Database Users

Universal can't connect to Windows Server 2003 - solved

Hello!
I have a Universal in german from T-Mobile Austria and a BlueAngel also from T-Mobile Austria. As we all know the Universal has the new OS Windows Mobile 5.0, the BlueAngel has Windows Mobile 2003.
So and there is a BIG difference between these two OS (OR A BIG BUG, I don't know).
The problem is: With the file-explorer (or Total Commander 2.0, which i prefer) you can connect with WLAN to a share on a computer. Enter the UNC-path under path in the file-explorer, the device asks for a login and it works. So it is unter Windows Mobile 2003 with the BlueAngel. And it doesn't matter to which computer I will connect: to my server with Windows Server 2003 or to my workstation with Windows XP. I enter my domain account and it works.
On the Universal it doesn't work when I will connect to my server with Windows Server 2003. It's absolutely impossible to connect to a share on my server. BUT I CAN connect to a share an my workstation with Windows XP WITH MY DOMAIN ACCOUNT. So what I see in the moment: The NTLM-authentication works because I can connect to any Windows XP with a domain account, but the connection to a share on a server with Windows Server 2003 fails. And this only with the Universal, because in the same time with my BlueAngel it works.
My question is: Has somebody the same ugly problem or maybe I do somethimg wrong, I don't know.
And that's the reason why I can't change my device in this moment and why I love my BlueAngel.
Best regards, Peter

i to have this issue, i can map to xp shares no probs but win2003server shares just loops on the password screen.
big issue for me this

w2k3 issues
Click to expand...
Click to collapse
I had the same issues on w2k3-server before installing the latest updates.
After new W2K3 installation and newest updates: no problems.
The problem could be active directory.
Have a look to "NetBIOS over IP" at IP-settings. Resco Explorer can't map UNCs, only NetBIOS-names, it's my monitoring.
Greetings, Gerd Dubrand

that dosent fix the problem, just tried it, it worked fine on my BA but not on JJ.

I also cannot connect to my Win2003 server via jasjar, but I can connect to my win2000 advanced server. Win2003 server is sbs2003 with all updates applied. Can connect to both via my pda2k. Interesting?

IS the server a DC? you may need to disable the 'Microsoft network server: Digitally sign communications (always)' setting the default DC GPO - http://support.microsoft.com/kb/823659. This is enabled by default for DC's and acan cuase issues when talking to downlevel clients (I've had this problem with samba clients.
It mayalso be set in the local secuirty policy.
But then again this might not be anything to do with it...
Anything in the logs on the server?

GOOD IDEA, TINTOY!!!
Thank you for your samba server and your idea, tintoy. Your hint works!
For all others aigan the solution:
On a Windows Server 2003 domain controller you have to disable 'Microsoft network server: Digitally sign communications (always)'. I haven't this done by Active Directory, i have this done by 'Security settings for domain controller' -> 'Security Options' in 'Management'.
Note: Please excuse when I don't have used the correct names, because I have only a german version of the Windows Server 2003 and I don't know the exact names of the program groups of the english version. But I hope you know, what I mean.
Thank you aigan tintoy, this problem is solved!
See you all again here,
Peter

I confirm this,
network server: Digitally sign communications (always)
change to disabled in the Default Domain Controller Security Settings.
This has just made my day. odd how wm5 is apparently newer but dosent quite work out the box like wm2003 did

np ;-)

Exchange 2003 not connect with mobile 6.1
Someone can write a detailed description ? I have the same problem.
Thanks

Activesync 4.0 / 4.1 and the Wizard - no go on the sync side

Help!
My spiffy new Wizard is not playing when it comes to the the syncing side of things...
I have Office 2003, and have been using async 4.0 with my WM5 blue angel quite happily. All works.
I installed ActiveSync 4.0 from the CD that came with the wizard, and then plugged in the wizard. "Retrieving settings..." comes up, and then nothing happens. I've left it for half an hour - no luck.
The communication seems fine, as I can explore "my mobile device" and that works well, but sync is no joy at all
I tried syncing over IR, and got told that error 85010014 had occurred. Googling shows I'm not alone.
I upgraded to 4.1. No joy.
I removed outlook and reinstalled. No joy.
I installed Office 2003 SP2. no joy.
Deleted partnerships from both devices. No joy.
Hard reset the wizard. No joy.
Changed my profile to not use cached mode. No joy.
I am a bit frustrated with this - any further suggestions? My only thoughts are that the firewall is blocking activesync's requests to the exchange server when it starts up the comms, but on the other hand the blue angel is happy! Help! please?

Hi Chiark,
I don't have another WM5 device to compare with, but my Wizard won't sync to Outlook on my laptop as long as Sygate Personal Firewall is loaded. If I exit SPF until the first sync happens I can then reload SPF and it keeps sync'ing away without a problem. If I set SPF to 'Allow All' it still won't work. The MS help pages mention what ports to open, but also mention problems with VPN clients that work in the same way, wedging themselves into the protocol stack.
I'd try disabling the firewall to see if it helps... On my work laptop with McAfee desktop firewall I can't adjust anything, but sync'ing over IR works fine. On my own, notes don't appear to sync, giving a similar error to yours, but I did read that another Thunderbird user fixed that by making Outlook the default mail client again.
Hope that helps..
Dox
(ocassionally of the ICE forum too ;-) )

Yeah, I have the same problem. Can't sync with the usb but can sync with IR. I tried closing Sygate FW but that didn't help any. I use Thunderbird as my mail client so always get a message saying that outlook is not my default mail client...blah blah. I don't know if that has anything to do with it, but then why would it work over IR?
I am guessing something is messed up with the usb driver or something.

Thanks for the support
It's all pointing to an error with the outlook side of things, as I still can't sync over IR either, but I can explore the device quite happily.
I've run scanpst on all my pst files, no joy .

Try here, Microsoft have posted some clues
http://www.microsoft.com/windowsmobile/help/activesync/default.mspx

thanks for that - I tried those. The best resource I've found is Chris De Herrera's troubleshooting; http://www.pocketpcfaq.com/faqs/activesync/tshoot-as4x.htm
In desperation, I've done everything again this morning.
I was assuming that setting my firewall to "Allow all traffic" would, bizarrely, allow all traffic. It wasn't.
I couldn't disable the firewall; I had to uninstall it.
It's now working, but hellishly slowly.
Why the Blue Angel will sync and this wont is beyond me!
Cheers,
Nick.

Well, sygate has had to go back on due to corporate policy... No joy. But the blueangel syncs.
ARGGGHH!!!!!!!!!!!!!!

When I installed AS4.x, one of the .dll's was called something like 802AFUSB.dll (from memory, so ICBW), which makes me think MS are running "Ethernet" over USB which suddenly brings activesync under the jurisdiction of our firewalls. I don't know if that's just done in firmware on "upgraded" devices, or maybe there's some hardware changes in native WM5 devices, that kick in the ethernet over USB that you don't get on upgraded or pre WM5 devices?
Do you need AS4 to sync the BA under WM5 Nick?
Dox

Hiya Dox, it's definitely firewall related IMHO, but I'll be stuffed if I can see what's wrong: the firewall isn't blocking any traffic, I've opened every port I can see, and it's still not working correctly.
the blue angel syncs using the same mechanism, over TCP/IP connection via USB, and does so without a problem.
Code:
Creating new partnership for device 0x0 (WM_Wizrard, PocketPC).
11/15/2005 11:28:48.342 p(356) t(2052) TraceToFile -> ERROR in CConfigMgr::GetConfig : hr = 0x80072746 - cfgmgr.cpp(318)
11/15/2005 11:28:48.342 p(356) t(2052) TraceToFile -> ERROR in CDataSourceCol::_QueryDevice : hr = 0x80072746 - DataSource.cpp(5299)
11/15/2005 11:28:48.342 p(356) t(2052) TraceToFile -> ERROR in CDataSourceCol::Load : hr = 0x8000ffff - DataSource.cpp(3503)
11/15/2005 12:51:41.807 p(356) t(384) TraceToFile -> ERROR in CHttpEngine::SetTrustedIp : hr = 0x80072726 - httpeng.cpp(253)
11/15/2005 12:51:44.361 **** ActiveSync exiting
Funny that crapi is causing the problem... Googling that number shows that it could be related to MSN or WM10, neither of which are present on the blue angel. I might install MSN on the host to see if that helps, but I can't see how it would.
I also think it might be to do with outlook running in cached mode as I changed that setting when I removed the firewall. Damn and blast!
Argggh!

