Database Users

Universal can't connect to Windows Server 2003 - solved

Hello!
I have a Universal in german from T-Mobile Austria and a BlueAngel also from T-Mobile Austria. As we all know the Universal has the new OS Windows Mobile 5.0, the BlueAngel has Windows Mobile 2003.
So and there is a BIG difference between these two OS (OR A BIG BUG, I don't know).
The problem is: With the file-explorer (or Total Commander 2.0, which i prefer) you can connect with WLAN to a share on a computer. Enter the UNC-path under path in the file-explorer, the device asks for a login and it works. So it is unter Windows Mobile 2003 with the BlueAngel. And it doesn't matter to which computer I will connect: to my server with Windows Server 2003 or to my workstation with Windows XP. I enter my domain account and it works.
On the Universal it doesn't work when I will connect to my server with Windows Server 2003. It's absolutely impossible to connect to a share on my server. BUT I CAN connect to a share an my workstation with Windows XP WITH MY DOMAIN ACCOUNT. So what I see in the moment: The NTLM-authentication works because I can connect to any Windows XP with a domain account, but the connection to a share on a server with Windows Server 2003 fails. And this only with the Universal, because in the same time with my BlueAngel it works.
My question is: Has somebody the same ugly problem or maybe I do somethimg wrong, I don't know.
And that's the reason why I can't change my device in this moment and why I love my BlueAngel.
Best regards, Peter

i to have this issue, i can map to xp shares no probs but win2003server shares just loops on the password screen.
big issue for me this

w2k3 issues
Click to expand...
Click to collapse
I had the same issues on w2k3-server before installing the latest updates.
After new W2K3 installation and newest updates: no problems.
The problem could be active directory.
Have a look to "NetBIOS over IP" at IP-settings. Resco Explorer can't map UNCs, only NetBIOS-names, it's my monitoring.
Greetings, Gerd Dubrand

that dosent fix the problem, just tried it, it worked fine on my BA but not on JJ.

I also cannot connect to my Win2003 server via jasjar, but I can connect to my win2000 advanced server. Win2003 server is sbs2003 with all updates applied. Can connect to both via my pda2k. Interesting?

IS the server a DC? you may need to disable the 'Microsoft network server: Digitally sign communications (always)' setting the default DC GPO - http://support.microsoft.com/kb/823659. This is enabled by default for DC's and acan cuase issues when talking to downlevel clients (I've had this problem with samba clients.
It mayalso be set in the local secuirty policy.
But then again this might not be anything to do with it...
Anything in the logs on the server?

GOOD IDEA, TINTOY!!!
Thank you for your samba server and your idea, tintoy. Your hint works!
For all others aigan the solution:
On a Windows Server 2003 domain controller you have to disable 'Microsoft network server: Digitally sign communications (always)'. I haven't this done by Active Directory, i have this done by 'Security settings for domain controller' -> 'Security Options' in 'Management'.
Note: Please excuse when I don't have used the correct names, because I have only a german version of the Windows Server 2003 and I don't know the exact names of the program groups of the english version. But I hope you know, what I mean.
Thank you aigan tintoy, this problem is solved!
See you all again here,
Peter

I confirm this,
network server: Digitally sign communications (always)
change to disabled in the Default Domain Controller Security Settings.
This has just made my day. odd how wm5 is apparently newer but dosent quite work out the box like wm2003 did

np ;-)

Exchange 2003 not connect with mobile 6.1
Someone can write a detailed description ? I have the same problem.
Thanks

Access network share via WiFi

I had a JasJar and before it PDA2k and with both I could not mount network shares on my local home network. I write the address in file explorer in the format \\10.0.0.23\share where the share share does not even have a password and is share to everybody and the phone can not recognize the share.
It does see other devices on the local netword for example it can browse the Internet and access my routers web based admin but not the share.
Other computers on my home network can access the share.\
I heard there are programs that help in doing this, but is there no direct or free way to do this?

Try using Resco File Explorer in which you will be able to map shared network folders and then you can access them from File Explorer directly, it even support possword protected shared items.

Im using the standard file explorer, it works fine. I start by typing \\P4 which eventually shows my shares, and then I can navigate as I want.
Cheers
Nasdaq

still can not connect to share
Nasdaq, which version of windows do do you have the share on. Are there any special settings?
It gives me "network path was not found" always then "Network resource can not be found or you do not have the permission to access the network".
The share has no password, on windows it just logs me in without any further input.
I am using the openpath in the file explorer.

May be you need to check once again about IP Addresses and Default Gateway settings, which is not allowing you to connect with your LAN.

--Universal can't connect to Windows Server 2003--
Cant map to a Windows 2003 Server share? Is it also a Domain Controller? Check the server for
start / programs / administraton tools / Domain Controller Security Policy
Then check Local Policies / Security Options :
Microsoft Network Server: Digitally sign communications (always)
change to disabled
that will stop your universal from accessing a share normal windows machines can access.,.

