I hope an MVP out there might have some insight into this. We are using
Exchange Server 2003 on a Windows Server 2000 environment. Out of 10 Pocket
PC's only 4 can synchronize with Exchange Active Sync. Those 4 can Sync
with the server on the LAN and over the air (GPRS) including AUTD. The
other six cannot and we cannot figure out why that is. The six receive the
following error consistently:
----
Your account does not have permission to sync with your current settings.
Contact your Microsoft Exchange administrator.
An error occurred, and scheduled synchronization had to be disabled. To
start synchronizing on a schedule again, use the Mobile Schedule tab in
ActiveSync Options.

Error code: HTTP_403

----

If we take a single device that can synchronize with the server and change
the user's credentials, to one of our six user's that cannot synchronize,
then that same device fails to synchronize. When we swap the user's
credentials back to the original, the device synchronizes with the server.

What could be causing only a few of our user's to not be able to
synchronize? We have looked at all the settings on the Exchange Server and
I hope someone out there has seen this and can show us where to look to
solve this.

Thank you

Adrian

Here is an IIS log of the transactions, for all 6 cases, this is the 1st
time the users will synchronize. We receive a Http 404 error, not sure why
that error is happening or where the DELETE command comes from. Hope
someone has a clue and can help. Thanks, Adrian



2004-09-28 14:35:30 10.18.7.119 - 10.18.7.6 80 OPTIONS
/Microsoft-Server-ActiveSync
User=colexxxx&DeviceId=27250xx30F06034108000050BF1 977E0&DeviceType=PocketPC
401 Microsoft-PocketPC/3.0

2004-09-28 14:35:31 10.18.7.119 server\colexxxx 10.18.7.6 80 OPTIONS
/Microsoft-Server-ActiveSync
User=colexxxx&DeviceId=27250xx30F06034108000050BF1 977E0&DeviceType=PocketPC&
Log=VNATNASNC:0A0C0D0FS:0A0C0D0SP:0C0I0S0R 200 Microsoft-PocketPC/3.0

2004-09-28 14:35:31 10.18.7.6 - 10.18.7.6 80 DELETE
/exchange/Delxxxx.Colxxxx/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/Pocket
PC/27250xx30F06034108000050BF1977E0/FolderSyncFile - 404
Microsoft-Server-ActiveSync/3.0.4215.0

2004-09-28 14:35:31 10.18.7.6 - 10.18.7.6 80 MKCOL
/exchange/Delxxxx.Colxxxx/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync - 403
Microsoft-Server-ActiveSync/3.0.4215.0

2004-09-28 14:35:31 10.18.7.119 server\colexxxx 10.18.7.6 80 POST
/Microsoft-Server-ActiveSync
User=colexxxx&DeviceId=27250xx30F06034108000050BF1 977E0&DeviceType=PocketPC&
Cmd=FolderSync&Log=V2TNASFC:0A0C0D0FS:0A0C0D0SP:2C 2I380S1412R 403
Microsoft-PocketPC/3.0



"Adrian" <adrian_pineda@yahoo.com> wrote in message
news:etPb8CvpEHA.1668@TK2MSFTNGP14.phx.gbl...

If it makes you feel better we are having the same issues
here and have had no luck in determining where the issue
is.

Hopefully someone can shed some light. Reading through
various forums it looks like there are a variety of
Activesync issues that started to appear about 6 months
ago.

Paul

Just a thought, but could it be a licensing issue?

Chris

"Adrian" <adrian_pineda@yahoo.com> wrote in message
news:etPb8CvpEHA.1668@TK2MSFTNGP14.phx.gbl...

Chris, thanks for the response. What do you mean by licensing issue? We
have 4 users that can synchronize their PDA's including over the air & AUTD.
6 however cannot with the same settings on the devices. When the user's
attempt to synchronize we get the following responses:

http 401
http 200
http 404
http 403
http 403

The 404 is in response to a DELETE command from EAS to the server. Not sure
why we are sending that command for a directory that is yet to be created.
Any thoughts?

"Chris" <dontemailme@please.and.thanks.man> wrote in message
news:u7RvOWxpEHA.2032@TK2MSFTNGP10.phx.gbl...

Over at the exchange.moility group friendly_curt wrote this

This worked for me:

1 - Right click on IIS > web sites > default web site > exchange-oma
2 - Choose Properties > Directory Security > Edit (IP address and domain
name restrictions
3 - Select "By default all computers will be 'granted access' "
4 - Re-start system attendant and IIS

You may alternatively grant accesss to each mobile device separately and
choose 'denied access'. In this case make sure you add your server's IP
address as well as 127.1.1.1

Cheers,

Curt



I don't know if this worked, no one replied to the thread after that.

--
Eric Hicks [That_Kid] (MS-MVP Mobile Devices)

The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...



"Adrian" <adrian_pineda@yahoo.com> wrote in message
news:OIk5OaypEHA.648@tk2msftngp13.phx.gbl...

Hi Eric, thanks for the reply. Can you point me to the original thread? I
would like to see if this suggestion specifically addresses what we are
seeing. How do I join the exchange.mobility group?

Thanks a lot! I will look into this and reply with any resolution. It just
seems strange that 4 users can access their exchange server through the
pocket pc (through lan or wireless) while 6 cannot at all.

Adrian

"Eric Hicks [MVP, Windows Mobile devices]" <e_dadu@nomospam.yahoo.com> wrote
in message news:eifzsk2pEHA.1164@TK2MSFTNGP10.phx.gbl...

microsoft.public.exchange.mobility

Beverly Howard [MS MVP-Mobile Devices]

ok, I found it. If I find a solution I will post it.

"Beverly Howard [Ms-MVP/MobileDev]" <BevNoSpamBevHoward.com> wrote in
message news:uCj%23%23a8pEHA.1152@TK2MSFTNGP11.phx.gbl...

winHas any one found the problem with this issue?

I am having the same trouble and yes everything seems to be correctly
activated.
following this Idea the below I was able to browse to the /exchange-oma but
still not able to get the PPC (win2003) or Smart phone (2003se) (Moto MPx220)
to work.
Have tried everything I can think of + another 20 or so I have found looking
around the web.

One thing to mention during sync is it will get past connect and go to
looking for changes for about 1 sec then error out with just:
Your account does not have permission to sync with your current settings.
Error http_403

The log files shows about the same as the other user writes in this thread.

I am guessing somthing, someware is not being set correctly but according to
all documents I have found this should be for the most part a simple auto
setup. And when lokking at settings they do seem to be all correct including
remote access/vpn config.

PS all service packs have been installed ie. Exhange sp1 and Activesync 3.8.
Cert's are loading correctly (self issued)
Accounts are setup for remote OWA and user sync.
The Exchange active sync is configuring the devices correctly on the desktop
and PPC devices just as it should.
Firewalls ports are open router ports are open etc.
All other remote functions work correctly ie. OWA, RWS, ect


Over at the exchange.moility group friendly_curt wrote this

This worked for me:

1 - Right click on IIS > web sites > default web site > exchange-oma
2 - Choose Properties > Directory Security > Edit (IP address and domain
name restrictions
3 - Select "By default all computers will be 'granted access' "
4 - Re-start system attendant and IIS

You may alternatively grant accesss to each mobile device separately and
choose 'denied access'. In this case make sure you add your server's IP
address as well as 127.1.1.1



"Adrian" wrote: