How to Change Passwords for Mobile Information Server System Accounts (298119)

MORE INFORMATION

Use the procedure in this section to change the passwords on the system accounts used by Mobile Information Server. This procedure describes how to change the passwords on COM+ components and Microsoft Windows 2000 services for Mobile Information Server:

NOTE: In the following procedure, domain.root.com stands for your fully qualified domain name (FQDN).

1. Change passwords in Active Directory for Message Processor, HTTPCONNECTOR, and ENTEVENTSOURCE. To do so:
   1. Click Start, click Programs, click MMIS, and then click Active Directory Users and Computers.
   2. Click to expand the Users container, right-click the Message Processor user, and then click Reset Password.
   3. Type the new password, confirm the password, and then click OK.
   4. Repeat these steps for the HTTPCONNECTOR and ENTEVENTSOURCE.
2. Change the password on the Mobile Information Server Message Processor Service (Mobiinfo.exe). To do so:
   1. Right click My Computer, and then click Manage.
   2. Click to expand the Services and Applications container, and then click Services.
   3. Right-click Mobile Information Server Message Processor, and then click Properties.
   4. Click the Logon tab, and then verify that the service is set for This Account.
   5. Verify that the user is domain.root.com/Message Processor.
   6. Type the new password, confirm the password, click Apply, and then click OK.
3. Change passwords on In, MMISDeviceInfo, MMISNotify, OMA and Exchange Mobility Event Sink COM+ Objects. To do so:
   1. Click Start, click Programs, click Administrative Tools, and then click Component Services.
   2. Click to expand Component Services, click to expand Computers, and then click to expand My Computer.
   3. Click to expand COM+ Applications, right-click IIS-{Default Web site//root/In}, and then click Properties.
   4. Click the Identity tab, verify that This user is selected, and then verify that the user is domain.root.com/HTTPCONNECTOR.
   5. Type the new password, confirm the password, click Apply, and then click OK.
   6. Right-click IIS-{Default Web Site//root/MMISDeviceInfo}, and then click Properties.
   7. Click the Identity tab, verify that This user is selected, and then verify that the user is domain.root.com/Message Processor.
   8. Type the new password, confirm the password, click Apply, and then click OK.
   9. Right-click IIS-{Default Web Site//root/MMISNotify}, and then click Properties.
   10. Click the Identity tab, verify that This user is selected, and then verify that the user is domain.root.com/HTTPCONNECTOR.
   11. Type the new password, confirm the password, click Apply, and then click OK.
   12. Right-click IIS-{Default Web Site//root/OMA}, and then click Properties.
   13. Click the Identity tab, verify that This user is selected, and then verify that the user is domain.root.com/HTTPCONNECTOR.
   14. Type the new password, confirm the password, click Apply, and then click OK.
   15. Close the Component Services snap-in.
4. On the Exchange 2000 computer that has the Exchange Event Source installed on it, change the password of the Exchange Event Source:
   1. On the Exchange 2000 computer that has the Exchange Event Source, click Start, click Programs, click Administrative Tools, and then click Component Services.
   2. Click to expand Component Services, click to expand Computers, and then click to expand My Computer.
   3. Click to expand COM+ Applications, right-click the Exchange Mobility Event Sink object, and then click Properties.
   4. Click the Identity tab, verify that This user is selected, and then verify that the user is domain.root.com/ENTEVENTSOURCE.
   5. Type the new password, confirm the password, click Apply, and then click OK.
   6. Quit the Component Services snap-in.
      
      NOTE: When you choose the Message Processor user, make sure that you pick the Message Processor user for your domain and not the Message Processors group.
5. Restart the Internet Information Service (IIS) Administrator Service and the dependent services on both servers. To cycle the IIS Administrator Service:
   1. Right click My Computer, and then click Manage.
   2. Click to expand the Services and Applications container, and then click Services.
   3. Right-click IIS Admin Service, and then click Restart.
   4. Click Yes to cycle all dependant services.

After you finish this procedure, browse to a mailbox and send an item to test Outlook Mobile Access. Test push notifications from the Exchange Event Source server and Microsoft Outlook Mobile Manager clients by triggering notifications to be forwarded to the device.

NOTE: Make sure you allow enough time for the password changes that you made to Message Processor, HTTPCONNECTOR, and ENTEVENTSOURCE in Active Directory to replicate.

If Outlook Mobile Access or push notifications do not work after you change the passwords, use the following troubleshooting procedure:

1. Run Script Synciwam.vbs on the Mobile Information Server computer. Use either of the following methods:
   • Use Cscript to run Synciwam.vbs:
     1. At a command prompt, change the folder to C:\Inetpub\AdminScripts, where c: is the system drive and Synciwam.vbs is located in the AdminScripts folder.
     2. Run the following command:

        cscript synciwam.vbs -v

   • Use Wscript to run Synciwam.vbs (when you run this command the output is displayed in Windows in a graphical user interface [GUI] mode):
     1. Click Start, and then click Run.
     2. In the Open box, type the following command:

        wscript c:\inetpub\adminscripts\synciwam.vbs -v

2. Fix COM+ accounts so that the correct user names and passwords are used (step three of the preceding procedure).
3. Restart IIS Administrator Service and dependent services (step five of the preceding procedure).
4. Test Outlook Mobile Access by browsing to a mailbox and sending a item.

NOTE: The SMS Connector Service (Smsgw.exe) that is included in Mobile Information Server Carrier Edition, and the Mobile Information Server SMTP Connector Service (Smtpsrv.exe) both run as the local system account. These services do not have a password that can be changed.

If Outlook Mobile Access fails, the following error message is reported on the device: In addition, the following event ID messages are logged in the System log: Mobile Information Server uses COM+ programs that run out-of-process with IIS. This behavior occurs because the Windows 2000 Component Services and IIS 5.0 processes are not synchronized. The HTTPCONNECTOR and Message Processor accounts may be out-of-synchronization with the metabase, Active Directory, and COM+. Account information that is stored in the IIS metabase should be synchronized with Active Directory, but COM+ programs are not automatically updated. IIS 5.0 provides the Synciwam.vbs script to update the starting identity of all IIS COM+ program packages that run out-of-process.