Sync Windows Mobile 6.1 with Exchange Server

[jthomas8946]

Originally Posted by SeanRinVA

I've followed Ricky Spears' advice, and I still cannot get two Touch Pro's (my users') to sync either via USB or OTA with our Exchange server (2003, sp2, on WS2003R2). My lone WM6.0 user works fine, so I know Exchange Active Sync works.

From my experience, it seems to be a certificate issue. Even if you load the certificate manually, the issue is still there. Do you use a proxy server? Have you tried to access the Internet while hooked via USB? Was this successful?

[jluser]

Hi Everyone -

Up until a few minutes ago, I had exactly the same problem. I have a theory as to what caused my issue, but hopefully it will help you too.

First things first. I run a Winmo6.1 dev, a Toshiba Portege g900 with a cooked rom with the update (from 6.0). It's on Tmobile, and syncs to my Exchange 2003 SBS server OTA. I have a self-signed cert on the SBS server. Up until a couple of days ago, I was using my company's Exchange server (2k7), when I decided to switch to my own.

Initially, I tried to reconfigure the server source in ActiveSync on the phone, and redirect it. It wouldn't allow me to update the username or the domain. I connected it to ActiveSync on my laptop (4.5 under XPsp3), and deleted all the connection settings, and built them up again.

It was working for email and contacts, but not for tasks or calendar appointments. In fact, the calendar was behaving very strangely. To help me figure out exactly what the eff was happening, these are the symptoms I had:
- Appt made on phone appears on phone and desktop (DT) and OWA.
- Appt deleted on phone does not delete on server/OWA or DT, deletes on phone.
- Appt made on desktop appears on phone and DT and OWA.
- Existing appointment (from before phone was pointed to Exch svr) on DT will NOT appear, even if details change.
- Appt made on DT and MOVED by phone will move on both sides.
- Appt made on phone and moved by phone will move on both sides.
- Appt made on DT but deleted on phone will not disappear from DT. WILL disappear from phone. Remains on Exchange (OWA)

Fubar, imho. My initial thought was that it was actually an issue server-side, on my server, since my previous server had been working fine (although it was Exch2k7, and I'm on Exch2k3). I didn't think it was a self-signed cert problem, since I've always resolved that by just copying the .cer cert file to the device and running it from the device File Explorer. That copies it into the trusted store, and you're good to go. I walked through the steps here (http://blogs.technet.com/mjmurphy/ar...07/418902.aspx) which I have done for some clients to solve problems with their WinMo 5x and 6x devices and OMA. It's worked every time. I have a feeling this step was actually superfluous, since it made no difference to my problem, and on an SBS box the equivalent had already been done a long time back during setup. I'm just listing it here in the interests of disclosure of everything I did with this issue...

So realizing that although I had deleted and recreated the server source, and the phone /said/ it wiped everything out (including deleting my exchange contacts, my email, and calendar appointments, when I changed servers), my hunch was there was still an issue from that. After this, and with no difference in the symptoms, I ran a hard reset on my phone. I configured my internet connection on the phone (no proxy, just straight GPRS to the tmobile server), copied the cert to my phone (through a guest partnership in ActiveSync, I've not set up a complete one, nor will I after this), and configured the server source on the device.

In such a word: BAM. worked like a charm. It's syncing everything - calendar, email, tasks, contacts. I can do what I need to with an appointment, change contact info around, and the tasks are working. So, the end result (for me) was a hard reset, no AS profile to your computer, make sure the cert is installed on the phone (I'd do this anyway, even if it is 3rd party), and config the source.

Good luck to ya, and thanks for the tips. This was one of two very helpful threads I've found. The other was http://social.microsoft.com/Forums/e...-3d167e3b1bc8/ if it's of any use. I'll keep watching this thread, and if I can be of any more help, feel free to give a shout. Cheers.

[5harkology]

I all of a sudden started having this problem with my touch pro.

I've been using the same ROM for about 45 days and one day last week it just stopped syncing with my companies exchange server. It keeps prompting me for my password and will not sync anything.

Odd thing is, one of my coworkers has a touch pro and his stopped working the exact same time mine did. Two other coworkers devices are working fine; 1 is a mogul/wm6.1 and the other is a 700wx/wm5.

I have tried running the up-to-date owa certificate with no luck. Have also verified all settings and they are correct. Have tried several hard and soft resets and have re-setup activesync at least 20 times in an attempt to get it to connect.

Any ideas?

[jthomas8946]

Originally Posted by 5harkology

I all of a sudden started having this problem with my touch pro.

I've been using the same ROM for about 45 days and one day last week it just stopped syncing with my companies exchange server. It keeps prompting me for my password and will not sync anything.

Odd thing is, one of my coworkers has a touch pro and his stopped working the exact same time mine did. Two other coworkers devices are working fine; 1 is a mogul/wm6.1 and the other is a 700wx/wm5.

I have tried running the up-to-date owa certificate with no luck. Have also verified all settings and they are correct. Have tried several hard and soft resets and have re-setup activesync at least 20 times in an attempt to get it to connect.

Any ideas?

My next step would be to sync it via USB. Keep the OTA settings and sync via USB on your LAN. What I mean by this is to sync via active sync on your computer located on your work LAN (Domain). If that works then you should be able to sync OTA. I am telling you this step with the idea that you are no longer being prompted for your password. If you have been prompted to change your password for your domain, then you must change it in your server connection setting on your phone. Let us know, I am curious about this. I have not seen someone be able to one day sync with WM 6.1 and the next not be able to. WM 6.1 has had issues with syncing OTA, but typically either it syncs or it does'nt.

[5harkology]

Originally Posted by jthomas8946

My next step would be to sync it via USB. Keep the OTA settings and sync via USB on your LAN. What I mean by this is to sync via active sync on your computer located on your work LAN (Domain). If that works then you should be able to sync OTA. I am telling you this step with the idea that you are no longer being prompted for your password. If you have been prompted to change your password for your domain, then you must change it in your server connection setting on your phone. Let us know, I am curious about this. I have not seen someone be able to one day sync with WM 6.1 and the next not be able to. WM 6.1 has had issues with syncing OTA, but typically either it syncs or it does'nt.

It syncs fine with my company issued laptop (contacts, notes, favorites, etc), but will not sync with the exchange via USB or OTA, just keeps prompting me for the passwoard and giving me the 0x85010002 error code. Usually when this has happened in the past I could resolve it by grabbing the new certificate.

Something else that I noted is that Windows live (messenger, hotmail) will not run because it says that my certificate is invalid and that I need to update my date and time settings. I have played with all the date and time sync settings as well as verify that the date and time are correct and still no dice.

Considering the problem with windows live, I'm convinced this is not an issue on exchange server side and is any issue with my phone (very odd that my coworker's touch pro has the same issue - stock rom). I'm wondering if sprint pushed something through OTA that messed up something with date and time reporting.

Any other ideas?

[jthomas8946]

Originally Posted by 5harkology

It syncs fine with my company issued laptop (contacts, notes, favorites, etc), but will not sync with the exchange via USB or OTA, just keeps prompting me for the passwoard and giving me the 0x85010002 error code. Usually when this has happened in the past I could resolve it by grabbing the new certificate.

Something else that I noted is that Windows live (messenger, hotmail) will not run because it says that my certificate is invalid and that I need to update my date and time settings. I have played with all the date and time sync settings as well as verify that the date and time are correct and still no dice.

Considering the problem with windows live, I'm convinced this is not an issue on exchange server side and is any issue with my phone (very odd that my coworker's touch pro has the same issue - stock rom). I'm wondering if sprint pushed something through OTA that messed up something with date and time reporting.

Any other ideas?

Um... I have a Sprint Touch Pro and I am syncing just fine. It seems that this is not just an exchange issue. It is now time to contact Sprint, Haha... I know you don't want to hear that, but I think that there is an issue with your system time and the dates dated on your certificates.

I would also point out to them that you have already done a hard reset and the issue still remains. They might have a cab file to reinstall the root certificates (this will not help with the exchange issue currently, but you will know what to do from this point if things are up and running).

[HackerSG]

I have the same exact issues.

keeps prompting me for a password, and when i cancel, sometimes it works and sometimes it doesn't.

I had our exchange expert give me his intake, and he says it's just the exchange server publishing more than one web listener and it just needs to be merged into one big web listener.

Any further development on a work around for this yet?

It's unlikely our exchange guys will change anything on the server for "non blackberry devices", so i'm hoping maybe there is an Auto-Retry cab that can be installed to automatically try to re-sync after a failure, maybe?

I'm really clueless on the exchange and brand new to the HTC world, so i'm hoping i'm not sounding like an idiot with that comment.

[JBundy]

Originally Posted by nttdemented

Precisely... You just need to install the certificate into the phone before trying to sync. Should work just fine as long as your company has OWA properly setup with a third party SSL certificate (won't work if they don't) and with the proper rules programmed into their corporate firewall to allow Active Sync traffic.

I for one do not have our exchange server published onto the web and I access it through VPN. So that setup in a WM6.1 phone is a little bit more tedious as you have to setup a work VPN AND an exception rule under connection settings/advanced to the internal address that I use to reach my exchange server through my internal LAN. That way whenever Active Sync tries to sync WM will detect that I'm trying to use that address and activates the vpn automatically for the duration of the sync. The only drawback that it takes a while for the first few active sync timeouts to actually come into effect because it starts sending packets to request data while the VPN is connecting. During this time the phone won't reach the exchange server and will wait for these packets to timeout before trying again. When they timeout active sync proceeds normally, this usually takes about 4 minutes. I haven't looked into lowering this timeout but I think that could be a good project for tonight.

Break this down for us dummies.

What is a certificate? Where/How do you get it and install it to your device? Could you provide a sequential, step-by-step of how to add an Exchange email account where error 85010004 is encountered? Don't worry, I searched.

[rainfreak]

Did you search just here or Google too?

http://social.technet.microsoft.com/...-de0448d348fe/

http://support.microsoft.com/kb/924216

http://forums.windowsitpro.com/web/f...ed=ArticleLink

http://forums.pocketpcfaq.com/viewtopic.php?t=20572

[HackerSG]

Originally Posted by rainfreak

Did you search just here or Google too?

http://social.technet.microsoft.com/...-de0448d348fe/

http://support.microsoft.com/kb/924216

http://forums.windowsitpro.com/web/f...ed=ArticleLink

http://forums.pocketpcfaq.com/viewtopic.php?t=20572

Those sites are touching on the problem of being unable to sync at all.

My sync is working fine, but about 10 times a day it prompts me for a user ID and password again. I press cancel, it says "Sync issues". I press Sync again, and it works.

The reason this is a major problem is because at night it will sometimes do the password prompt (When my password is saved), and since i'm not awake to hit cancel, i will not receive emails all night.

We have confirmed that ISA is only publishing using one web listener, so we (me and another guy at work have the same exact issue) are at a stand still regarding this again.

We have searched high and low for a soultion, and this site is the closest thing we have come to a fix.

Hell, if i could even get some kind of cab file to auto put my password in and press okay that would even make me happy. I just can't afford to be missing emails at night (I'm a sys admin and need to be able to get emergency emails that trigger alarms for me to wake up).

Thanks!