Exchange Server Help - Activesync Error 0x85010004

[nsaia]

My company standard for pda's is the crackberry. However, I was able to connect to our exchange server with my ATT Tilt. I believe that our IT dept has now enabled some security feature that will not allow my phone to connect to the server anymore.

Using WM 6.1

Any ideas?

[rklosinski]

it sounds like the server cert is invalid. you can get more information on the error using activesync to set up the server source.

anyway, your it geeks must give you a copy of the server cert (.cer file). They can export it, and you can use activesync to put it onto your device

[nsaia]

Thanks for the help. They've now established a "pilot" program for WM6, so I don't know if they'll actually give me a copy of the server cert. I was able to copy the cert that was assigned to my PC and install it on my device, but still no dice. It was installed as an Intermediate and not a root. I don't know if that makes a difference or how/if it can be changed if it does.

[rklosinski]

Im not sure either. It would take the it geeks about 30 seconds to generate the .cer file. I had the same problem as you, so I exported the certificate from my server, stuck it onto my htc cruise using activesync, then using file explorer, navigated to the .cer file, clicked on it, and it worked.

The certificate I exported was the exact on that was imported to iis.

[nsaia]

thanks again.

For some reason the cert from the server is not working. Could you check to see if yours was installed as a root or an intermediate when you get a chance?

[nsaia]

This is going to be a HUGE bummer if I have to get a crackberry.

[rklosinski]

to get the cert:
1) on the server where iis is running, run mmc
2) add the certificate snap-in referencing the local computer.
3) navigate to Personal or Trusted Root certificates (depending if your cert is self-signed or from a CA), find the cert that was used for the iis web service that is running OTA, right click on it, then select export (.der format will be ok).
4) have the it geeks give this file to you.
5) using activesync, move it to you device.
6) using file explorer on the device, navigate to where the .cer file is, then click on it.
7) thats it.

[nsaia]

Step 4 is the problem. I don't think I'll get the cert from IT because I'm not part of the pilot program. This was a recent change that required certificates to crack down on renegades like me.

I guess I'll have to wait until they roll out the corporate wide program.

Oh well, Crackberry here I come. :(

Thanks again for the info.

[nsaia]

Does anyone know how an exchange serve tells the difference between remote access from a desktop and remote access from a handheld?:confused:

[rklosinski]

The address is really different. webmail is at www.yourdomain.com/exchange, which over the air activesync is www.yourdomain.com/?something? (im not sure exactly). The ppc activesync program knows what to append to the end of your url to activate the correct application pool on the server.