Activesync OMA with Exchange 2003 and Windows Sharepoint - Networking

Hi all,
Need help on the following issue.
I have install Exchange 2003 on Server 2003 and is working well, OWA & OMA
on my O2 XDA IIi. But when i install the Windows Sharepoint Service on the
same server and configure as per the documentation
(http://support.microsoft.com/kb/823265/en-us).
With the article i'm able to get my OWA up and running but not able for
OMA, maybe i do not really understand the last portion of the article. Can
someone kindly advice me on what i should be doing to get my OMA up and
running.
I believe that it's pointing to my root of the IIS which is the Windows
Sharepoint service.
Error from my Activesync
**************************
Your account does not have permission to sync with your current settings.
Contact your Microsoft Exchange administrator.
An error occurred, and scheduled synchronization had to be disabled. To
start synchronizing on a schedule again, use the Mobile Schedule tab in
ActiveSync Options.
Error code: HTTP_400
**************************
Thanks.
********************************************************************************
If you must use Outlook Mobile Access with Microsoft Windows SharePoint
Services, you must complete an extra step, in addition to not including
the OMA path, to make this virtual directory accessible. Open the OMA
Web.config file located at the following path
\Program Files\Exchsrvr\OMA\browse\Web.config
and add the following directives in the Web.config between
<system.Web></system.Web>. Add these directives immediately after
<system.Web> to keep it as simple as possible:
<!--
Clear out the WSS ASP.Net handler and specify the default ASP.Net
handler for all pages
-->
<httpHandlers>
<clear />
<add verb="*" path="*.aspx" type="System.Web.UI.PageHandlerFactory,
System.Web, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b03f5f7f11d50a3a" />
</httpHandlers>
<!--
Set the trust back to Full. WSS configures a very restrictive
trust policy that does not allow OMA to run correctly.
-->
<trust level="Full" originUrl="" />
<!--
Enable the session module. This can also be enabled on the WSS
Web.config, but is not enabled by default.
If you receive the following message:
Parser Error Message: The module 'Session' is already in the
application and cannot be added again
You can remove the following <httpModules></httpModules> section as
session is already enabled on the virtual server
-->
<httpModules>
<add name="Session"
type="System.Web.SessionState.SessionStateModule"/>
</httpModules>
<pages enableSessionState="true" enableViewState="true"
enableViewStateMac="true" validateRequest="false" />
After you add the directives to the Web.config, save the file.
********************************************************************************

Related

certificate installation

Hi all,
I have just upgraded to ROM 2.17.7.6 FRF on my Qteck 9100, service provider SFR (France).
Big problem : I cannot sync anymore with my Exchange Server. I understood the source of the problem: the Exchange self signed certificate is missing on the device after the Rom update. I tried to install it manually (by copying the .cer file via AS onto the device) but when I double click on the .cer file in the device, I get the message "Access to the certificate is impossible" (translated from French). There seems to be some kind of protection againts installing root certificates.
Any idea to get around this ?
Thanks -- any help really really appreciated. I am quite desperate at this stage...
Did you make sure to export the root certifcate in binary not MIME encoded format?
For me it worked to import a binary root certificate.
Thanks TcT.
Well I am not sure of the content of the .cer file.
What I did was simply copy the original .cer from the Microsoft Server to my client PC and then via Active Sync to the device and then double click on it. Nothing else.
What did you do?
There are several ways to export that Cert so that you can copy it though. DER encoded binary is what you need to use. In my case, I used a copy of my server's root cert on IE on my desktop. I exported it in DER format then copied it onto my 8125. I then tapped it and chose "install certificate".
In fact, I just tested this again on my Qtek 2.17 equipped 8125 and it worked perfectly.
Thank you Sleuth,
sorry to ask dumb questions but how do you use IE to import the cert in the requested format? What I did is I went to the \clientapps directory of the server and simply copied the .cer file. I suppose this is wrong.
You can double click on the .cer file on your PC there should be an "export" or "copy" button somewhere in that dialog there you can export the .cer file in different formats/encodings.
TcT great it worked
10 000 thanks. That was the trick
Exchange Activesync with Certs enabled
Hi,
I also have a Qtec 9100 an am unable to sync with Exchange using Certificates
I can sync if i turn OFF SSL on the server, i can also sync if i add the appropriate reg key into the device to disable Cert checking however i am curious to know if others have been able to sync using a manually created Cert .
i have tried exporting the cert from the server and the Desktop PC in all available formats and i am able to import this into the Trusted Root folder on the Qtec however each time i try to sync i get the error :
0x80072F01
Synchronization failed. The security certificate on the server is invalid. Contact your system administrator or ISP to install a valid certificate on the server and try again.
any assistance is greatly recieved
Jedismurf
Certificate Uility
There is a great certificate import utility available...
http://www.jacco2.dds.nl/networking/crtimprt.html
I have used the PFXimprt but the newer one - P12imprt does WM5 and WM 2003.

