Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003

Article translations Article translations
Article ID: 817379 - View products that this article applies to.
Notice
The Exchange Remote Connectivity Analyzer tool helps troubleshoot connectivity issues in a Microsoft Exchange Server deployment. The tool simulates several client logon and mail flow scenarios. When a test fails, many of the errors show troubleshooting tips that can help the IT Administrator resolve the problem. (The screen shot for this step is listed below.)
Collapse this imageExpand this image
Screen shot for Remote Connectivity Analyzer


To use this tool, visit http://go.microsoft.com/fwlink/?LinkId=154308.


For more information about the Exchange Server Remote Connectivity Analyzer (ExRCA) tool, visit the following Microsoft TechNet websites:
Announcing the release of the Exchange Server Remote Connectivity Analyzer

Exchange Remote Connectivity Analyzer Tool

Expand all | Collapse all

Symptoms

When you try to access a Microsoft Exchange Server 2003 computer by using Microsoft Office Outlook Mobile Access or Exchange ActiveSync, you experience connection or synchronization problems. Exchange Server ActiveSync and Exchange Outlook Mobile Access (OMA) use the /Exchange virtual directory to access OWA templates and DAV on the Exchange back-end servers on which the user's mailbox is located. Exchange Server ActiveSync and OMA cannot access this virtual directory if either of the following conditions is true:
  • The Exchange virtual directory on an Exchange back-end server is configured to require SSL.
  • Forms-based authentication is enabled.
Collapse this imageExpand this image
2683283
Note: These issues do not occur if these same conditions are true on the Exchange virtual directory on a front-end server.

When this issue occurs, you may experience one of the following symptoms in either Exchange Server ActiveSync or Outlook Mobile Access.

Symptoms in Outlook Mobile Access


Symptoms in Exchange ActiveSync

Resolution

To resolve this problem, use one of the following methods.

Collapse this imageExpand this image
2683283
Note You do not have to perform either of the methods that are described in the "Resolution" section to configure a front-end server to require SSL and to enable forms-based authentication on the front-end server.

Collapse this imageExpand this image
2683283
Note If you are running Microsoft Small Business Server 2003, the configurations that are described in Method 1 and in Method 2 in the "Resolution" section are automatically configured during setup. If you are receiving the errors that are described in the "Symptoms" section on Small Business Server 2003, run the Configure E-Mail and Internet Connection Wizard. The wizard should help you reconfigure the /Exchange virtual directory and forms-based authentication to work with Outlook Mobile Access and with Exchange ActiveSync.

Method 1


Method 2

More information

To access the contents of a user's mailbox in Exchange Server 2003, the Microsoft-Server-ActiveSync and the Outlook Mobile Access virtual directories make an explicit DAV logon to the Exchange virtual directory. The call is similar to the following:
http://netbios_name_of_mailbox_server/exchange/mailbox_alias
The Microsoft-Server-ActiveSync and Outlook Mobile Access virtual directories cannot access the contents of the user's mailbox if the Exchange virtual directory is configured to require SSL. The Microsoft-Server-ActiveSync and Outlook Mobile Access virtual directories only try to connect with the Exchange virtual directory over TCP port 80 (HTTP), not over TCP Port 443 (HTTPS).

Outlook Mobile Access tries to connect to the Exchange virtual directory by using all the following authentication methods:
  • Kerberos
  • NTLM
  • Basic
When you configure forms-based authentication on the Exchange Server 2003, the authentication method for the Exchange virtual directory is set to Basic authentication, and the default Domain is set to the backslash character. The Microsoft-Server-ActiveSync virtual directory can only connect to the Exchange virtual directory by using Kerberos authentication.

For information about issues related to Outlook Mobile Access (OMA) error messages, click the article numbers in the following list to view the article in the Microsoft Knowledge Base:
842023 You receive an error message when you try to create an email message, try to add a new contact, try to add a new task, try to create a new appointment in Outlook Mobile Access with Exchange Server 2003
898131 When you try to connect to an Outlook Mobile Access Web site on an Exchange 2003 computer, you may receive the "A System error has occurred while processing your request" error message
For information about issues that are related to Exchange ActiveSync (EAS) errors, click the appropriate article number in the following list to view the article in the Microsoft Knowledge Base:
886346 You receive an HTTP 500 error message when you synchronize your mobile device with Microsoft Exchange Server 2003
826974 "Synchronization failed due to an error on the server" error message when you try to synchronize a mobile device with an Exchange 2000 server

More information

Collapse this imageExpand this image
Windows Mobile Forum
Visit our Windows Phone Forums for more helpful hints and ideas.

Properties

Article ID: 817379 - Last Review: September 4, 2013 - Revision: 24.0
Applies to
  • Microsoft Exchange Server 2003 Enterprise Edition
  • Microsoft Exchange Server 2003 Standard Edition
  • Microsoft ActiveSync 4.1
  • Microsoft ActiveSync 4.5
  • Windows Mobile 6.5 Standard
Keywords: 
kbtshoot kbprb KB817379

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com