Re: Mobile Sync Over the Air - Error 3012

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


OK, I finally figured it out myself. All of my permissions were correct,
but there were a couple of additional settings in IIS that I had to
tweak. Here is a COMPLETE list of permissions/settings that worked for
me:

Here are the default settings for IIS on the Three virtual directories
for an SBS Server.

::Open IIS Manager::

::Open properties of virtual directory *exchange-oma*::

Select *Virtual Directory *tab
Check the following: Script source access, Read, Write,
Directory browsing, Log Visits, Index this resource
Application Name should be greyed out and show "Default Application"
Execute Permissions should be set to "None"

Select *Directory Security *tab
Select Authentication and access control -> Edit:
Enabled Basic authentication
Enabled Integrated Windows authentication
Disabled anonymous access
Select Secure communications ->Edit:
Require secure channel (SSL) should be unchecked

::Open properties of virtual directory *OMA*::

Select *Virtual Directory *tab
Check the following: Read, Log Visits, Index this resource
Application Name should be "/LM/W3SVC/1/root/OMA"
Execute Permissions should be set to "Scripts Only"
Application Pool should be set to
"ExchangeMobileBrowseApplicationPool

Select *Directory Security *tab
Select Authentication and access control -> Edit:
Uncheck Enable anonymous access
Uncheck Integrated Windows authentication
Only Check Basic authentication
Secure communications ->Edit:
Require secure channel (SSL) should be unchecked

::Open properties of virtual directory *Microsoft-Server-ActiveSync
*::

Select *Virtual Directory *tab
Check the following: Log Visits, Index this resource
Application Name should be
"/LM/W3SVC/1/root/Microsoft-Server-ActiveSync"
Execute Permissions should be set to "Scripts & Executables"
Application Pool should be set to "ExchangeApplicationPool

Select *Directory Security *tab
Select Authentication and access control -> Edit:
Uncheck Enable anonymous access
Uncheck Integrated Windows authentication
Only Check Basic authentication
Secure communications ->Edit:
Require secure channel (SSL) should be unchecked

::Run IISReset and test.::

After I reset the virtual directories to the above defaults,
syncronization worked properly and so did direct-push to my smartphone.


--
cshields
------------------------------------------------------------------------
cshields's Profile: http://forums.techarena.in/member.php?userid=23119
View this thread: http://forums.techarena.in/showthread.php?t=689221

http://forums.techarena.in

.

Relevant Pages

  • Re: adjusting attributes
    ... The grey read-only checkbox indicates that it is neither checked or ... their own set of permissions for this folder. ... Set, View, Change, or Remove File and Folder Permissions in Windows ... > to 'Uncheck this box, Apply and OK' yet the box remains ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Registry Tweak Not Sticking
    ... permissions for both your registry keys: ... ....and, again, you want the permissions for SYSTEM. ... UNCHECK the boxes in the ALLOW ... everything works okay for a while. ...
    (microsoft.public.windowsxp.general)
  • Re: CA web enrollment premission error - Server 2003
    ... It is not problem in CA permissions. ... Integrated Windows Authentication checkbox is selected. ... > When I try to request a certificate from another computer ... > I checked the security settings under the CA mmc and the ...
    (microsoft.public.windows.server.general)
  • Re: Error while Uploading via FTP
    ... This posting implies no warranty and confers no rights. ... I am sure that my permissions are set up correctly because I can ... Are there any other rules that I have to uncheck read only? ...
    (microsoft.public.isa)
  • Re: 500 errors!!
    ... Permissions would affect me as well since this is a remote server true? ... I'll have them uncheck the friendly messages but just the same, ... > I can think is it could be a firewall issue but I've messed with my ...
    (microsoft.public.inetserver.asp.general)