Exchange 2003 Activesync - some accounts able to authenticate, some return a 403 error on Exchange and can't connect on mobile devices
The environment has 1 front end OWA/Activesync server and a 1 back end mailbox server where all the mailboxes are located. I have checked the Exchange Features of the accounts that can't connect and they are set identically allowing access at the account level. I have gone as far as copying an account that can access Activesync to a test account name and then trying to connect with the test account with no luck. I know Activesync is up and running as several accounts are able to sync up without a problem on various mobile devices. The SSL certificate is valid and we have no problems with any accounts accessing their email via Outlook Web Access. If I create a new account I get the same results. If anyone has seen this problem before or if anyone has any suggestions as to what steps I should take to troubleshoot, I would highly appreciate it. Thanks, Dan
February 15th, 2010 9:35pm

I have since run the activesync test on the site below: https://www.testexchangeconnectivity.com/ The accounts that are able to access their mailboxes via Activesync on mobile phones pass the Activesync test. The accounts that fail are getting the following error when running the test: Attempting FolderSync command on ActiveSync session FolderSync command test failed Additional Details An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body is: <body><h2>HTTP/1.1 403 Forbidden</h2></body> Thanks in advance for any advice on how to resolve this. I'm off to search the net and see if there are any postings as how to resolve this. If I find anything, I'll post a response so others can benefit. Dan
Free Windows Admin Tool Kit Click here and download it now
February 15th, 2010 10:43pm

Hello, I have the same issue. I run the test connectivity and I have a 403 forbidden. Any solution?thanks,AlbertoAlberto
February 28th, 2010 11:32pm

And here we are, with Exchange 2010 SP1, just patched with rollup 5 - and the same issue! I have 3 ActiveSync users (iPhone, iPad, test user) who can sync (two of whose credentials pass the Remote Connectivity Analyzer test), and a number of users who cannot connect or cannot sync (one of whose credentials throw the 403 - forbidden error on the test). During a day-long troubleshooting process, I have removed one affected user from the Domain Admin group (his iPad succeeded after the patch was applied), cleared the AdminCount setting on all relevant users, and confirmed relevant settings to be identical. Specifically, the Analyzer error is: An HTTP 403 forbidden response was received. The response appears to have come from IIS7. Body of the response: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/> <title>403 - Forbidden: Access is denied.</title> All responses will be much appreciated.
Free Windows Admin Tool Kit Click here and download it now
October 2nd, 2011 1:01am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics