Re: Exchange OMA issue

Hi Adam,

Thank you for updating,

I am sorry for the delay in response due to the weekend, thanks for the
understanding.

I'm sorry to hear that you issue still exists. Can you tell me why to
create a new oma virtual directory? You don't have to do it, the default
exchange-oma directory can work well without cause security issue. Please
try to remove it, revert registry, and reset the default virtual
directories, followed the KB below:

883380 How to reset the default virtual directories that are required to
provide Outlook Web Access, Exchange ActiveSync, and Outlook Mobile Access
services in Exchange Server 2003
http://support.microsoft.com/?id=883380

Then rerun the CEICW and test again.

If problem still exists, verify the following steps:

Step 1
==============
1. Click Start -> Administrative Tools -> Internet Information Services
Manager
2. Locate SBSServer -> Web Sites -> Default Web Site, right click Default
Web Site, click Properties to open the properties window, click Directory
Security tab.
3. Click Edit¡­ in the "IP address and domain name restriction" section
4. Choose the "Granted access" then click OK.
5. Click Edit¡­ in the "Secure communication" section, uncheck Require
secure channel (SSL) then click OK.
6. Redo the steps above on the exchange, exchange-oma and OMA virtual
directories which under the Default Web Site.

Step 2
===============
- For Exchange-oma virtual directory and the virtual directory you created
manually:

1. Open IIS Manager
2. Open properties of virtual directory Exchange-oma and the virtual
directory you created manually
3. Select Directory Security tab
4. Select Edit in Authentication and access control box. Make sure the
authentication setting as below:

Authentication Methods
Enabled Basic authentication
Enabled Integrated Windows authentication
Disabled anonymous access

- For OMA virtual directory, Microsoft-Server-ActiveSync virtual directory:

1. Open IIS Manager
2. Open properties of OMA virtual directory, Microsoft-Server-ActiveSync
virtual directory.
3. Select Directory Security tab
4. Select Edit in Authentication and access control box. Make sure the
authentication setting as below:

Authentication Methods
Uncheck Enable anonymous access
Uncheck Integrated Windows authentication
Check Basic authentication

After that, please restart the IIS Admin Service (services.msc) and then
verify the issue.

Step three
====================
If issue persists, please helpful to gather the following information,
please notice this information is very important and can help us isolate
the issue in a efficient manner.

1. How many users affected? is this the only one or all?

2. Did this issue happen suddenly or after some changing? if so, what
change?

3. Did your OWA work well?

4. How do you add a new exchang-oma virtual directory? Are you add one with
a different name or just delete the default one then add another?

5. Please gather IIS metabase and IIS log:

IIS metabase:

a. Download the IIS Resource Kit tools from the following page:
http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73-
B628-ADE629C89499&displaylang=en
b. Install it, run MBExplorer (Metabase Explorer)
c. Right click the "LM" node and choose "Export to file".
d. Specify a file name, specify the password and finish the export.
e. Send the file and the password to me

IIS log:

a. On Exchange Serves, open IIS MMC, right click Default Web Site and then
click Properties.
b. Click Website tab and then check Enable logging.
c. Stop the Default Website and RENAME the existing IIS log files under
C:\WINDOWS\system32\LogFiles\W3SVC1.
d. Restart the Default Website and reproduce the problem, which will
generate new IIS log file with the exact error.
e. Go to the following folder on Exchange Server:
C:\WINDOWS\system32\LogFiles\W3SVC1.
f. Send me the log files to my working email address v-innjin@xxxxxxxxxxxxxx

6. Please download and run the setup MPS report tool On the SBS 2003 server

a. Visit
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_Exchange.EXE to download the file.
b. Run the MPSRPT_Exchange.EXE on the server box.
c. Wait for 10~15 minutes.
d. Open Windows explorer, navigate to %SYSTEMROOT%\MPSReports\Exchange\cab
e. Send the .cab file directly to me at v-innjin@xxxxxxxxxxxxx

I appreciate your understanding and cooperation. I am happy to be of
assistance to you and look forward to your reply.

Have a nice day!

Best regards,

Inn Jin (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • RE: active sync on SBS 2003 server
    ... Exchange/Exchange-OMA virtual directory. ... I.Please verify Authentication settings by the following steps. ... Open IIS Manager ... Note:If you need to use SSL on the Exchange virtual directory, ...
    (microsoft.public.windows.server.sbs)
  • RE: OMA issue
    ... I had to change two options in the Exchange virtual directory but it made no ... This issue can be caused by an incorrect authentication setting. ... please check the authentication methods setting from IIS: ... Open properties of virtual directory Exchange and Exchange-oma ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS2k3 and activesync over the air
    ... the Exchweb virtual directory. ... ONLY 'Basic authentication' is selected ... please restart your IIS service and test your issue again. ... Regarding ActiveSync issue, support code 0x85010014 means error HTTP 500. ...
    (microsoft.public.windows.server.sbs)
  • RE: Can no longer access ActiveSync
    ... OMA and Exchange/Exchange-OMA virtual directory. ... Please verify Authentication settings by the following steps. ... Open IIS Manager ... issue may be caused by the Exchange attribute of original user account. ...
    (microsoft.public.exchange.admin)
  • Re: SBS 2003 PDA Sync Problem - Error 0x85010014
    ... Export all mails in Mailbox as .PST file. ... Remove the Exchange Attribute for problematic user with corrupt Exchange ... Please verify Authentication settings by the following steps. ... Open IIS Manager ...
    (microsoft.public.backoffice.smallbiz)