SSL Error 0x80072f0d

I installed our company root CA on my windows mobile device. It said it was installed successfully. I set the username and password and domain. I selected SSL encryption. Set the server to the required IP address. I tried to sync my email and I get the following error:
"Result:
The security certificate on the server is not valid. Contact you Exchange Server administrator or ISP to install a valid certificate on the server" This is also referred to as support code "0x80072F0D"
I looked at the installed cert on my device and have the following details:
CERTIFICATE DETAILS (ROOT)
Issued to: **SNIP** (THIS IS AN IP ADDRESS)
Issued by: ** SNIP **
Valid from: 5/26/06 to 5/25/08
Intended Purpose(s): Server Authentication
Do you know what I am doing wrong?
Thank you very much in advance.
Any help
This problem is killing me! Is it possible that Softbank is blocking port 443? I seem to have read that somewhere last year. I have had this phone for almost 7 months and I still haven't got it to do what I purchased it for. aaah the ranting.. that felt good

URL Excepitions

Hi all,
I have several WM5 and WM6 devices wich connect to my companies network using GPRS for Outlook sync and a custom application. I want to use our proxy-server to add internet acces for our users in a controlled way. The OWA server and the custom application server need to be directly, not by the the proxy-server. So I have to add those the URL Exceptionlist ( there are dots in the names).
Manually this is easy to configure but I use scripts to configure the devices (XML-provisioning and some other tools). Can't find out how to add entries to the URL Exceptions list. Found they are stored in \ConnMgr\CMMapP and ~CMMapG. Copied these files from one device to another (by ActiveSync) but that doesn't work. These files have the system attribute set and I guess their permanently in use by ConnectionManager.
Doe anyone have a suggestion how to distribute URL exceptions?
Thank in advance.
//Serge

[21 Feb 2011] [Q] Android Exchange Accnt Setup Error

I've read and searched and Googled but I can't find an answer
I recently flashed my first Android NAND ROM: "CMYLXGOroms.Stock.Desire.HD.v1.1.4.1n.NAND.RMNET.NO-SQUASH-RAFPIGNA.1.7OC_CWM.zip".
Everything went smoothly and it all looks good except I cannot complete the Exchange ActiveSync account.
DETAILS:
1. I'm hosting my own Exchange server -2003
2. My SSL cert is self-generated from my own MS Cert Authority
3. I can view my OWA account via the native web browser w/o issue
4. My settings "appear" to be fine as I can reach the very end of the setup wizard. (If I change any of the ActiveSync account settings to an invalid option - say add an extra character to the server address - I receive an error when I click on "Next")
ISSUE:
1. On the last step of the setup wizard, when I click on "Finish setup" I receive the error:
"Failed to created the account. Please try again later."
QUESTIONS/THOUGHTS:
1. How to you import a SSL Cert in Android?
2. I've read about "Accept All SSL Certificates" dialog box you can check but I don't see one during the setup wizard - only the "This server requires an encrypted SSL connection". Is this a legacy setting or something that is hidden by HTC's SenseHD or? Is there anyway to access this option?
3. I've tried both checking and un-checking the "This server requires an encrypted SSL connection" - both give me the same failed result.
OTHER TROUBLESHOOTING:
1. I know this works as I've been successfully using Activesync with WinMo 6.1 & 6.5 on my wife's TouchPro2 and this works fine w/ the stock WinMo 6.5. So it's not a bad config on the back-end.
2. I tried installing Touchdown to see if that would work and I cannot get that to work either.
I'm getting really frustrated - any help would be GREATLY appreciated!
thnx
UPDATE:
I spent all day:
1. Creating a new DNS A record to point directly to my OWA server
2. Upgrading my SSL cert to an offical third-part cert from startssl.com (great service for free BTW)
3. Figuring out how to export/import/modify that cert to be installed on Android
I now have a nice DNS record that points to my OWA server (vs. the old DynDNS pointer) and I appreciate the SSL cert for free find, but I'm still ready to loose it over the lack of ActiveSync support.
Anybody have any idea if this is potentially a ROM issue and I should try another? Or is this a Froyo issue and I should try Gingerbread?
TIA

[CLOSED] e

Thread closed as OP removed its content.
- Oswald Boelcke
*********************
e
jastahooman said:
In developing...
Click to expand...
Click to collapse
interesting... looking forward to this
Wow! Waiting impatiently. Will that be bare-bones WM 6.5 or with Sense?
Looking forward to it
Nice, can you please send me kitchen, i also have a solution for the expired certificate problem so you can surf the web. You can extract them from Windows 7, 8 , 10 in the right format and then install with the Builtin certificate manager.
If someone can share them from Windows 10 in a supported format, cer does work maybe der, crt sstl but pem cant be read or converted to the other Formats without private Key.
HERE IS THE SHORT TUT AND FULL TUT LINK
Updating List of Trusted Root Certificates in Windows | Windows OS Hub
All Windows versions have a built-in feature for automatically updating root certificates from the Microsoft websites. MSFT, as part of the Microsoft Trusted Root Certificate Program, maintains and publishes a…
woshub.com
AND HOW TO GET ALL FRESH WIN10/WIN11 Certificates
certificates using the Sigcheck tool. This tool allows you to compare the list of certificates installed on the computer with the list of root certificates on the Microsoft website (you can download an offline file with up-to-date certificates authrootstl.cab).
You can manually transfer the root certificate file between Windows computers using the Export/Import options.
You can export any certificate to a .CER file by clicking on it and selecting All Tasks -> Export;
You can import this certificate on another computer using the option All Tasks -> Import.
​Certutil: Download Trusted Root Certificates from Windows Update​Certutil.exe CLI tool can be used to manage certificates (introduced in Windows 10, for Windows 7 is available as a separate update). It can be used to download an up-to-date list of root certificates from Windows Update and save it to an SST file.
To generate an SST file on a computer running Windows 10 or 11 and having direct access to the Internet, open the elevated command prompt and run the command:
certutil.exe -generateSSTFromWU C:\PS\roots.sst
Updated SST file.
CertUtil: -generateSSTFromWU command completed successfully.
Click to expand...
Click to collapse
You can visit archive.org after adding the certs uploaded in this post, from the Fileexplorer.
It ewould be nice if someone could start a certficiates megathreads,Contianing the ones used by Webbrowser other OSes etc to and the standard Windows Moible Root CAs.
Windows Mobile Root Certificates - Connectivity Analyzer
If the Microsoft Remote Connectivity Analyzer is unable to follow the certificate chain to the trusted root, then it displays the following error: "The security certificate on the server is not valid. Support code: 0x80072f0d."
docs.microsoft.com
Namely
Certificate Authority5.05.0 + MSFP6.0Thawte Server CAYesYesYesThawte Premium Server CAYesYesYesGTE CyberTrust RootYesYesYesGTE CyberTrust Global RootYesYesYesSecure Server Certification Authority (RSA)YesYesYesGlobalSign Root CAYesYesYesEntrust.net Secure Server Certification AuthorityYesYesYesEntrust.net Certification Authority (2048)YesYesYesVerisign Class 3 Public Primary Certification AuthorityYesYesYesVerisign Class 2 Public Primary Certification AuthorityYesYesYesEquifax Secure Certificate AuthorityYesYesYesValiCert Class 2 Policy Validation AuthorityNoYesYesAAA Certificate Services (Comodo CA Limited)NoNoYesAddTrust External CA RootNoNoYesBaltimore CyberTrust RootNoNoYesGo Daddy Class 2 Certification AuthorityNoNoYesStarfield Class 2 Certification AuthorityNoNoYes
There is also a new Windows Mobile build reuglary updated
Download Windows Embedded CE 6.0 Cumulative Product Update Rollup Package (through 12/31/2015) from Official Microsoft Download Center
www.microsoft.com
You can find sysbuilders with searching for
Windows Embedded CE 6.0 R3​or under its prerename
Windows Embedded Compact
docs.microsoft.com
There are several variants bu kernel seems to be same.
So maybe this helps.
There is also a new Windows Mobile Build and UPdate from 2016
Download Windows Embedded CE 6.0 Cumulative Product Update Rollup Package (through 12/31/2015) from Official Microsoft Download Center
www.microsoft.com
Windows Embedded Handheld
docs.microsoft.com

Categories

Resources