We are trying to setup iPhones to use Activesync on our Exchange 2003 SP2 server. We only have one Exchange server in our domain. I read that Forms based authentication was a problem when you have one server in the domain so I used Method 2 from this KB: http://support.microsoft.com/kb/817379. OWA and OMA both work, but the iPhone states Unable to verify account information when we try to connect from an iPhone. Any help?

Are you putting in the correct username and password? Try running this. https://www.testexchangeconnectivity.com/Default.aspxMark Morowczynski|MCT| MCSE 2003:Messaging, Security|MCITP:EMA 2K7,EDA Win 7,ES,SA,EA|MCTS:Windows Mobile Admin|Security+|http://almostdailytech.com

Problem seemed to have been with the SSL. Is it okay to turn Forms based authentication back on or will it break Activesync again?

Hi Hmaa, Since I’m the moderator, I can see your deleted post. I would like to confirm if the issue is answered. If not, could you please paste the result at testexchangeconnectivity website? Thanks, Elvis

Hi Hmaa, It’s OK to turn Forms based authentication back. Please refer to the steps in the KB817379. Step 24: If you want to reuse Forms-based Authentication on the Exchange server, follow these steps to re-enable Forms-based Authentication on the /Exchange virtual directory in Exchange System Manager. Thanks, Elvis

Hi Hmaa, How things are going? Any update on the issue? Thanks, Elvis

We were able to get Activesync working. Now we're going to attempt to turn Forms-based authentication back on with SSL to see if Activesync still works.

Looks like it's working with Forms-based authentication with SSL not required. If we require SSL for the exchange virtual directory, will it affect the Activesync connection?

Hi Hmaa, You could require SSL in the original Exchange virtual directory. Please don’t enable SSL for the new Exchange virtual directory you just created. Thanks, Elvis

Hi All, I am experiencing the same problem. All of our smartphones including 3G iPhones are configured to use IMAP - which works for email only. I have a need to get Active-Sync working. The error I'm receiving is: "unable to verify account information". OWA and OMA work although our SSL cert has expired. I verified the ActiveSync VDir by looking in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MasSync\Parameters ExchangeVDir I then checked the security Permissions and found SSL enabled on the ActiveSync virtual directory - "Exchange ActiveSync". Last week I disabled it and restarted IIS. This did not resolve the issue. This week, I created a new Virtual Directory following the steps in the MS article exactly http://support.microsoft.com/kb/817379. New virtual directory called "exchange-oma" as in the article including reg change. I have turned SSL back on for Outlook Web Access. However, when I use the MS ActiveSync Tester https://www.testexchangeconnectivity.com/ It still fails. Complaining about the expired SSL cert. BTW - We do not utilize a "front-end" server.

On Mon, 2 Aug 2010 22:06:31 +0000, Chgo Admin wrote: > > >Hi All, > >I am experiencing the same problem. All of our smartphones including 3G iPhones are configured to use IMAP - which works for email only. I have a need to get Active-Sync working. The error I'm receiving is: "unable to verify account information". > >OWA and OMA work although our SSL cert has expired. I verified the ActiveSync VDir by looking in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MasSync\Parameters ExchangeVDir > >I then checked the security Permissions and found SSL enabled on the ActiveSync virtual directory - "Exchange ActiveSync". Last week I disabled it and restarted IIS. This did not resolve the issue. This week, I created a new Virtual Directory following the steps in the MS article exactly http://support.microsoft.com/kb/817379. New virtual directory called "exchange-oma" as in the article including reg change. > >I have turned SSL back on for Outlook Web Access. However, when I use the MS ActiveSync Tester https://www.testexchangeconnectivity.com/ It still fails. Complaining about the expired SSL cert. Get a new certificate. It will fix your problem. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Not sure why a new cert will fix it since the virtual directory is set to disable SSL. However, I can see where ActiveSync might behave in this manner depending on the logic of the code. As it turns out. the procedures in the MS article http://support.microsoft.com/kb/817379 worked! While it doesn't pass the testexchangeconnectivity test, The iPhone I configured previously started receiving Exchange mail. I have since set-up two more iPhones and they are working as well. FYI for everyone out there! -Sam Rodriguez MCP, CCA