Error message when you try to use the Microsoft Exchange Server ActiveSync Web Administration tool to delete a partnership or to perform a Remote Wipe operation on a mobile device in Exchange Server 2003 SP2: "(401) Unauthorized" (916960)

SYMPTOMS

When you try to use the Microsoft Exchange Server ActiveSync Web Administration tool to delete a partnership with a mobile device or to perform a Remote Wipe operation on a mobile device, you receive the following error message:

Failed to access user's Mailbox, verify that the mailbox and user account are enabled and functional.
Server Error in '/MobileAdmin' Application.

--------------------------------------------------------------------------------

The remote server returned an error: (401) Unauthorized.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Net.WebException: The remote server returned an error: (401) Unauthorized.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[WebException: The remote server returned an error: (401) Unauthorized.]
System.Net.HttpWebRequest.CheckFinalStatus() +680
System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult) +74
System.Net.HttpWebRequest.GetRequestStream() +234
Microsoft.Exchange.AirSync.Admin.Mailbox.propFindRequest(String deviceUri) +240
Microsoft.Exchange.AirSync.Admin.Mailbox.getDevices() +194
Microsoft.Exchange.AirSync.Admin.Devices.refreshDevicesTable() +135
Microsoft.Exchange.AirSync.Admin.Devices.Page_Load(Object sender, EventArgs e) +190
System.Web.UI.Control.OnLoad(EventArgs e) +67
System.Web.UI.Control.LoadRecursive() +35
System.Web.UI.Page.ProcessRequestMain() +750

--------------------------------------------------------------------------------

Version Information: Microsoft .NET Framework Version:1.1.4322.2300; ASP.NET Version:1.1.4322.2300

CAUSE

This issue occurs if one or both of the following conditions are true:

Integrated Windows authentication is not enabled on the Exadmin virtual directory on the mailbox server.

Note In a front-end/back-end (FE/BE) Exchange configuration, this issue occurs if Integrated Windows authentication is not enabled on the Exadmin virtual directory on the back-end server.
The MobileAdmin Web application is not running under the ExchangeApplicationPool application pool.

RESOLUTION

To resolve this issue, follow these steps.

Step 1: Verify the authentication method that is used on the Exadmin virtual directory

Make sure that the mailbox server has the Integrated Windows authentication method set on the Exadmin virtual directory. Integrated Windows authentication must be set on this virtual directory for the Microsoft Exchange Server ActiveSync Web Administration tool to use Kerberos authentication. To verify this setting, follow these steps:

Start the Internet Information Services (IIS) Manager tool. To do this, click Start, point to Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
Expand the Web server, expand Web Sites, and then expand Default Web Site.
Right-click Exadmin, and then click Properties.
Click the Directory security tab, and then click Edit under Authentication and access control.
Click to select the Integrated Windows authentication check box if it is not already selected.
Click OK two times to close the Exadmin Properties dialog box.

Step 2: Verify the application pool under which the MobileAdmin application is running

Verify that the MobileAdmin application is running under the ExchangeApplicationPool application pool in Microsoft Internet Information Services (IIS). To do this, follow these steps: