Connecting an MPX220 with Exchange 2003

[Nick555]

Hi

SBS2003 Premium (inc Exchange 2003), ADSL Internet via 2nd nic connected to router. Motorola MPX220 Smartphone running Windows Mobile 2003, Vodafone GPRS (UK)

Just having bought a smartphone (MPX220), I'm trying to sync (emails &
contacts) with my server over GPRS. The Motorola manual does not help at all with this. I have installed active sync on the desktop & enabled Mobile access for my user account on the server. The settings I am using are servername in the form of the Exchange Internet IP address, username, password, domain, SSL is checked. The phone does have a working connection as I am able to use MSN Messenger.

I have applied disablecertchk to the device & rebooted the smartphone. I
have also applied the server Q886346 registry hack.

The best I can manage now if by using the Exchange Internet ip address. I can get the phone to connect, check for changes & then I get an error:

"Your account does not have permission to sync with your current settings. Contact your Microsoft Exchange administrator.
Error code HTTP_403"

As far as I can tell, I have set up my account on the server correctly &
enabled remote access. I'm also part of the mobile users security server group. I've disabled certchecking on the device.

Does anyone have any idea's please?

Regards
Nick

[Nick555]

Hi

SBS2003 Premium (inc Exchange 2003), ADSL Internet via 2nd nic connected to router. Motorola MPX220 Smartphone running Windows Mobile 2003, Vodafone GPRS (UK)

Just having bought a smartphone (MPX220), I'm trying to sync (emails &
contacts) with my server over GPRS. The Motorola manual does not help at all with this. I have installed active sync on the desktop & enabled Mobile access for my user account on the server. The settings I am using are servername in the form of the Exchange Internet IP address, username, password, domain, SSL is checked. The phone does have a working connection as I am able to use MSN Messenger.

I have applied disablecertchk to the device & rebooted the smartphone. I
have also applied the server Q886346 registry hack.

The best I can manage now if by using the Exchange Internet ip address. I can get the phone to connect, check for changes & then I get an error:

"Your account does not have permission to sync with your current settings. Contact your Microsoft Exchange administrator.
Error code HTTP_403"

As far as I can tell, I have set up my account on the server correctly &
enabled remote access. I'm also part of the mobile users security server group. I've disabled certchecking on the device.

Does anyone have any idea's please?

Regards
Nick

[HalM]

First off, I HATE SBS. You don' manage it the same way you manage their enterprise products.

In any case, you did not mention enabling all 5 Mobile Services as found on the Exchange System Manager, Mobile Services Properties sheet. Must do that. Test by seeing if you can reach your mailbox via OMA.

Also, some great info on this thread:
http://www.smartphonethoughts.com/fo...icates&start=0

HTH,

Hal

[Nick555]

Thanks for your reply

I have checked Mobile services & all 5 options are checked. I have however not set up a mobile carrier in there.

I cannot get to my mailbox using http://internetdomain/oma if I try http://ipaddress/oma I get an error 403 forbidden.

I have tried the link you mention before my post. AFAIK I have tried all available tweaks without any luck.

[HalM]

Nick,

From INSIDE your network on a standard PC and browser (IE 6.0 is best), can you reach OMA via HTTP://Server_Name/OMA? Then from OUTSIDE the network try HTTP://IP_Address/OMA from a standard PC.

If you can't reach OMA in both of these fashions, Active Sync won't work.

Hal

[Nick555]

Hal, I appreciate your help with this

From inside my network, I am able to get to http://servername/oma, I have to log in with my username & password.

From outside the network I cannot get to http://ipaddress/oma. Thinking about this, the ipaddress is going to my router & in fact removing "oma" just gets to the router config user & password page.

My Internet config is configured to SBS best practice (http://www.smallbizserver.net/Default.aspx?tabid=154). The server has 2 nics, the external nic has a separate ip range to the internal range. The external nic links to the router which is configured to use 2 Internet ips. The first Internet ip address is used for general access & I have applied a DMZ to (hopefully) allow through OMA. The 2nd ip address is used for SMTP mail collection.

I have in turn applied the DMZ to each Internet ip address & tested it with the Smartphone. On each occasion, the phone appears to connect & then I get the error that my account does not have permission to sync. I have administrator rights on my server.

Regards
Nick

[HalM]

Nick,

It is my understanding that you will have to be able to connect to OMA from outside the firewall. Keep working with the ISA component until you can connect. It "should" then allow Active Sync to work.

FWIW. I make my living as an independent MS geek. A long time ago I removed ISA from my network and went with a hardware firewall. Much easier to configure and probably more secure.

Hal

[Nick555]

Thanks Hal

I'll keep trying with this as I have to get this thing going. It's hard to understand why I can't get one MS product to talk to another MS product that it was designed to talk to. I have noticed several instances of "allow" filters within ISA that must have been setup by the wizards. So I'm thinking that maybe it's more a hardware firewall issue where my router is not passing through the request as it should do.

Regards
Nick

[chiptransisto]

Nick555, I think that HalM is correct. It is probably your ISA. I have SBS2003 and connect with my mpx220. It took a while to get everyghing set up. Keep trying.
You need to isolate your problem. Try connecting to the internet with your smartphone browser. You can try to connect to some of the default web sites that came with your phone. If you cannot connect to a web site with your phone, the problem is with your phone.
If you cannot connect to your SBS with www.myserver.com/oma, the problem is with you SBS.
Good luck.

[Nick555]

Thanks Chiptransisto

I can use the smartphone to connect to regular Internet websites with little problem apart from the speed. I still suspect the router/firewall could be interfering somewhere.

Checking IIS last night, there was an SSL certificate half setup on the default web site. I deleted the certificate request. Is that ok?

[chiptransisto]

Can you connect to your SBS with www.myserver.com/oma?