Microsoft Active Sync

[Galvanon]

Hello All,

I am using Exchange 2003 Single Server with Windows 2003 AD. I installed a
SSL certificate so people would have to use HTTPS to check email via Outlook
Web Access. I installed that cert months ago

Anyway, I wanted to get some of our sales guys' Windows Mobile 2003 phones
to work with our Exchange Server 2003 via Active Sync. I kept getting
these "User doesn't ahve permission to access Exchange, blah blah." I
googled the message and I found out via artice "KB 817379" that making
mandatory SSL will break OMA and Active Sync. So, following KB817379, I
created a new Virtual Directory and now my OMA works again! However, now
when Active Sync trys to connect over the air, I get an HTTP_31 error which
means "If you see an error INTERNET_31 check to make sure that you installed
a digital certificate on the MIS Server"

What does it mean by a digital certificate? Are they talking about SSL?
how am I to fix this problem? I have aSSL cert already. I just want our
sales people to Active Sync with Exchange 2003 over the air and get push
email. Is this really that hard to set up??? :-(

Thanks all!

Blake

[Mark Arnold [MVP]]

Post by Galvanon
Hello All,
I am using Exchange 2003 Single Server with Windows 2003 AD. I installed a
SSL certificate so people would have to use HTTPS to check email via Outlook
Web Access. I installed that cert months ago
Anyway, I wanted to get some of our sales guys' Windows Mobile 2003 phones
to work with our Exchange Server 2003 via Active Sync. I kept getting
these "User doesn't ahve permission to access Exchange, blah blah." I
googled the message and I found out via artice "KB 817379" that making
mandatory SSL will break OMA and Active Sync. So, following KB817379, I
created a new Virtual Directory and now my OMA works again! However, now
when Active Sync trys to connect over the air, I get an HTTP_31 error which
means "If you see an error INTERNET_31 check to make sure that you installed
a digital certificate on the MIS Server"
What does it mean by a digital certificate? Are they talking about SSL?
how am I to fix this problem? I have aSSL cert already. I just want our
sales people to Active Sync with Exchange 2003 over the air and get push
email. Is this really that hard to set up??? :-(
Thanks all!
Blake

Where did this cert come from?

[Ben Winzenz [Exchange MVP]]

Also, remember that Windows Mobile 2003 does NOT support push e-mail.

In order to support push activesync, you need:
Exchange 2003 SP2
Windows Mobile 5
MSFP (not out yet)
--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)

Post by Mark Arnold [MVP]

Post by Galvanon
Hello All,
I am using Exchange 2003 Single Server with Windows 2003 AD. I installed a
SSL certificate so people would have to use HTTPS to check email via Outlook
Web Access. I installed that cert months ago
Anyway, I wanted to get some of our sales guys' Windows Mobile 2003 phones
to work with our Exchange Server 2003 via Active Sync. I kept getting
these "User doesn't ahve permission to access Exchange, blah blah." I
googled the message and I found out via artice "KB 817379" that making
mandatory SSL will break OMA and Active Sync. So, following KB817379, I
created a new Virtual Directory and now my OMA works again! However, now
when Active Sync trys to connect over the air, I get an HTTP_31 error which
means "If you see an error INTERNET_31 check to make sure that you installed
a digital certificate on the MIS Server"
What does it mean by a digital certificate? Are they talking about SSL?
how am I to fix this problem? I have aSSL cert already. I just want our
sales people to Active Sync with Exchange 2003 over the air and get push
email. Is this really that hard to set up??? :-(
Thanks all!
Blake

Where did this cert come from?

[Galvanon]

Well, maybe not "Push" per-se, but from what I understand about ActiveSync,
every time a new email comes in, Exchange sends a specially crafted message
though the cell phone provers SMTP gateway, and the phone then does a
Send/Receive to get new email. Do I have it wrong?

And more importantly, how do I get rid of the "HTTP_31 ERROR" ?

Post by Ben Winzenz [Exchange MVP]
Also, remember that Windows Mobile 2003 does NOT support push e-mail.
Exchange 2003 SP2
Windows Mobile 5
MSFP (not out yet)
--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)

Post by Mark Arnold [MVP]

Post by Galvanon
Hello All,
I am using Exchange 2003 Single Server with Windows 2003 AD. I installed a
SSL certificate so people would have to use HTTPS to check email via Outlook
Web Access. I installed that cert months ago
Anyway, I wanted to get some of our sales guys' Windows Mobile 2003 phones
to work with our Exchange Server 2003 via Active Sync. I kept getting
these "User doesn't ahve permission to access Exchange, blah blah." I
googled the message and I found out via artice "KB 817379" that making
mandatory SSL will break OMA and Active Sync. So, following KB817379, I
created a new Virtual Directory and now my OMA works again! However, now
when Active Sync trys to connect over the air, I get an HTTP_31 error which
means "If you see an error INTERNET_31 check to make sure that you installed
a digital certificate on the MIS Server"
What does it mean by a digital certificate? Are they talking about SSL?
how am I to fix this problem? I have aSSL cert already. I just want our
sales people to Active Sync with Exchange 2003 over the air and get push
email. Is this really that hard to set up??? :-(
Thanks all!
Blake

Where did this cert come from?