Access shares problem is on Windows XP
This problem is on WindowsXP share not on windows server.
Also the imate can access the Internet and even the administration of the router, so I gues it has full TCP/IP abililty.
Are there any workgroup settings that I need to do?

Sorry for not getting back earlier, my share is on an XP sp1 box.
What I would REALLY like to do is browse my Exec over wifi from my PC. :?
Cheers
Nasdaq

Anyone got any other advice on this one?
Can't access my network shares with //192.168.0.1/ etc either?
Thanks
M.

I can't access shares by using the IP, I have to use the name of the machine: \\azhad instead of \\10.168.2.158
Azhad

Hi Guys,
what is this sharing stuff u r talking about?
Please excuse me for this newbee question but i want to know about what sort of sharing etc can i do with my Exec and Laptop, like exploring files on laptop from Exec or other way around?
My laptop has Windows XP sp2 and i use wireless router to share my broadband
many thnx......
Jatt

Try this up
I had the same problem accessing network shares on my Universal...
I was also typing IP address in Resco Explorer and it was not working.
But I could make it work using the computer name. I have no idea why it work whil with basic ip address it couldn't, but at least I am able to browse my computer folder and play video files.
So try using "\\computername\share" to see if it's working.
forrest.

I tried
I tried doing that, using the computer name. It takes more time to tell me that it can not access the server.
I think that to resolve the name of the computer it needs a wins server, is that correct?
Could it also be in your network settings if you set your network as internet or connects to work?

to Jatt
Jatt theoretically you should be able to create a network share on any computer on your network and be able to access it on your phone. This is really handy since you would not need to activesync to exchange files.
But note that for JasJar/Exec or any WM5 device you can not sync over the network just share files.

To ehabh
Thanks for trying to help me out but can u tell me how do i create a network share on my computer? please
Thanks again

Same problem
I've got the same problem. I can connect to the internet through my router but for the life of me I can't connect to the shared on my PC (XP SP2). I know it's not a problem with my EXEC because I can connect to my PC at work. I can see my PC in the device list but not connect to it.
The first time I tried to connect using Resco Explorer 05 I managed to ge the screen asking for log-on details, but never got any further as it said my passwork was incorrect. Since then I've never managed to get the log-on screen back only an error say the network resource was unavailable.
I've ran the XP network set-up wizard more times than I can count, changed my PC settings manually but still had no luck. Has no one figured out what we're doing wrong?

I didn't really understand the machine name issue as I don't have any WINS or DNS server at home... But for me it worked...
Anyway you should try to temporarily disable your personnal firewall (On the computer you're trying to access) just to see if it is not blocking network traffic for the windows sharing.
If it is the problem, then you have to configure your firwall to stop blocking this traffic...
Sorry, but it's all I know...
Forrest.

Activesync workoround via wlan / wifi sync

I'm rather surprised not to have seen third party support step up to fill in Activesync's worthless inability to sync over wifi or wlan. It would be very nice to revive this forgotten feature. Don't you people remember the uproar it caused when MS removed it?
Anyhow, I'm almost certain there's a work-around. Has anyone seen or heard anything in development?
Why revive this feature?
1. For the sheer convenience of not having to go through exchange servers or third party services especially when they may not be available to you
2. To sync user specific software that's otherwise not syncable OTA
3. Greater freedom share files over a wlan/wifi connection especially with these new and faster broadband networks (ev-do, etc)
4. Not to have to make special trips to your workstation just to sync..

I've found a workaround - sorry it's in German - here:
http://www.mypocketpc.ch/Workshops/15899.aspx
But it seems that since ActiveSync 4.5 you need to configure a DOMAIN on the pocketPC, not only login and password.
Does anybody know how to set something like a "pseudo domain" or if the PC has a "default domain", if no domain is set?
I will try to translate the workaround now:
In earlier versions of ActiveSync WLAN Sync was possible (last known version 3.8), since version 4.x it was removed..
You can do a remote WLAN Sync as followed:
Start ActiveSync on the PocketPC. Go to Options > Server OR Configure Server [depends on your ActiveSync Version]
Enter the IP of the Windows PC. [if you don't know do: Start > Run > cmd > ipconfig /all ]
Enter Login and Password which are the same as on your Windows PC. [SSL I think should be deactivated]
IN v4.5 YOU HAVE A PROBLEM HERE: if you don't enter a DOMAIN, the configuration wizard doesn't continue IF YOU HAVE LOWER VERSION PLEASE TELL WHETHER YOU HAVE TO SPECIFY A DOMAIN
Click Next > Next > Finished.
Now you can MAYBE [see the DOMAIN problem] sync via WLAN again..
If anyone has an idea how to workaround the MUST-SPECIFY-A-DOMAIN problem please tell, I think I am not the only one who wants WLAN Sync back!

