On SBS it's MUCH easer. The only hard part is copying the certificate
onto the device. All the notes below are preinstalled if the server is
fully patched and up to date. Check the user is a member of the Mobile
Users group and then that should be you. 

 

If you put the certificate in the users My Documents and get them to
sync the phone with their desktop then that gets it on the device.
Depending on the make you might need to do something special on it. 

 

OMA will work as well by default as well.

 

Mike

 

From: Jason Tierney [mailto:[EMAIL PROTECTED] 
Sent: 04 April 2008 15:30
To: MS-Exchange Admin Issues
Subject: RE: Setting up SBS2003 for a smartphone.

 

This is old, but it works.

 

Verify that Exchange 2003 Outlook Web Access is working.

        If you are using Windows Mobile 2002 devices or using Windows
Mobile 2003 devices with SSL, make sure that a certificate is installed
on the Exchange server unless the SSL session is terminated before the
Exchange server.

 

   If you are not using SSL, launch Internet Explorer on the desktop and
verify that http://servername/Microsoft-Server-ActiveSync  returns Error
501/505 - Not implemented or not supported. Verify the same from the
device.

 

                   If you are using SSL, launch Internet Explorer on the
desktop and verify that https://servername/Microsoft-Server-ActiveSync
returns Error 501/505 - Not implemented or not supported. Verify the
same from the device.

       Verify that massync.dll is listed as an Application map on the
Microsoft-Server-ActiveSync virtual directory on the Exchange server.

                    

 

       Verify that Exchange ActiveSync is enabled globally using
Exchange System Manager. This is the default setting. 

       Verify that the user is enabled for Exchange ActiveSync using AD
Users and Computers. This is the default setting. 

 

On the Exchange server, verify that the authentication settings on the
Exchange virtual directory includes Integrated Windows Authentication.

 

Exchange ActiveSync uses Kerberos authentication when communicating with
the Exchange server and therefore requires that Integrated Windows
authentication be checked on the Exchange virtual directory.

 

       If you are using a single Exchange 2003 server and have either
configured your Exchange virtual directory to "Require SSL" or have
turned on Forms Based Authentication(FBA), then follow the procedure
below to create an alternate Exchange virtual directory for ActiveSync
to use.

 

The new virtual directory needs to be created through Internet Services
Manager for Exchange ActiveSync to work. 

If you are using Windows Server 2003 or later, follow these
instructions:

1.      Start Internet Information Services (IIS) Manager

2.      Locate the \exchange virtual directory (default location is Web
Sites\Default Web Site\Exchange)

3.      Right click on the Exchange virtual directory, choose All Tasks,
Save Configuration to a File.

4.      Type a name in the File name: text box (for example,
ExchangeVDir).

5.      Click OK.

6.      Right click the root of this web site (Default Web Site), choose
New, Virtual Directory (from file).

7.      On the Import Configuration dialog box, select the Browse button
and locate the file from step #4, then click Open

8.      Next, select the Read File button

9.      In the Select a configuration to import text box, select
Exchange and press OK.

10.  A dialog box will appear stating the virtual directory already
exists.  In the Alias text box, type a name for the new virtual
directory that you want the Exchange Server ActiveSync and Outlook
Mobile Access processes to use. For example, type Exchange-OMA.

11.  Click OK

12.  Right click on the new virtual directory and choose Properties, in
this example, Exchange-OMA.

13.  Select the Directory Security tab

14.  Click the Edit button in the Authentication and access control
section.

15.  Verify only the following authentication methods are enabled

*         Integrated Windows authentication

*         Basic authentication

16.  Click OK

17.  Click Edit under IP address and domain name restrictions. 

18.  Click Denied access, and then click Add. 

19.  Click Single computer (if this option is not already selected),
type the IP address of the server that you are configuring, and then
click OK.

20.  Click the Edit button in the Secure communications section

21.  Verify Require secure channel (SSL) is not enabled and click OK.

22.  Click OK, and then quit IIS Manager. 

23.  Click Start, click Run, type regedit in the Open box, and then
click OK.

24.  Locate the following registry subkey: 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MasSync\Parameters

25. Right-click Parameters, point to New, and then click String Value. 

26. In the New Value #1 box, type ExchangeVDir, and then press ENTER. 

27. Right-click ExchangeVDir, and then click Modify. 

28. In the Value data box, type a forward slash ( /) followed by the
name of the new virtual directory that you created in step 10. For
example, type /Exchange-OMA. 

29. Click OK, and then quit Registry Editor.

30. Restart the IIS Admin Service. To do this: 

*         Click Start, click Run, type services.msc in the Open box, and
then click OK. 

*         In the Name list, right-click IIS Admin, and then click
Restart.

 

 

Jason Tierney, MCSE
Vice President, Consulting Services
Corporate Network Services
"Count on Us"
direct: 240-425-4441

 

From: N Parr [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 03, 2008 2:22 PM
To: MS-Exchange Admin Issues
Subject: RE: Setting up SBS2003 for a smartphone.

 

If he just wants his email quick use IMAP, or if it's a Verizon phone
you could install wireless sync really quick.

 

________________________________

From: Brumbaugh, Luke [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 03, 2008 7:22 AM
To: MS-Exchange Admin Issues
Subject: Setting up SBS2003 for a smartphone.

I had a client at the last minute call me before he went on vacation to
setup his server so that he can get his email on his phone.

Lovely, he gets his email from a hosted email source and it gets stored
in exchange so they can have shared contacts.  (Not my idea but the so
called computer genius brother.)   So what do I need to do with the
exchange server to get this to happen?   OWA has been installed, ports
80 and 443 forwarded in firewall.

I guess I need to get a certificate.  What else?  Whitepaper
appreciated.

Luke L. Brumbaugh

Network Engineer

Butler Animal Health Supply

Ph:(614) 659-1736

**********************************************************************

CONFIDENTIALITY NOTICE: The information transmitted in this message is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material. Any review,
retransmission, dissemination or other use of this information by
persons or entities other than the intended recipient is prohibited. If
you received this in error, please contact the sender and destroy all
copies of this document. Thank you. 

Butler Animal Health Supply

**********************************************************************

 

 

 

 

 

 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~             http://www.sunbeltsoftware.com/Ninja                ~

<<image001.gif>>

<<image002.gif>>

Reply via email to