Microsoft Knowledge Base Archive

Symptoms

When you try to access a Microsoft Exchange Server 2003 computer by using Microsoft Office Outlook Mobile Access or Exchange ActiveSync, you experience connection or synchronization problems. Exchange Server ActiveSync and Exchange Outlook Mobile Access (OMA) use the /Exchange virtual directory to access OWA templates and DAV on the Exchange back-end servers on which the user's mailbox is located. Exchange Server ActiveSync and OMA cannot access this virtual directory if either of the following conditions is true:

The Exchange virtual directory on an Exchange back-end server is configured to require SSL.
Forms-based authentication is enabled.

Note: These issues do not occur if these same conditions are true on the Exchange virtual directory on a front-end server.

When this issue occurs, you may experience one of the following symptoms in either Exchange Server ActiveSync or Outlook Mobile Access.

Symptoms in Outlook Mobile Access

You receive the following error message:
Unable to connect to your mailbox on server Servername. Please try again later. If the problem persists contact your administrator.
Additionally, the following error message is logged in the Application log in Event Viewer on the computer that is running Exchange Server:
Date: Date
Source: MSExchangeOMA
Time: Time
Category: (1000)
Type: Error
Event ID: 1805
User: N/A
Computer: ServerName

Description: Request from user UserA@domain.com resulted in the Microsoft(R) Exchange back-end server <ServerName> returning an HTTP error with status code 403:Forbidden

Response:
Content-Length: 1409
Content-Type: text/html
Server: Microsoft-IIS/6.0
MicrosoftOfficeWebServer: 5.0_Pub
X-Powered-By: ASP.NET
Date: Fri, 21 Feb 2003 02:25:34 GMT

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <HTML><HEAD><TITLE>The page must be viewed over a secure channel</TITLE> <META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">
You receive the following error message:
A System error has occurred while processing your request. Please try again. If the problem persists, contact your administrator.
Additionally, the following error message is logged in the Application log in Event Viewer on the server that is running Exchange Server:
Date: Date
Source: MSExchangeOMA
Time: Time
Category: (1000)
Type: Error
Event ID: 1507
User: N/A
Computer: ServerName

Description:
An unknown error occurred while processing the current request: Exception of type Microsoft.Exchange.OMA.DataProviderInterface.ProviderException was thrown.

Stack trace:
at Microsoft.Exchange.OMA.UserInterface.Global.Session_Start(Object sender, EventArgs e)
at System.Web.SessionState.SessionStateModule.CompleteAcquireState()
at System.Web.SessionState.SessionStateModule.BeginAcquireState(Object source, EventArgs e, AsyncCallback cb, Object extraData)
at System.Web.AsyncEventExecutionStep.System.Web.HttpApplication+IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

Inner Error: Exception has been thrown by the target of an invocation.

Stack trace:
at System.Reflection.RuntimeConstructorInfo.InternalInvoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean isBinderDefault)
at System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
at System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
at System.Activator.CreateInstance(Type type, BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) at Microsoft.Exchange.OMA.UserInterface.Global.Session_Start(Object sender, EventArgs e)

Inner Error: The remote server returned an error: (440) Login Timeout.

Stack trace:
at Microsoft.Exchange.OMA.ExchangeDataProvider.OmaWebRequest.GetRequestStream()
at Microsoft.Exchange.OMA.ExchangeDataProvider.ExchangeServices.GetSpecialFolders()
at Microsoft.Exchange.OMA.ExchangeDataProvider.ExchangeServices..ctor(UserInfo user)

Symptoms in Exchange ActiveSync

You receive the following error message:

Synchronization failed due to an error on the server. Try again. Error code: HTTP_500

Additionally, on a server that is running Exchange Server 2003 Service Pack 2 (SP2), the following events are logged in the Application log on the Exchange computer.

Event 1

Event Type: Error
Event Source: Server ActiveSync
Event Category: None
Event ID: 3029
Description: The mailbox server [%1] has its [%2] virtual directory set to require SSL. Exchange ActiveSync cannot access the server if SSL is set to be required.

For information about how to correctly configure Exchange virtual directory settings, click the following article number to view the article in the Microsoft Knowledge Base:

817379 Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003

Event 2

Event Type: Error
Event Source: Server ActiveSync
Event Category: None
Event ID: 3030
Description: The mailbox server [%1] has forms based authentication enabled on its virtual server. Exchange ActiveSync cannot access the server when Forms based authentication is enabled.

For information about how to correctly configure Exchange virtual directory settings, click the following article number to view the article in the Microsoft Knowledge Base:

817379 Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003

Event 3

Event Type: Error
Event Source: Server ActiveSync
Event Category: None
Event ID: 3031
Description: The mailbox server [%1] does not allow "Negotiate" authentication to its [%2] virtual directory. Exchange ActiveSync can only access the server using this authentication scheme.

For information about how to configure Exchange virtual directory settings, click the following article number to view the article in the Microsoft Knowledge Base:

817379 Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003

For information about how to correctly configure Internet Information Services (IIS) to support Kerberos and NTLM authentication, click the following article number to view the article in the Microsoft Knowledge Base:

215383 How to configure IIS to support both the Kerberos protocol and the NTLM protocol for network authentication

This issue may occur after you install Microsoft Windows SharePoint Services on a computer that is running Exchange Server 2003. For information about how to correctly configure a server to run both Windows SharePoint Services and Exchange Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:

823265 You receive a "Page not found" error message when you use Outlook Web Access (OWA) to browse the Exchange Server 2003 client after you install Windows SharePoint Services

↑ Back to the top

Resolution

To resolve this problem, use one of the following methods.

Note You do not have to perform either of the methods that are described in the "Resolution" section to configure a front-end server to require SSL and to enable forms-based authentication on the front-end server.

Note If you are running Microsoft Small Business Server 2003, the configurations that are described in Method 1 and in Method 2 in the "Resolution" section are automatically configured during setup. If you are receiving the errors that are described in the "Symptoms" section on Small Business Server 2003, run the Configure E-Mail and Internet Connection Wizard. The wizard should help you reconfigure the /Exchange virtual directory and forms-based authentication to work with Outlook Mobile Access and with Exchange ActiveSync.

Method 1

Method 2

↑ Back to the top

More information

To access the contents of a user's mailbox in Exchange Server 2003, the Microsoft-Server-ActiveSync and the Outlook Mobile Access virtual directories make an explicit DAV logon to the Exchange virtual directory. The call is similar to the following:

http://netbios_name_of_mailbox_server/exchange/mailbox_alias

The Microsoft-Server-ActiveSync and Outlook Mobile Access virtual directories cannot access the contents of the user's mailbox if the Exchange virtual directory is configured to require SSL. The Microsoft-Server-ActiveSync and Outlook Mobile Access virtual directories only try to connect with the Exchange virtual directory over TCP port 80 (HTTP), not over TCP Port 443 (HTTPS).

Outlook Mobile Access tries to connect to the Exchange virtual directory by using all the following authentication methods:

Kerberos
NTLM
Basic

When you configure forms-based authentication on the Exchange Server 2003, the authentication method for the Exchange virtual directory is set to Basic authentication, and the default Domain is set to the backslash character. The Microsoft-Server-ActiveSync virtual directory can only connect to the Exchange virtual directory by using Kerberos authentication.

For information about issues related to Outlook Mobile Access (OMA) error messages, click the article numbers in the following list to view the article in the Microsoft Knowledge Base:

842023 You receive an error message when you try to create an email message, try to add a new contact, try to add a new task, try to create a new appointment in Outlook Mobile Access with Exchange Server 2003

898131 When you try to connect to an Outlook Mobile Access Web site on an Exchange 2003 computer, you may receive the "A System error has occurred while processing your request" error message

For information about issues that are related to Exchange ActiveSync (EAS) errors, click the appropriate article number in the following list to view the article in the Microsoft Knowledge Base:

886346 You receive an HTTP 500 error message when you synchronize your mobile device with Microsoft Exchange Server 2003

826974 "Synchronization failed due to an error on the server" error message when you try to synchronize a mobile device with an Exchange 2000 server

↑ Back to the top

More information

Visit our Windows Phone Forums for more helpful hints and ideas.

↑ Back to the top

Article ID	:	817379
Revision	:	24
Created on	:	9/4/2013
Published on	:	9/4/2013
Exists online	:	False
Views	:	859

Microsoft KB Archive Search

Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003

Symptoms

Event 1

Event 2

Event 3

Resolution

Disable the forms-based authentication for the Exchange virtual directory

Create a secondary virtual directory for Exchange server

More information

More information

Applies to: