Hello all
We have recently had to setup Exchange 2003 to enable access for iPhones and iPads. The server had already been setup for Outlook Web Access, however when attempting to connect an Apple device for email access we received the following error:
Event Source: Server ActiveSync
Event ID: 3029
The mailbox server [exchange.x.com] has its [exchange] virtual directory set to require SSL. Exchange ActiveSync cannot access the server if SSL is set to be required. For information about how to correctly configure Exchange virtual directory settings, see Microsoft Knowledge Base article 817379, “Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003”.
To resolve this we had configure an additional Exchange Virtual Directory in IIS which didn’t require SSL.
You must use Internet IIS Manager to create this virtual directory for Exchange ActiveSync and Outlook Mobile Access to work.
Locate the Exchange virtual directory. The default location is as follows:
Web Sites\Default Web Site\Exchange
Right-click the Exchange virtual directory, click All Tasks, and then click Save Configuration to a File.
In the File name box, type a name. For example, type ExchangeVDir. Click OK.
Right-click the root of this Web site. Typically, this is Default Web Site. Click New, and then click Virtual Directory (from file).
In the Import Configuration dialog box, click Browse, locate the file that you created in step 4, click Open, and then click Read File.
Under Select a configuration to import , click Exchange, and then click OK.
A dialog box will appear that states that the “virtual directory already exists.”
Select the Create a new virtual directory option. In the Alias box, type a name for the new virtual directory that you want Exchange ActiveSync and Outlook Mobile Access to use. For example, type exchange-oma.
Click OK.
Right-click the new virtual directory. In this example, click exchange-oma. Click Properties.
Click the Directory Security tab.
Under Authentication and access control, click Edit.
Make sure that only the following authentication methods are enabled, and then click OK:
- Integrated Windows authentication
- Basic authentication
On the Directory Security tab, under IP address and domain name restrictions, click Edit.
Click the option for Denied access, click Add, click Single computer and type the IP address of the server that you are configuring, and then click OK twice.
Under Secure communications, click Edit. Make sure that Require secure channel (SSL) is not enabled, and then click OK.
Click OK, and then close the IIS Manager.
Click Start, click Run, type regedit, and then click OK.
Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MasSync\Parameters
Right-click Parameters, click to New, and then click String Value.
Type ExchangeVDir, and then press ENTER. Right-click ExchangeVDir, and then click Modify.
NoteExchangeVDir is case-sensitive. If you do not type ExchangeVDir exactly as it appears in this article, ActiveSync does not find the key when it locates the exchange-oma folder.
- In the Value data box, type the name of the new virtual directory that you created in step 8. For example, type /exchange-oma. Click OK.
- Quit Registry Editor.
Restart the IIS Admin service. To do this, follow these steps:
- Click Start, click Run, type services.msc, and then click OK.
- In the list of services, right-click IIS Admin service, and then click Restart.
If you want to reuse Forms-based Authentication on the Exchange server, follow these steps to re-enable Forms-based Authentication on the /Exchange virtual directory in Exchange System Manager.
- Open Exchange Manager.
- Expand Administrative Groups, expand the first administrative group, and then expand Servers.
- Expand the server container for the Exchange Server 2003 server that you will be configuring, expand Protocols, and then expand HTTP.
- Under the HTTP container, right-click the Exchange Virtual Server container, and then click Properties.
- Click the Settings tab, click to select the Enable Forms Based Authentication check box, and then click OK.
- Close Exchange Manager.
- Click Start, click Run, type IISRESET/NOFORCE, and then press ENTER to restart Internet Information Services (IIS).