[Ben Winzenz [Exchange MVP]]

Yeah - it will send a message to the provider, where it gets converted to
SMS and tells the phone to do a Sync.

Be careful though. If the phones don't have unlimited incoming SMS
messages, the charges can pile up!!!

I'll try to do some more checking (I'm sure Mark is too) on the error.

As far as ease of setup, RIM is still better. Once MSFP comes out though,
functionality will be much better and should be easier.
--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)

Post by Galvanon
Well, maybe not "Push" per-se, but from what I understand about
ActiveSync, every time a new email comes in, Exchange sends a specially
crafted message though the cell phone provers SMTP gateway, and the phone
then does a Send/Receive to get new email. Do I have it wrong?
And more importantly, how do I get rid of the "HTTP_31 ERROR" ?

Post by Ben Winzenz [Exchange MVP]
Also, remember that Windows Mobile 2003 does NOT support push e-mail.
Exchange 2003 SP2
Windows Mobile 5
MSFP (not out yet)
--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)

Post by Mark Arnold [MVP]

Post by Galvanon
Hello All,
I am using Exchange 2003 Single Server with Windows 2003 AD. I installed a
SSL certificate so people would have to use HTTPS to check email via Outlook
Web Access. I installed that cert months ago
Anyway, I wanted to get some of our sales guys' Windows Mobile 2003 phones
to work with our Exchange Server 2003 via Active Sync. I kept getting
these "User doesn't ahve permission to access Exchange, blah blah." I
googled the message and I found out via artice "KB 817379" that making
mandatory SSL will break OMA and Active Sync. So, following KB817379, I
created a new Virtual Directory and now my OMA works again! However, now
when Active Sync trys to connect over the air, I get an HTTP_31 error which
means "If you see an error INTERNET_31 check to make sure that you installed
a digital certificate on the MIS Server"
What does it mean by a digital certificate? Are they talking about SSL?
how am I to fix this problem? I have aSSL cert already. I just want our
sales people to Active Sync with Exchange 2003 over the air and get push
email. Is this really that hard to set up??? :-(
Thanks all!
Blake

Where did this cert come from?

[Galvanon]

Did you find anything else out on this error?

ActiveSync still isn't working...

Post by Ben Winzenz [Exchange MVP]
Yeah - it will send a message to the provider, where it gets converted to
SMS and tells the phone to do a Sync.
Be careful though. If the phones don't have unlimited incoming SMS
messages, the charges can pile up!!!
I'll try to do some more checking (I'm sure Mark is too) on the error.
As far as ease of setup, RIM is still better. Once MSFP comes out though,
functionality will be much better and should be easier.
--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)

Post by Galvanon
Well, maybe not "Push" per-se, but from what I understand about
ActiveSync, every time a new email comes in, Exchange sends a specially
crafted message though the cell phone provers SMTP gateway, and the phone
then does a Send/Receive to get new email. Do I have it wrong?
And more importantly, how do I get rid of the "HTTP_31 ERROR" ?

Post by Ben Winzenz [Exchange MVP]
Also, remember that Windows Mobile 2003 does NOT support push e-mail.
Exchange 2003 SP2
Windows Mobile 5
MSFP (not out yet)
--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)

Post by Mark Arnold [MVP]

Post by Galvanon
Hello All,
I am using Exchange 2003 Single Server with Windows 2003 AD. I installed a
SSL certificate so people would have to use HTTPS to check email via Outlook
Web Access. I installed that cert months ago
Anyway, I wanted to get some of our sales guys' Windows Mobile 2003 phones
to work with our Exchange Server 2003 via Active Sync. I kept getting
these "User doesn't ahve permission to access Exchange, blah blah." I
googled the message and I found out via artice "KB 817379" that making
mandatory SSL will break OMA and Active Sync. So, following KB817379, I
created a new Virtual Directory and now my OMA works again! However, now
when Active Sync trys to connect over the air, I get an HTTP_31 error which
means "If you see an error INTERNET_31 check to make sure that you installed
a digital certificate on the MIS Server"
What does it mean by a digital certificate? Are they talking about SSL?
how am I to fix this problem? I have aSSL cert already. I just want our
sales people to Active Sync with Exchange 2003 over the air and get push
email. Is this really that hard to set up??? :-(
Thanks all!
Blake

Where did this cert come from?

[Ben Winzenz [Exchange MVP]]

I haven't found anything new about the error except that it references
problems with the certificate.

What kind of certificate is this? Is it perhaps a wildcard cert? i.e.e
*.domain.com? Windows Mobile devices have problems with those and you have
to edit the registry to make them work. Is it a self-created cert, or one
from an external CA (like Verisign or Thawte)? IF it isn't a cert from a
trusted root authority, you will have to install the cert on your device.

Is Integrated auth enable on the /exchange vdir and the new vdir that isn't
using Forms-based auth?
--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)

Post by Galvanon
Did you find anything else out on this error?
ActiveSync still isn't working...

Post by Ben Winzenz [Exchange MVP]
Yeah - it will send a message to the provider, where it gets converted to
SMS and tells the phone to do a Sync.
Be careful though. If the phones don't have unlimited incoming SMS
messages, the charges can pile up!!!
I'll try to do some more checking (I'm sure Mark is too) on the error.
As far as ease of setup, RIM is still better. Once MSFP comes out
though, functionality will be much better and should be easier.
--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)

Post by Galvanon
Well, maybe not "Push" per-se, but from what I understand about
ActiveSync, every time a new email comes in, Exchange sends a specially
crafted message though the cell phone provers SMTP gateway, and the
phone then does a Send/Receive to get new email. Do I have it wrong?
And more importantly, how do I get rid of the "HTTP_31 ERROR" ?

Post by Ben Winzenz [Exchange MVP]
Also, remember that Windows Mobile 2003 does NOT support push e-mail.
Exchange 2003 SP2
Windows Mobile 5
MSFP (not out yet)
--
Ben Winzenz
Exchange MVP
MessageOne
Read my blog!
http://winzenz.blogspot.com
http://feeds.feedburner.com/winzenz (RSS Feed)

Post by Mark Arnold [MVP]

Post by Galvanon
Hello All,
I am using Exchange 2003 Single Server with Windows 2003 AD. I installed a
SSL certificate so people would have to use HTTPS to check email via Outlook
Web Access. I installed that cert months ago
Anyway, I wanted to get some of our sales guys' Windows Mobile 2003 phones
to work with our Exchange Server 2003 via Active Sync. I kept getting
these "User doesn't ahve permission to access Exchange, blah blah." I
googled the message and I found out via artice "KB 817379" that making
mandatory SSL will break OMA and Active Sync. So, following KB817379, I
created a new Virtual Directory and now my OMA works again! However, now
when Active Sync trys to connect over the air, I get an HTTP_31 error which
means "If you see an error INTERNET_31 check to make sure that you installed
a digital certificate on the MIS Server"
What does it mean by a digital certificate? Are they talking about SSL?
how am I to fix this problem? I have aSSL cert already. I just want our
sales people to Active Sync with Exchange 2003 over the air and get push
email. Is this really that hard to set up??? :-(
Thanks all!
Blake

Where did this cert come from?

[Mark Arnold [MVP]]

Although it's just as easy to just sync every minute or so.
My company pays a flat rate for 3G/GPRS per month, unlimited bandwith
and we ust get on with it.

[Galvanon]

Verisign -- it's valid for 2 years.

Post by Mark Arnold [MVP]

Post by Galvanon
Hello All,
I am using Exchange 2003 Single Server with Windows 2003 AD. I installed a
SSL certificate so people would have to use HTTPS to check email via Outlook
Web Access. I installed that cert months ago
Anyway, I wanted to get some of our sales guys' Windows Mobile 2003 phones
to work with our Exchange Server 2003 via Active Sync. I kept getting
these "User doesn't ahve permission to access Exchange, blah blah." I
googled the message and I found out via artice "KB 817379" that making
mandatory SSL will break OMA and Active Sync. So, following KB817379, I
created a new Virtual Directory and now my OMA works again! However, now
when Active Sync trys to connect over the air, I get an HTTP_31 error which
means "If you see an error INTERNET_31 check to make sure that you installed
a digital certificate on the MIS Server"
What does it mean by a digital certificate? Are they talking about SSL?
how am I to fix this problem? I have aSSL cert already. I just want our
sales people to Active Sync with Exchange 2003 over the air and get push
email. Is this really that hard to set up??? :-(
Thanks all!
Blake

Where did this cert come from?

[skip]

Did you tell the device to not fail if the cert is not on the device?

Post by Galvanon
Verisign -- it's valid for 2 years.

Post by Mark Arnold [MVP]

Post by Galvanon
Hello All,
I am using Exchange 2003 Single Server with Windows 2003 AD. I installed a
SSL certificate so people would have to use HTTPS to check email via Outlook
Web Access. I installed that cert months ago
Anyway, I wanted to get some of our sales guys' Windows Mobile 2003 phones
to work with our Exchange Server 2003 via Active Sync. I kept getting
these "User doesn't ahve permission to access Exchange, blah blah." I
googled the message and I found out via artice "KB 817379" that making
mandatory SSL will break OMA and Active Sync. So, following KB817379, I
created a new Virtual Directory and now my OMA works again! However, now
when Active Sync trys to connect over the air, I get an HTTP_31 error which
means "If you see an error INTERNET_31 check to make sure that you installed
a digital certificate on the MIS Server"
What does it mean by a digital certificate? Are they talking about SSL?
how am I to fix this problem? I have aSSL cert already. I just want our
sales people to Active Sync with Exchange 2003 over the air and get push
email. Is this really that hard to set up??? :-(
Thanks all!
Blake

Where did this cert come from?