• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Exchange 2010 ActiveSync HTTP 403 Forbidden Response Error

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2010] >> Mobility >> Exchange 2010 ActiveSync HTTP 403 Forbidden Response Error Page: [1]
Login
Message << Older Topic   Newer Topic >>
Exchange 2010 ActiveSync HTTP 403 Forbidden Response Error - 13.Dec.2012 7:01:05 PM   
oldcitykat

 

Posts: 3
Joined: 13.Dec.2012
Status: offline

I can't seem to get past this one and only error from ExRCA,
I have tried testing with both autodiscover & Manually specifying server settings.

Testing HTTP Authentication Methods for URL https://autodiscover.wilk.us.com/Microsoft-Server-ActiveSync/.
The HTTP authentication test failed.

Additional Details

An HTTP 403 forbidden response was received. The response appears to have come from Unknown.
Body of the response: You do not have permission to view this directory or page.
I'm running Exchange 2010 SP2 current with all Windows Updates

So far I have checked the following;

I have checked Inherit permissions as a possible problem, Box is checked for user in question
I have a single CAS Server
I'm running the test with a non admin account.
I don't have a reverse proxy setup
I have current SSL cerificate from DigiCert
And I don't have redirection configured

Current IIS setting
AutoDiscover VD;
Authentication setting;
Anonymous - Enabled
Basic - Enabled
Windows Authentication - Enabled
SLL Setting;
Require - SSL
Ignore Certificate
----------------------------------------
Active Sync VD;
Authentication setting;
Basic - Enabled
All others - Disabled
SLL Setting;
Require - SSL
Ignore Certificate
No Redirection is set

Autodiscover was successfully tested for Exchange ActiveSync.

Here's the results from:
Get-ActiveSyncVirtualDirectory |fl
MobileClientFlags : BadItemReportingEnabled, SendWatsonReport
MobileClientCertificateProvisioningEnabled : False
BadItemReportingEnabled : True
SendWatsonReport : True
MobileClientCertificateAuthorityURL :
MobileClientCertTemplateName :
ActiveSyncServer : https://mail1.wilk.us.com/Microsoft-Server-ActiveSync
RemoteDocumentsActionForUnknownServers : Allow
RemoteDocumentsAllowedServers : {}
RemoteDocumentsBlockedServers : {}
RemoteDocumentsInternalDomainSuffixList : {}
MetabasePath : IIS://SARAMARII.wfc.local/W3SVC/1/ROOT/Microsoft-Server-ActiveSync
BasicAuthEnabled : True
WindowsAuthEnabled : False
CompressionEnabled : True
ClientCertAuth : Ignore
WebsiteName : Default Web Site
WebSiteSSLEnabled : True
VirtualDirectoryName : Microsoft-Server-ActiveSync
Path :
ExtendedProtectionTokenChecking : None
ExtendedProtectionFlags : {}
ExtendedProtectionSPNList : {}
Server : SARAMARII
InternalUrl : https://saramarii.wfc.local/Microsoft-Server-ActiveSync
InternalAuthenticationMethods : {}
ExternalUrl : https://mail1.wilk.us.com/Microsoft-Server-ActiveSync
ExternalAuthenticationMethods : {}
AdminDisplayName :
ExchangeVersion : 0.10 (14.0.100.0)
Name : Microsoft-Server-ActiveSync (Default Web Site)
DistinguishedName : CN=Microsoft-Server-ActiveSync (Default Web
Site),CN=HTTP,CN=Protocols,CN=SARAMARII,CN=Servers ,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=wfc,DC=lo cal
Identity : SARAMARII\Microsoft-Server-ActiveSync (Default Web Site)
Guid : 6f634443-16b6-44cc-b081-a875c1bb472d
ObjectCategory : wfc.local/Configuration/Schema/ms-Exch-Mobile-Virtual-Directory
ObjectClass : {top, msExchVirtualDirectory, msExchMobileVirtualDirectory}
WhenChanged : 12/3/2012 3:40:14 PM
WhenCreated : 11/15/2012 4:22:03 PM
WhenChangedUTC : 12/3/2012 8:40:14 PM
WhenCreatedUTC : 11/15/2012 9:22:03 PM
OrganizationId :
OriginatingServer : saramar.wfc.local
IsValid : True
ObjectState : Changed

Test results from;
Test-ActiveSyncConnectivity -ClientAccessServer saramarII -MailboxCredential (get-credential wfc\jwilk) -TrustAnySSLCertificate |fl

LocalSite : Default-First-Site-Name
SecureAccess : True
VirtualDirectoryName :
Url :
UrlType : Unknown
Port : 0
ConnectionType : Plaintext
ClientAccessServerShortName : saramarii
LocalSiteShortName : Default-First-Site-Name
ClientAccessServer : saramarii.wfc.local
Scenario : Options
ScenarioDescription : Issue an HTTP OPTIONS command to retrieve the Exchange ActiveSync protocol version.
PerformanceCounterName :
Result : Success
Error :
UserName : jwilk
StartTime : 12/13/2012 7:00:20 AM
Latency : 00:00:00.1248000
EventType : Success
LatencyInMillisecondsString : 124.80
Identity :
IsValid : True
ObjectState : New

LocalSite : Default-First-Site-Name
SecureAccess : True
VirtualDirectoryName :
Url :
UrlType : Unknown
Port : 0
ConnectionType : Plaintext
ClientAccessServerShortName : saramarii
LocalSiteShortName : Default-First-Site-Name
ClientAccessServer : saramarii.wfc.local
Scenario : FolderSync
ScenarioDescription : Issue a FolderSync command to retrieve the folder hierarchy.
PerformanceCounterName : DirectPush Latency
Result : Failure
Error : [System.Net.WebException]: The remote server returned an error: (403) Forbidden.

HTTP response headers:

MS-Server-ActiveSync: 14.2
X-MS-RP: 2.0,2.1,2.5,12.0,12.1,14.0,14.1
MS-ASProtocolVersions: 2.0,2.1,2.5,12.0,12.1,14.0,14.1
MS-ASProtocolCommands: Sync,SendMail,SmartForward,SmartReply,GetAttachment,GetHierarchy,CreateCollection,Dele
teCollection,MoveCollection,FolderSync,FolderCreate,FolderDelete,FolderUpdate,MoveItems,GetItemEstimate,Meeti
ngResponse,Search,Settings,Ping,ItemOperations,Provision,ResolveRecipients,ValidateCert
Content-Length: 5301
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Thu, 13 Dec 2012 12:00:40 GMT
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET


UserName : jwilk
StartTime : 12/13/2012 7:00:20 AM
Latency : -00:00:01
EventType : Error
LatencyInMillisecondsString :
Identity :
IsValid : True
ObjectState : New

What am I missing???


_____________________________

Thank you in advance for any and suggestions
OldCityKat
Post #: 1
RE: Exchange 2010 ActiveSync HTTP 403 Forbidden Respons... - 14.Dec.2012 7:10:57 AM   
oldcitykat

 

Posts: 3
Joined: 13.Dec.2012
Status: offline
One more Exchange 2010 issue resolved!
This issues was resolved by Allowing non-provisionable devices via ActiveSync mailbox policy

I hope this can help someone else
OldCityKat

(in reply to oldcitykat)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2010] >> Mobility >> Exchange 2010 ActiveSync HTTP 403 Forbidden Response Error Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter