cryptic error from Test-ActiveSyncConnectivity

  • Article

I came across some strange output when running the Exchange 2007 commandlet

 Test-ActiveSyncConnectivity

so I thought I'd share with those of you who might be trying to figure out what it means...

 

Test-ActiveSyncConnectivity -ClientAccessServer 02e2k7cas -TrustAnySSLCertificate:$true -LightMode:$true

CasServer MailboxServer Scenario Result Latency(MS) Error

--------- ------------- -------- ------ ----------- -----

02e2k7cas mclab02E2k7MB FolderSync Failure [System.Net.WebException]:

 

The remote server returned an error: (403) Forbidden.

HTTP response headers: MS-Server-ActiveSync: 8.1

Content-Length: 0

Cache-Control: private

Date: Wed, 13 May 2009 20:35:31 GMT

Server: Microsoft-IIS/7.0

X-AspNet-Version: 2.0.50727

X-Powered-By: ASP.NET

 

In the IIS logs I saw this:

 

2009-05-13 20:35:31 02E2K7CAS 192.168.0.31 OPTIONS /Microsoft-Server-ActiveSync/default.eas &Log=V120_LdapC1_LdapL0_RpcC0_RpcL0_ 443 mcLab02.internal\CAS_16d82a7964354994 192.168.0.31 TestActiveSyncConnectivity - 02e2k7cas.mclab02.internal 200 0 0 15

2009-05-13 20:35:31 02E2K7CAS 192.168.0.31 POST /Microsoft-Server-ActiveSync/default.eas Cmd=FolderSync&User=CAS_16d82a7964354994&DeviceId=996795128&DeviceType=TestActiveSyncConnectivity&Log=V120_LdapC0_LdapL0_RpcC10_RpcL0_Ers1_Error:
LegacyDeviceOnStrictPolicy_ 443 mcLab02.internal\CAS_16d82a7964354994 192.168.0.31 TestActiveSyncConnectivity - 02e2k7cas.mclab02.internal 403 0 0 31

 

The LegacyDeviceOnStrictPolicy helped me remember I had disabled ActiveSync for nonprovisionable devices here:

 EAS mailbox policy

So, the error, although cryptic at first, was really there to tell me the account I tested has a mailbox policy that doesn't allow nonprovisionable devices. If you use System Center Operations Manager, you may also run into this error.