I think you need an exchange server for sync over wifi or gprs.

NO and YES!
YES: Microsoft WANTS that you use an Exchange Server, therefore they have removed support for syncing via WLAN since v4.x
NO: The posted workaround doesn't need an Exchange Server running!! Instead you are "simulating" that you have one. Earlier this Workaround seem to have worked, but since ActiveSync v4.5 it seems you NEED to specify a DOMAIN of your PC.. maybe just another hurd only!
So, the problem again: since you need to specify a DOMAIN of your PC now, is there a possibility to workaround this? Maybe via Registry or setting up a "Pseudo Domain" ? This MUST-HAVE-SPECIFIED-A-DOMAIN seems now to be the only problem, unfortunately you cannot leave the domain field empty.. but the Handheld tries to connect the PC via WLAN (...WOW! Just one step away from the Solution!!?...), but that fails due the DOMAIN problem.. (most PC are only in a workgroup, and not in a domain..)
Maybe we are only one step away from a working solution!

I think only the wizard is changed by MS so that when no
domain is entered you cannot go forward.
ActiveSync can be configured with Configuration Service Provider (CSP)
through XML file.
Infos here: http://msdn2.microsoft.com/en-us/library/aa456215.aspx
I will try this tomorrow with a configuration without domain and let you know
if it works.
Houser

You said it - the setup wizard seems to be the only hurd.
Hey, great idea. Where to find this config file?
I searched for it on PC and PPC, but found only binary files..
Hope you have success!

Here are the maybe suitable Registry Settings for ActiveSync setup, I will try this way:
http://msdn2.microsoft.com/En-US/library/aa457989.aspx

Here is a tool I have written to configure ActiveSync Settings
without ActiveSync wizard.
You can test it if you want.
Houser

Thx. I launched your tool and entered IP + Login + Pass, activated e.g. Tasks to synchronize, and deactivated SSL, and clicked Save.
Then I launched ActiveSync on the PPC (Trinity HTC P3600).. now there comes a screen:
Microsoft Exchange:
Result: Your account information could not be detected. Choose configure Server on the ActiveSync menu to check your Exchange Server credentials.
Support Code is: 0x85002009

Hmmm maybe because the domain entry is left empty?
What happens if you enter some characters for the domain?
Houser

If I enter a domain it tries longer to sync on the PPC - instead throwing at once the message above - the circling arrows animates for 3 seconds, then it ends ups with:
Waiting for network..
Hm, maybe the ActiveSync software on the PPC checks for the domain entry But.. maybe this check can be removed
Where is the configuration saved? To a file (which one) or to registry (which branch)?

I do not know where the config is saved. In WM2003 it was in the registry
but in WM5 that was removed and stored in some internal database
I think.
Houser

As you speak German, maybe this could be a workaround for the domain problem:
http://www.weyo.de/board/?n=320745&bn=21
I mean, maybe it's possible to enter a Pseudo Domain in the Registry on the PPC under
HKEY_LOCAL_MACHINE\\\\Comm\\\\Tcpip\\\\Hosts\\\\
And entering this Pseudo Domain as Domain in the ActiveSync Setup..
But what to enter in the Registry? The branch is currently empty, so no example exists

Hm, here's how to enter the information:
http://support.microsoft.com/kb/q199370/

ActiveSync uses the domain only for authentication.
The server name (DNS name) or IP is used for the connection.
In the registry you can enter Host names with IP adresses
that has nothing to do with domain name.
ActiveSync uses HTTP oder HTTPS (TCP/IP port 80 or 443) when
you configure a server in ActiveSync.
ActiveSync on your deskstop PC does not listen on this TCP ports
so you cannot connect.
Houser

Hm, any other idea? How crazy whatever..

Today not maybe tomorrow.
Houser

Houser said:
ActiveSync uses the domain only for authentication.
The server name (DNS name) or IP is used for the connection.
In the registry you can enter Host names with IP adresses
that has nothing to do with domain name.
ActiveSync uses HTTP oder HTTPS (TCP/IP port 80 or 443) when
you configure a server in ActiveSync.
ActiveSync on your deskstop PC does not listen on this TCP ports
so you cannot connect.
Houser
Click to expand...
Click to collapse
So what you are saying is, that there is no way to sync over wifi unless you have an exchange server?

freeyayo50 said:
So what you are saying is, that there is no way to sync over wifi unless you have an exchange server?
Click to expand...
Click to collapse
Yes this is the only way I have done it so far.
But may be there is another solution out there to do this
with Outlook on your desktop but I currently do not know
how that can work.
I will do some tests today and let you know about the results.
Houser

I did al the same and no results...
A followed all the steps for my ipaq 9610 as well and get same (no) results.
Maybe anyone a new idea?

Trying to access files on a Windows 2003 Server domain

Runnng WM6 on an i-mate JasJam (HTC clone).
I have wireless working fine and can surf the net. I don't have any proxy configured.
I try to use File Explorer to get to the files on my home server but when it prompts for username, p/w and domain, it keeps prompting or gives an error even though they are correct.
I'm giving it my Administrator login details and have the domain name correct.
I'm able to connect to a NAS directly and access/view files that way. The NAS is running some sort of UNIX and thus doesn't have the same issues that Windows is obviously having. I can connect via USB and ActiveSync works fine.
I've also tried connecting to a PC in the house that's running MCE edition and thus isn't on a domain. I've tried using the main username/password that I use to log in as administrator on that box.
Again, same thing - it just prompts over and over.
I'm familiar with setting shares up and setting security, but none of that is applicable because I'm trying to authenticate as domain administrator. I've also tried using local administrator but that doesn't work either.
The error I get is "Error connecting to resource: -1073741802". (Nothing in Google).
I recall some hidden registry setting that I once had to set on Windows Server 2003 to deal with unencrypted passwords, but I can't find anything on that now. I can't work out a google word combination that comes up with ANYTHING for logging onto a domain from a PPC. Frustrating!
Any ideas or experience in this? If you have please give specific settings where possible!
Thanks
Douginoz

There was an issue with trying to RDP onto W2K3 boxes from a Windows Mobile device - the solution to that was to set the administrator password to blank......not something you'd normally want to do, but it might be worth a try in this case just to see if it works?
Have you tried using an account with less privileges (but with share and/or folder permissions) to see if that works?? The administrator account, be it domain or local, has some special traits that are not always made clear - you could try a domain user account with local admin rights.....
Also, for your Google search, have you tried "clear text" or "plain text" as keywords - I have a vague recollection of the registry entry you mention, but I'm at a loss to remember it myself....
HTH,
Mark.

exchange - security certificates

Hi,
i hope somebody can help me with my activesync error 0x80072F06; it says that the server security certificates are invalid, which i can't understand at all: I have my touch2 connected to my microsoft exchange server 2010 and imported my servers security certificate (which i first exported on my desktop using internet explorer). At first i tried to sync the phone at home by wifi and entered my servers local IP -> worked exactly as i should.
But as soon as i enter my external ip my certificate it doesnt work anymore and gives me the above error...
But i don't understand why i can successfully sync the phone the first time after i entered the settings and also the first time every day when the exchange server/the phone try to connect (some minutes after midnight) it works, but why not always?
I hope i could give you enough information to help me solve my problem.
saw45

I've always been able to sync without a security certificate...I don't know if this is related at all, but you can try this: http://www.mobilitydigest.com/forums/showthread.php?t=259&highlight=exchange+security

Thanks a lot, would be really great, but sadly it doesn't work under windows mobile 6.5... i tried to install the version for windows mobile 6.1 professional but it always gives me an error (unexpected error in stay config.exe) when i try to save the settings... (although i installed the 2.0 version)
is there any other way (maybe a registry setting) to disable the certificates?
thank you for your help,
saw45

can you try changing the connection speed?
mine is in dutch, but it must be something like:
settings-->connections-->USB to PC-->uncheck the option for a faster connection.

Hi,
i'm not connecting to a local pc over usb so i don't think i can change the connection speed as i'm connecting to an exchange server over umts/hsdpa/3g or wifi... I hope that was what you ment?
Thanks for your help!
saw45

Hey Saw,
Did you import the certificate with an .P7B extention? I also tried the DER encoded binary and the Base-64 encoded (both .CER). But the Cryptographic message syntax standard was the one that worked for me.

saw45 said:
Hi,
i'm not connecting to a local pc over usb so i don't think i can change the connection speed as i'm connecting to an exchange server over umts/hsdpa/3g or wifi... I hope that was what you ment?
Thanks for your help!
saw45
Click to expand...
Click to collapse
oops, than you can disregard my idea ;-)

Hi,
which way did you export your certificate/ which program did you use?
Thank you for your help, i hope this is going to solve the problem! But if its not, nobody has an idea how to turn off windows mobile asking for valid certificates?
saw45

ok i imported now the certificate in cryptographic message syntax standard (.p7b) but it didn't change anything
I really don't know what to do... ironically the perfect exchange integration was one of the points why i decided to buy a windows mobile based phone
i don't really understand why it works at 00:01 and then the phone decides that the certificate isn't valid?? When i start the phone at 2 pm the first time (that day) it also works!? But after the first sync no matter what i do it won't work again!
I really hope somebody can help me!
saw45
edit: sorry for repost