If you are beating your head against the wall trying to figure this one out then try the following.
Go to IIS manager
Find your virtual directory (mine was IIS/websites/default website/microsoft-server-active sync)
Right click and go to properties
Then permissions
Make sure that users is listed .... if not add it.
This fixed the error for me.
Background. Exch2007 on Server 2003. One server in the domain so everything is running off of it. No firewall right now while I am testing I am trying to connect with a Cingular 3125 and I am getting this error. I have tried what you had suggested and it did not resolve the issue. Do you have any other ideas as to what I could try? I have not seen anywhere where anyone with anything other than a palm has had this problem. Thanks, John
Is this the exact error you receive? Have you tried to open up a web browers on the phone and nav to your owa site? Do you get any errors about a certificate?
Its possible this is also caused by the need to trust the cert on the phone.
When I goto https://domain/owa it asks me to accept the cert I accept and it allows me to login, that all works fine. Should it be a mobile based screen like exchange 2003 was? Its showing me the same site as if I were trying to login with a computer.
The exact error is the same one that OP had gotten: Support Code: 0x85010004
"Your account in Microsoft Exchange Server does not have permission to synchronize with your current settings. Contact your Exchange Server Administrator"
How do I check the cert on the phone? I have not set one up on there or does it have it own by default?
When it asks you to accept the certificate can you determine why it is prompting you? Usually its because the certificate has expired, the host name doesn't match or the root certificate isn't trusted.
- Joel
It only ask for a cert when I goto https://domain/owa it does the same exact thing when I goto with a web browser. Is it not supposed to do that?
You should never get prompted to accept your certificate when you view a site over SSL. If you are getting prompted in IE or PocketIE, Active Sync isn't going to work as it requires a valid SSL certificate to function properly.
What type of SSL certificate are you using?
When Exchange 2007 is installed it will create a self signed certificate. These are not able to be verified by the device. So you can either purchase a third party one or install the existing certificate on the device.