EAS settings in a mixed 2007/2003 site not working?   

We're having a bear of a time getting EAS working as we migrate from Ex2003 
to Ex2007.

Just brought our Ex2007 CAS's online, and basic OWA and Outlook anywhere 
work fine.

ActiveSync seems to work fine for people on the Ex2003 mailbox servers. 

HOWEVER.. for the handful of people moved to the Ex2007 servers (including 
myself), we're having major problems.  Attempts to sync lead to the 
"0x85010004 Your account in Microsoft Exchange Server does not have 
permission to synchronize with your current settings.  Contact your Exchange 
Server administrator." error being displayed every time on the device (a Palm 
Treo 700w from Verizon).

The CAS server settings all seem correct, we've allowed for 
non-provisionable device access, we're setup to require SSL, basic 
authentication, no device passwords requried (for now), and again - it's very 
odd since moving these accounts BACK to the Ex2003 back end server, 
ActiveSync starts working immediately.  Then moving them to the Ex2007 
mailbox server, it fails with that error again immediately.

SEEMS like it's got to be tied to some obscure permissions setting or 
something, but we've been beating our heads into this one for a few days now 
with no luck (including being on with MS support) so figured I'd throw this 
to the community and see if anyone else had a suggestion or maybe a fix.?

date: Fri, 25 Jul 2008 14:19:01 -0700   author:   Scott Pease Scott

Re: EAS settings in a mixed 2007/2003 site not working?   

On Fri, 25 Jul 2008 14:19:01 -0700, Scott Pease <Scott
Pease@discussions.microsoft.com> wrote:

>We're having a bear of a time getting EAS working as we migrate from Ex2003 
>to Ex2007.
>
>Just brought our Ex2007 CAS's online, and basic OWA and Outlook anywhere 
>work fine.
>
>ActiveSync seems to work fine for people on the Ex2003 mailbox servers. 
>
>HOWEVER.. for the handful of people moved to the Ex2007 servers (including 
>myself), we're having major problems.  Attempts to sync lead to the 
>"0x85010004 Your account in Microsoft Exchange Server does not have 
>permission to synchronize with your current settings.  Contact your Exchange 
>Server administrator." error being displayed every time on the device (a Palm 
>Treo 700w from Verizon).
>
>The CAS server settings all seem correct, we've allowed for 
>non-provisionable device access, we're setup to require SSL, basic 
>authentication, no device passwords requried (for now), and again - it's very 
>odd since moving these accounts BACK to the Ex2003 back end server, 
>ActiveSync starts working immediately.  Then moving them to the Ex2007 
>mailbox server, it fails with that error again immediately.
>
>SEEMS like it's got to be tied to some obscure permissions setting or 
>something, but we've been beating our heads into this one for a few days now 
>with no luck (including being on with MS support) so figured I'd throw this 
>to the community and see if anyone else had a suggestion or maybe a fix.?


Well I assume you've gone through this already, but anything in the
event logs or IIS logs that indicate what the problem may be?

date: Sat, 26 Jul 2008 09:04:58 -0400   author:   Andy David {MVP}