Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
>From: "Tom Scott" <twscottiii@xxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: SBS 2003 Service Pack 1 Activesync error
>Date: 14 Dec 2005 10:48:01 -0800
>Organization: http://groups.google.com
>Lines: 32
>Message-ID: <1134586081.712707.183920@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: 209.60.26.2
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1134586086 600 127.0.0.1 (14 Dec 2005 18:48:06
GMT)
>X-Complaints-To: groups-abuse@xxxxxxxxxx
>NNTP-Posting-Date: Wed, 14 Dec 2005 18:48:06 +0000 (UTC)
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
..NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727),gzip(gfe),gzip(gfe)
>X-HTTP-Via: 1.1 NETGATEBHM01
>Complaints-To: groups-abuse@xxxxxxxxxx
>Injection-Info: z14g2000cwz.googlegroups.com; posting-host=209.60.26.2;
> posting-account=_6VGkg0AAAD9zfm_E8Hwk2Oo-Hi3jKDP
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!z14g2000cwz.googlegroups.com!not-fo
r-mail
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:230159
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>All,
>
>I have two different clients that have Small Business Server 2003
>Service Pack 1 installed and are having the exact same problem
>connecting to ActiveSync with their Pocket PC 2003 phones. I have
>tested accessing https://companyweb.domain.com/oma on both setups and
>am able to log in and view any users mailbox. I have also tested
>accessing https://companyweb.company.com/microsoft-server-activesync
>When doing this I get prompted to log in and then get the expected,
>Error 501/505 - Not implemented or not supported.
>
>I have also tried editting the registry with the SMTPProxy string
>value set to the email domain name.
>
>Currently if you try to perform a server sync from a phone it errors
>our with error HTTP_500. Before erroring out it does make a connection
>to the server and verifies the users credentials. I have verified that
>the connection is allowed through the firewall by watching it in ISA
>monitor. I can also see the transaction in the IIS log files. I know
>that it is authenticating the user because if I put in an incorrect
>password the device pops up the connection settings box and asks for
>the user credentials again. If you correct the credentials it will log
>in and then error out with HTTP_500.
>
>When the phone attempts a sync the details section shows that
>following: connecting >l ooking for changes > HTTP_500 error.
>
>Anyone had the same experience or have any other ideas?
>
>Thanks in advance,
>Tom Scott
>
>

.

Quantcast