Stranger and stranger: if I remove Sygate Security Agent, it works fine... However, corporate IT are rather against me doing this

The MS help docs do mention probs with VPN adapters that slot themselves into the protocol stack to do packet redirection. I only use SPF rather than the security agent but I guess it slots itself into the protocol stack to watch for apps attempting to use the network interfaces above it in the stack. I wonder if it's a software compatibility rahter than security policy problem. I'd guess wedging an additional layer into an already complex stack is far from trivial. Maybe MS just assumed everybody would have a nice clean TCP/IP stack with MS Firewall...
Does SSA not have an "exit" option? We did use ZoneLabs Integrity Agent on the work machines, but engineers could get a special profile pushed to them which llowed them to quit the app when they needed to connect to our kit on customer site which scrapped with IA. I only need to exit SPF to get the session started, I can restart it as soon as the sync gets underway and it's okay...
Roll on 4.2 and a fix to all this shenanigans

Thanks for the thoughts Dox. I agree that it's looking like incompatability rather than config, but I can't understand why the blue angel works: it's truly weird!
The "Exit" on SSA is disabled by our system administrators, meaning to get rid of it, I have to uninstall it . There is a "pass all traffic" option which doesn't appear to work.
I'll now secure my laptop with Windows Firewall; our group policy forbids us from turning it on, but I can sort that out.
Cheers!
Nick.

Advice for Exchange 2003 SP2 & ActiveSync (error 8501000

Having spent the past day or so struggling to get my shiny new HTC Wizard syncing correctly with Exchange 2003 I thought I would post the solution...
This only applies to those of you using ActiveSync to communicate from a WM5 (and possibly earlier?) with an Exchange 2003 server with SP2. SP2 looks handy for mobile users as it introduces HTTP direct push (well, it will shortly..) among st other features - this is the reason that I chose to install it.
Once installed, it allows a range of Mobile Access settings that include direct push (only actually available once MSFP devices - or patches - become available... Q2 seems to be the best estimate) as well as some interesting security features that allow a remote wipe of sensitive data, should a WM5 device be stolen/lost.
One of these security settings is to require a password on the handled device - a great idea... DON'T SET IT!! None of these security settings work with non MSFP devices - they throw a general server access error 85010004. So the server setting to check, on your Exchange 2003 SP2 server is:
(DOMAIN) > Global Settings > Mobile Devices
Click the "Device Security..." button
Make sure that the "Enforce password on device" checkbox is cleared - at lest until you have MSFP devices around
After that you can correct any other 85010004 or 85010014 errors using the advice from the Microsoft KnowledgeBase (have fun!). This SP2 problem isn't listed there yet (I got it, eventually, from a MS partner tech support site).

Hi Guy,
Have you been able to get Push to work? I installed the Exchange service Pack and enabled HTTP push. My WM5 wizard does a manual sync fine via GPRS, but when I check off realtime receipt, it keeps asking me for the phone's SMS number...
Have you encoutered this prob? I wonder if it makes a dif if my Phone OS is French while Exchange server is in English
Thanks

footang
Without the MSFP (which should be available VERY soon?) you have to rely on Exchange Server doing a 'fake push' using SMS... it sends an SMS to your device to tell the device to connect (over GPRS) to pick up new mail. This is NOT a proper push solution...
My understanding is that MSFP updates both the WM5 device AND the Exchange Server, enabling the server to implement true push... I'm seriously considering moving my Exchange to a hosted provider (probably Cobweb) as I have plenty of minor issues running Exchange 2003 on a small SBS server... Cobweb tell me they will have MSFP live this month.
I will let you know how I get on...

