Unable to configure my Exchange email in Surface mail program

Hi folks,

Took delivery of a Laptop with Windows 8 Pro pre-loaded and struggeled to get the Mail App to sync with an Exchange Server Account (SBS 2011 - Exchange 2010 SP2 + all updates).

It nows works fine with an Exchange Server (2007) with a proper Certificate issued for the purpose of Exchange use. I had to however get it working by going in through the People App and adding the account that way. This did not work with an SBS Server using a Self-Issued Certificate (default installation). I did also have to set the Security (wizard prompted) on the laptop to adsjust the security setting locally when it asked.

Tried the same on a Surface RT with the above (Exchange 2007 (not SBS box)) and it did not work either.

Conclusion:

1. There is a bug in the ActiveSync part of the Surface RT OS not allowing authentication with Exchange regardless of whether the ceritifcate is valid or not.
2. This may be 'by design' with the Surface RT - it won't authenticate with 'corporate' Exchange Server as the device is aimed at consumers not business. (bad move by MS here)

Why Oh Why did MS not make it work properly from day 1. Every other device I have configured (iPhones, iPads, Andriod Phones etc) - they just work.!

There is no good reason why MS should not allow ActiveSync to work with a Private Companies Exchange Server, Certificates aside, as all the other devices in the Market allow you to Ignore Invalid Certificates during the config and it will work.

I have also Installed both the Self-Issued certificate used by Exchange 2010 on the SBS 2011 OS in to the Trusted Root Certification Authority Certficate Store for the Computer Account, not just the 'User Account' and this does not work either on the Surface RT or Windows 8 Pro on the Laptop.

This needs resolved ASAP before we loose all confidence in MS.

Hi,

You are the first one whom I come across that ever mention this step:

"2. Enter your Microsoft Account information (used to be called LIVE ID)

Most of the Surace/email and communication help neglect to mention that...

why the heck do we need the Microsoft account anyways when all we need is just to connect to our own email server (say I have a work email account).  These step gave the user the perception that MS is trying to nab some info for the server setting or something.

is this also sync the user setting of the machines and local account and themes...?!

Thanks,

CG

No.  I still get "We couldn't find settings for..."

It doesn't seem to be a problem with just private Exchange Servers. I can't even get our Google Apps to work for our school.

Ok after working on this for hours and hours - finally did the next logical thing and checked Exchange server's application log.. low and behold it was a permission issue on my mailbox.  So if Active Sync has never worked for you before and you can't get it to work on the full Windows 8 version then check there..see what showed up on mine, below.

Log Name:      Application

Source:        MSExchange ActiveSync

Date:          11/20/2012 12:20:59 PM

Event ID:      1053

Task Category: Configuration

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      exch-cas

Description:

Exchange ActiveSync doesn't have sufficient permissions to create the "CN="Active Directory operation failed on JDC1. This error is not retriable. Additional information: Access is denied.

Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchActiveSyncDevices" and doesn't have any deny permissions that block such operations.

Details:%3