Guy,
I installed the latest QTEK Rom and push works great. The only prob is that it doesnt vibrate when the phone is in standby mode to let you know an email arrived.
cheers

O2 XDA Mini S, Active Sync 4.1/4.2 Problem

Hi, I am looking for some help regarding a sync problem I am having with my XDA Mini S. I have recently re-installed my copy of Windows XP Home. Prior to this re-install I was able to sycn with my XDA using activesync 4.1. Since the re-install however when trying to sync I am presented with an error on the desktop machine.
Support Code:86000107
I have trawled the internet to find a solution, but to no avail. I have tried the new 4.2 beta of active sync and tried un-installing the software several times aswell as removing sync profiles form the unit.
Any help would be apreciated. I am using ROM version 2.21.4.1 WWE and Windows Mobile Version 5.0 (Build 14847.2.0.0)
Thanks

See my responses in a similar thread posted by someone else...
http://forum.xda-developers.com/viewtopic.php?p=289256

Thanks for the reply! I had tried searching the forum first, but my choice of keywords obviously let me down.
I have tried both disabling the firewall and ensuring DHCP is enabled. I am using the windows firewall controlled by Microsoft's Windows OncCare Live, and within which all processes associated with active sync have been granted permission to access the network.
The phone appears to be able to send data to the desktop pc, but the desktop fails for some reason. Any further advice?
thanks

Do you hear the usual "bing bong" type noise that Windows makes when a USB device is plugged in?
Does ActiveSync on the desktop even start up?
If so, on your PC goto Start -> Control Panel -> Network Connections. When you plug the PDA in, does a new connection profile eventually show up in the Network Connections window? It will be called something like Local Connection #6 or something similar, I've renamed mine.

Yes everything connects and establishes a connection. I can browse the device and even upload to and from it. Active sync even tries to sync with the device, but then shows the error detailed above. The XDA was able to upload my contacts to outlook for example after the re-install of windows, but nothing is synced from the desktop pc to the xda.

bump

See the Microsoft Knowledge base..........
............there's something I remember when I had this prob.
For me, it was ZoneAlarm firewall [free edition] which doesn't allow individual ports to be configured, just application rules [you can in Pro version] but in my research, I remember seeing something about Activesync not working even though the exception was set in Windows Firewall.
Try with NO firewall at all - probably best to pull your network cable if you're worried whilst you test ActiveSync with no firewall at all.
I'm sorry I can't post the reference but you should be able to find it again.
I now don't use any s/w firewall - I have a switch router with hardware router built in which shows as 'stealthed' to the outside world on all ports @ www.grc.com [ShieldsUp] and all my WM5 stuff works - ActiveSync and WiFi
I didn't get the error you did, mine just connected then hung whilst showing 'Syncronising'............'cept it never did !!! LOL but I could do all the other things as you describe....just no syncing.

Thanks for the reply. I have already tried without a firewall enabled at all but with no luck. I am trying to work out what is different with this installation tot he previous that worked.

I have found that I need to dissable the Sync of my contacts and it works with the Caldener etc. I have no idea why this is, but its the only solution I can find anywhere and its very frustrating. :roll:

That's a weird one, not be able to sync contacts but can do calendar events.
Have you tried a reinstall of outlook?
If so then, and this is just a guess, it could be that there is something wrong with a particular contact entry that's causing things to go wrong. Perhaps some invalid characters in any one of the many available fields (name, num, email address, website, notes etc).

Some solutions that worked for me
I had the problem with contacts not syncing when everything else would. My solution, which worked for me, was to:
1. disable 'contacts' in ActivSync options
2. sync as normal
3. disconnect device, reconnect device, sync again
4. re-enable 'contacts' in ActivSync options
5. contacts should now re-sync
Incidentally I found many problems with the ActiveSync partnership after restoring the device from a backup. The solution is to delete everything in the \Windows\ActiveSync folder on the pocket PC, go into ActiveSync options on the pocket pc and remove the partnership there. Finally delete the partnership on your PC.
I am running V-Com systemsuite on my PC (which I think uses the Sygate firewall) this firewall never interferes with my XDA Exec but oddly enough does so with my XDA mini S. If I disable the firewall - problem still exists. If I shut down the firewall completely (keeping Windows XP firewall running for security) the problem goes away.
Maybe some of this will help
Cameron
Norwich, England

I had moved the Outlook.pst file to a location other than the default. When I moved it back and created a new profile the error had gone. thanks for the help everyone.

Sounds like it was a corrupt pst file causing the problem then. I'm glad you got it all working now

Re: Some solutions that worked for me
apprentice said:
I had the problem with contacts not syncing when everything else would. My solution, which worked for me, was to:
1. disable 'contacts' in ActivSync options
2. sync as normal
3. disconnect device, reconnect device, sync again
4. re-enable 'contacts' in ActivSync options
5. contacts should now re-sync
Incidentally I found many problems with the ActiveSync partnership after restoring the device from a backup. The solution is to delete everything in the \Windows\ActiveSync folder on the pocket PC, go into ActiveSync options on the pocket pc and remove the partnership there. Finally delete the partnership on your PC.
I am running V-Com systemsuite on my PC (which I think uses the Sygate firewall) this firewall never interferes with my XDA Exec but oddly enough does so with my XDA mini S. If I disable the firewall - problem still exists. If I shut down the firewall completely (keeping Windows XP firewall running for security) the problem goes away.
Maybe some of this will help
Cameron
Norwich, England
Click to expand...
Click to collapse
First of all you have to open some ports in the sygate firewall: http://www.microsoft.com/windowsmobile/help/activesync/sygate.mspx
In my experience it's necessary to change the RNDIS driver settings in the mobile phones registry as well!
Use a regedit tool like PHM Registry Editor.
Here are the settings to be added (or to be changed respectively):
Key: HKEY_LOCAL_MACHINE\Drivers\USB\FunctionDrivers\RNDIS
Name of the Value to add: MTU
Type : DWORD
Data: 1514 (Value is Decimal)
Name of Value to add: MaxOutTransfer
Type: DWORD
Data: 1642 (Value is Decimal)
After a reset my Prophet (XDA Neo) synchronized well with active sygate firewall!

Activesync workoround via wlan / wifi sync

I'm rather surprised not to have seen third party support step up to fill in Activesync's worthless inability to sync over wifi or wlan. It would be very nice to revive this forgotten feature. Don't you people remember the uproar it caused when MS removed it?
Anyhow, I'm almost certain there's a work-around. Has anyone seen or heard anything in development?
Why revive this feature?
1. For the sheer convenience of not having to go through exchange servers or third party services especially when they may not be available to you
2. To sync user specific software that's otherwise not syncable OTA
3. Greater freedom share files over a wlan/wifi connection especially with these new and faster broadband networks (ev-do, etc)
4. Not to have to make special trips to your workstation just to sync..

I've found a workaround - sorry it's in German - here:
http://www.mypocketpc.ch/Workshops/15899.aspx
But it seems that since ActiveSync 4.5 you need to configure a DOMAIN on the pocketPC, not only login and password.
Does anybody know how to set something like a "pseudo domain" or if the PC has a "default domain", if no domain is set?
I will try to translate the workaround now:
In earlier versions of ActiveSync WLAN Sync was possible (last known version 3.8), since version 4.x it was removed..
You can do a remote WLAN Sync as followed:
Start ActiveSync on the PocketPC. Go to Options > Server OR Configure Server [depends on your ActiveSync Version]
Enter the IP of the Windows PC. [if you don't know do: Start > Run > cmd > ipconfig /all ]
Enter Login and Password which are the same as on your Windows PC. [SSL I think should be deactivated]
IN v4.5 YOU HAVE A PROBLEM HERE: if you don't enter a DOMAIN, the configuration wizard doesn't continue IF YOU HAVE LOWER VERSION PLEASE TELL WHETHER YOU HAVE TO SPECIFY A DOMAIN
Click Next > Next > Finished.
Now you can MAYBE [see the DOMAIN problem] sync via WLAN again..
If anyone has an idea how to workaround the MUST-SPECIFY-A-DOMAIN problem please tell, I think I am not the only one who wants WLAN Sync back!

I think you need an exchange server for sync over wifi or gprs.

NO and YES!
YES: Microsoft WANTS that you use an Exchange Server, therefore they have removed support for syncing via WLAN since v4.x
NO: The posted workaround doesn't need an Exchange Server running!! Instead you are "simulating" that you have one. Earlier this Workaround seem to have worked, but since ActiveSync v4.5 it seems you NEED to specify a DOMAIN of your PC.. maybe just another hurd only!
So, the problem again: since you need to specify a DOMAIN of your PC now, is there a possibility to workaround this? Maybe via Registry or setting up a "Pseudo Domain" ? This MUST-HAVE-SPECIFIED-A-DOMAIN seems now to be the only problem, unfortunately you cannot leave the domain field empty.. but the Handheld tries to connect the PC via WLAN (...WOW! Just one step away from the Solution!!?...), but that fails due the DOMAIN problem.. (most PC are only in a workgroup, and not in a domain..)
Maybe we are only one step away from a working solution!

I think only the wizard is changed by MS so that when no
domain is entered you cannot go forward.
ActiveSync can be configured with Configuration Service Provider (CSP)
through XML file.
Infos here: http://msdn2.microsoft.com/en-us/library/aa456215.aspx
I will try this tomorrow with a configuration without domain and let you know
if it works.
Houser

You said it - the setup wizard seems to be the only hurd.
Hey, great idea. Where to find this config file?
I searched for it on PC and PPC, but found only binary files..
Hope you have success!

Here are the maybe suitable Registry Settings for ActiveSync setup, I will try this way:
http://msdn2.microsoft.com/En-US/library/aa457989.aspx

Here is a tool I have written to configure ActiveSync Settings
without ActiveSync wizard.
You can test it if you want.
Houser

Thx. I launched your tool and entered IP + Login + Pass, activated e.g. Tasks to synchronize, and deactivated SSL, and clicked Save.
Then I launched ActiveSync on the PPC (Trinity HTC P3600).. now there comes a screen:
Microsoft Exchange:
Result: Your account information could not be detected. Choose configure Server on the ActiveSync menu to check your Exchange Server credentials.
Support Code is: 0x85002009

Hmmm maybe because the domain entry is left empty?
What happens if you enter some characters for the domain?
Houser

If I enter a domain it tries longer to sync on the PPC - instead throwing at once the message above - the circling arrows animates for 3 seconds, then it ends ups with:
Waiting for network..
Hm, maybe the ActiveSync software on the PPC checks for the domain entry But.. maybe this check can be removed
Where is the configuration saved? To a file (which one) or to registry (which branch)?

I do not know where the config is saved. In WM2003 it was in the registry
but in WM5 that was removed and stored in some internal database
I think.
Houser

As you speak German, maybe this could be a workaround for the domain problem:
http://www.weyo.de/board/?n=320745&bn=21
I mean, maybe it's possible to enter a Pseudo Domain in the Registry on the PPC under
HKEY_LOCAL_MACHINE\\\\Comm\\\\Tcpip\\\\Hosts\\\\
And entering this Pseudo Domain as Domain in the ActiveSync Setup..
But what to enter in the Registry? The branch is currently empty, so no example exists

Hm, here's how to enter the information:
http://support.microsoft.com/kb/q199370/

ActiveSync uses the domain only for authentication.
The server name (DNS name) or IP is used for the connection.
In the registry you can enter Host names with IP adresses
that has nothing to do with domain name.
ActiveSync uses HTTP oder HTTPS (TCP/IP port 80 or 443) when
you configure a server in ActiveSync.
ActiveSync on your deskstop PC does not listen on this TCP ports
so you cannot connect.
Houser

Hm, any other idea? How crazy whatever..

Today not maybe tomorrow.
Houser

Houser said:
ActiveSync uses the domain only for authentication.
The server name (DNS name) or IP is used for the connection.
In the registry you can enter Host names with IP adresses
that has nothing to do with domain name.
ActiveSync uses HTTP oder HTTPS (TCP/IP port 80 or 443) when
you configure a server in ActiveSync.
ActiveSync on your deskstop PC does not listen on this TCP ports
so you cannot connect.
Houser
Click to expand...
Click to collapse
So what you are saying is, that there is no way to sync over wifi unless you have an exchange server?

freeyayo50 said:
So what you are saying is, that there is no way to sync over wifi unless you have an exchange server?
Click to expand...
Click to collapse
Yes this is the only way I have done it so far.
But may be there is another solution out there to do this
with Outlook on your desktop but I currently do not know
how that can work.
I will do some tests today and let you know about the results.
Houser

I did al the same and no results...
A followed all the steps for my ipaq 9610 as well and get same (no) results.
Maybe anyone a new idea?