Installing Intellisync Mobile Suite 8 for Exchange
Install Windows 2000 or 2003 Server.
Ensure that the following optional components are also installed:
Application Server Console
ASP.NET
Enable network COM+ access
The following components of IIS (Internet Information Services)
Common Files
Internet Information Services Manager
SMTP Service
World Wide Web Service
Install Adobe Acrobat Reader if you wish to view the Intellisync documentation
Install Microsoft ActiveSync if you will be connecting Windows Mobile devices to the server
Install the appropriate MAPI software to enable the MAPI connection to the Exchange Server. This can be either:
- Outlook 2002 SP2
- Exchange 2003 System Manager
- Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1
For versions of Exchange prior to 2007, Outlook 2002 SP2 is recommended. For Exchange 2007, the MAPI Client and CDO 1.2.1 package is recommended. This can be downloaded from the Microsoft web site:
http://www.microsoft.com/downloads/details.aspx?FamilyID=E17E7F31-079A-43A9-BFF2-0A110307611E&displaylang=en
This guide uses Outlook 2002 SP2.
Install Microsoft Outlook 2000
Enter the serial number when prompted and click Next
Click Install Now
Click OK when setup has completed
Double click the Outlook icon on the desktop. The Outlook 2000 Startup screen will be displayed, click Next. The following window will be displayed:
Select the option to install Corporate or Workgroup mode and click Next. The following window will be displayed:
Select the option to use Outlook with a Microsoft Exchange Server and click Next. The following window will be displayed:
Enter the name of the Exchange server (Exchange 5.5) or Domain Controller (Exchange 2000 and later) and click Next. If you are entering placeholder information, simply enter “Exchange” as shown above.
On the next window, when prompted to specify whether you travel with the computer, select No and click Next.
Click Finish.
You will receive an error indicating that the server cannot be contacted, ignore the message and click OK:
Click OK on the next three warning messages.
When prompted whether you want to open the Default File System, click No:
Outlook has now been configured. It must now be set as the default mail program. Open the Control Panel and double click on the Internet Options icon. Click on the Programs tab. Set Outlook as the default Email program:
Click OK
Copy the software to C:\Kits\Outlook
Install Outlook Service Pack 2. Note, the installation process will appear to loop but it will complete eventually and the following window will be displayed:
Copy the software to C:\Kits\Outlook SP2
Create Intellisync Service Account
Create a new user account to be used as the Intellisync Service Account:
Username sync
Password s1nc0a2 (ie use syncoa2, but replace Y with 1, and o with 0)
Ensure that the user cannot change the password and that the password never expires
Once created add the user account to the Local Administrators Group. Double click the user account to open the Properties page. Click on the Member Of tab.
Click the Add button
Type in Administrators:
Click OK and then OK again.
Log off as Administrator and log in using the Intellisync Service Account.
Double click the Outlook icon on the desktop and run through the above steps to configure Outlook to run in Corporate or Workgroup mode with an Exchange server.
Install Intellisync Mobile Suite
Run the Intellisync installer file Setup.exe
Click Next
The required installation files will be extracted to a temporary folder, this may take a few minutes. Once complete the Environment Analyzer window will be displayed. Press Alt-L to run the less restrictive as shown below:
Click Next. The License Agreement window will be displayed. Read the terms and conditions and tick the box to Accept if you agree to them Click Next.
The License Key window will be displayed. Enter your Intellisync License Key and click Next. If you have yet to receive a license key, enter the standard 2-user license key.
The Installation Features window will be displayed:
Select the option to install the Intellisync Mobile Suite.
The Basic/Professional mode allows you to use one full user license to enable up to 1000 ‘basic’ users.
NOTE – assuming that your hardware configuration can support up to that many users.
Basic users have limited functionality only, can receive email but not other PIM folders. See the Nokia documentation for full details.
Click Next.
The User Permission window will be displayed:
Although the install process automatically enters oasync\sync you need to remove the servername and just enter sync as shown above. Enter the password for the account (s1nc0a2) and click Next.
The Environment Analyzer will now check how much memory is available on the server. If you receive an error indicating that you have insufficient RAM, press the Skip Test button.
You will now be prompted to specify the location where you want the program files to be copied, leave the default location and click Next (unless an alternate location is specifically required).
The Installation Type window will be displayed:
Click Next.
The Mail Server window will be displayed:
Select the option Microsoft Exchange 5.5 or later and click Next.
The Exchange Checks window will be displayed. Enter the name of the Exchange server or Domain Controller as well as details of a user name and password with Administrative access to the Exchange server (note these details can be placeholders only):
Click Next. If you receive an error that the mailbox could not be located, click the Skip Test button.
A further window may be displayed asking for Exchange information:
Enter the name of the Exchange server and mailbox details and click Next. Again, if you receive an error that the mailbox could not be located click the Skip Test button.
The Exchange Server Access window will be displayed:
Most businesses will probably prefer the second option as shown above (A separate NT domain account that the user specifies). This option means that users access their mailbox using their own login credentials.
Specifying either the first or the third options requires that an Administrative mailbox be created on the Exchange server which has full access rights to the other users’ mailboxes.
To complete the installation select the second option and click Next.
The Web Server URL window will be displayed:
Enter the externally resolvable name of the server (the address which will be used to access the server from the Internet) and click Next. If you receive an error that the address could not be resolved, click the Skip Test button.
The Manual Checks window will be displayed:
Tick all four options and click Next.
The Environment Analyzer Completed screen should be displayed. Click Install.
The Intellisync Mobile Suite will now be installed. This may take up to 10 minutes.
Once complete you may be prompted to reboot the server.
Post-installation checks
Once rebooted, verify that all of the Intellisync Services have started without issue, you should see three:
· Intellisync Device Management
· Intellisync Mobile Gateway
· Intellisync Mobile Suite
· Intellisync Secure Gateway
NOTE – another service, “Intellisync Application Sync”, will be listed. This service only needs to be started if your license key enables this module’s functionality.
Then from Internet Explorer, go to the http://localhost/ page and ensure the Intellisync login page appears as displayed below:
NOTE – if you have installed the software using placeholder information the solution WILL NOT work. Further configuration will be required once the server has been physically connected to the network.
On-site configuration
Launch the Intellisync Admin Console from the Start Menu.
Updating the License Key
If you need to enter a new license key for the Intellisync Mobile Suite, right click on the Intellisync Mobile Suite node and select About Intellisync Mobile Suite.
Click on the License button. Click on the Edit button next to the existing License key:
Paste the new key into the field and click Apply. Click OK and then OK again. You will be prompted to restart the server.
Server Name
Right click on the Intellisync Mobile Suite node and select Properties. Click on the Server Name tab. Ensure that the name of the server has been entered correctly:
NOTE – the name of the server will normally be “oasync”, so the server name will be “oasync.domain.com”
Exchange settings
Browse to Profile Settings \ Wireless Email \ Microsoft Exchange
Ensure that either the name of the Exchange server (single server environment) or the name of the Domain Controller (multi-server environment) is entered correctly:
In the Access Exchange using section, most businesses will probably prefer the second option as shown above (A separate NT domain account that the user specifies). This option means that users access their mailbox using their own login credentials.
Specifying either the first or the third options requires that an Administrative mailbox be created on the Exchange server which has full access rights to the other users’ mailboxes.
Now minimise all open windows to view the desktop. Right click on the icon for Outlook and select Properties:
Highlight Microsoft Exchange Server and select Properties:
Ensure that the correct Exchange server address is entered and click OK. Do not worry about entering a valid mailbox name. If you receive an error about the mailbox not being accessible simply ignore it. Intellisync uses the Outlook dll files to access Exchange, the precise configuration is not relevant.
Users
Browse to Management \ Users
If no list of users was provided when the server was being built, the users will need to be added.
Right click in the right hand pane and select Create User. The following window will be displayed:
The User Name will need to contain the domain as well as the user login name.
Set the User Authentication to NT Domain.
Enter first name and last name details.
NOTE – if the user details were entered prior to arriving on site, the one thing that will need to be changed for each user is the User Authentication field. This cannot be done until the server is able to verify that the user account exists with the Domain Controller.
Once all of the users have been created. Right click on each user in turn and select Use website as user. The following window will be displayed:
In the Exchange Server field, enter the name of the Exchange server or the Domain Controller depending on the configuration of the network.
Enter the name of the Exchange Mailbox
Enter the NT User Name (including the domain, in the format “domain\user”)
Enter the NT Password for that user
Press the Test Access button. Intellisync will now verify that it can access the specified Exchange mailbox. If the operation is successful, it will return “Access to Exchange mailbox verified”:
Check the Time Zone information and tick the box to indicate that you have verified the details are correct.
Set the Country to the United Kingdom.
Complete the rest of the fields marked with a red asterisk.
Click Next
Click Don’t Install Now
Click Done, then Done again
Click Logout
This process will need to be completed for all users before they will be able to access their account from their client device.
NOTE – if you are not able to access the web site, verify that the hosts file has been updated.
Open Windows Explorer. Browse to \WINNT \ System32 \ Drivers \ Etc \ hosts
Open the file with Notepad
Add a line for 127.0.0.1 and the name of the Intellisync server:
Security configuration
Admin Console Access
If you wish to restrict access to the Intellisync Admin Console by password, launch the Admin Console, right click on the Intellisync Mobile Suite and select Properties. Click on the Secure Administration tab:
Tick the option to Secure the Administration Console.
Click on the Add Administrator button:
Enter a username and password.
Select the type of access you wish the account to have. You can grant full Admin Privileges, or you can specify which elements of the Admin Console you want the user to have access to:
Encryption Settings
Within the Admin Console, browse to Profile Settings \ General \ Security/Encryption \ Default \ Properties:
On the Settings tab, select AES as the encryption method, and specify that keys be exchanged every 1 day.
Click on the Credentials tab:
Allow authentication credentials to be stored on the device for 1 day.
Click on the Power-on Password tab:
Tick the option to Enforce “power-on” password and enforce the strong alphanumeric password, prompting after 15 minutes.
Click OK.
Browse to Profile Settings \ General \ Web/WAP Security \ Default \ Properties:
Use the settings as shown above. Click OK.
Browse to Profile Settings \ Device Management \ Connection Policy \ Default \ Properties:
Set the profile to deactivate the device if the user enters their password incorrectly three times in a row. Click OK.
Configure PIM Usage settings
Browse to Profile Settings \ General \ Push/ReadySync:
Untick the option to Enable ReadySync and Push. Leave the option available to Allow User Override. Click OK.
Browse to Profile Settings \ Wireless Email \ Wireless Email User \ Default \ Properties:
Untick the option to Allow users to add & remove POP3 / IMAP server connections. Click OK.
Browse to Profile Settings \ Wireless Email \ Inbox & Outbox \ Default \ Properties:
Configure the options as shown above, being sure to disable the option to Allow User Override on both the Sync and the SyncXpress tabs. Click OK.
Browse to Profile Settings \ Wireless Email \ Sent Items \ Default \ Properties:
Configure the options as shown above, being sure to disable the option to Allow User Override on both the Sync and the SyncXpress tabs. Click OK.
Browse to Profile Settings \ Wireless Email \ Drafts \ Default \ Properties:
Configure the options as shown above, being sure to disable the option to Allow User Override on both the Sync and the SyncXpress tabs. Click OK.
Browse to Profile Settings \ Wireless Email \ PIM \ Default \ Properties:
Configure the options as shown above, being sure to disable the option to Allow User Override on both the Sync and the SyncXpress tabs. Click OK.
Creating client installer packages
Browse to Profile Settings \ General \ Client Install/Deployment \ Default \ Properties:
Select the platforms which you want users to be able to use with the solution (normally this will only be Pocket PC and PC devices).
Once you have made your selection click the Generate Standalone Installs button:
Specify the location where you want the installer files to be created and click the Generate button. Click OK.
Configure Device Management Settings
Set Pocket PC device clock
Browse to Systems Management \ Software Installs \ Create Custom Software Install:
Enter a descriptive name for the package, such as “Set Client Time” and set the device type to Pocket PC. Click Next. The following window will be displayed:
From the drop-down menu select the option to Set Client Time and then click the Add button. Click Next.
Set the package to be Required and click Next.
Click Next again.
Select the users you want to have access to the package, this will normally be All Users. Click Finish.
Configure Inventory Collections
Browse to Systems Management \ Inventory Collections \ Create Inventory Collection.
Enter a name for the package, such as “Pocket PC Inventory” and set the device type to Pocket PC. Click Next:
Set the Inventory to be collected every 5 days, and set it to be required. Click Next.
Select the components of the PDA that you want the inventory collection to report on. Click Next.
Select the users you want the Inventory to be run for (normally this will be All users) and click Finish.
Repeat the procedure for PC device types and any other devices your users may be making use of.
Configure Backups
Browse to Systems Management \ Backup \ Create Backup:
Enter a name for the package, such as “Pocket PC Backup”, set the device type to Pocket PC and the backup type to Device Backup. Click Next.
Set the package to be Optional and click Next.
Select the users you want the package to be available to (normally this will be All Users) and click Finish.
Configure logging
Browse to Management \ Logs \ User Activity. Click on the Settings button:
Change the Keep log entries for value to 30 days. Click OK.
Installing the Pocket PC client
The simplest way to install the client is to connect the Pocket PC to the server via the cradle and launch ActiveSync.
Open Windows Explorer and browse to “C:\Standalone Installs \ Pocket PC 2003” or “C:\Standalone Installs \ Pocket PC 2005 M2M” depending on the version of your device and copy the CAB file in that folder to a folder on the Pocket PC.
Once the file has been copied across, on the Pocket PC tap Start and then Programs. Launch File Explorer. Browse to where you saved the CAB file and tap it. The Intellisync client will be installed automatically.
Alternately, connect the Pocket PC to a host PC via ActiveSync and open a web browser. Browse to the web interface for the Intellisync and log in.
Select Settings in the left-hand navigation menu, then Add Sync Device:
The following window will be displayed:
Select Pocket PC as the device type and then click Next. The following window will be displayed:
Select the option to Install to PC. The following window will be displayed:
Click the Install Software button. The application will then be downloaded to the device and installed automatically.
If you receive any security warnings, select the option to Run:
Once the client has been installed on the Pocket PC, a band of icons will be added to the Today screen:
Tap on the right hand icon to display the Intellisync menu:
Tap on the Settings icon:
Tap on the Connection button:
Ensure that the server address is entered correctly and that the user name is entered. Tap OK and the OK again.
To initiate the synchronisation tap the Sync button. You will be prompted to enter your password once the connection to the server has been established and will have 30 seconds in which to enter it.
Verify access via the LAN
Once the client has been configured, connect the Pocket PC to a host PC on the LAN via the cradle and launch ActiveSync.
If this is the first time you are connecting the Pocket PC you will be prompted to create a Partnership:
Click Next
Untick the option to synchronise with an Exchange server. Click Next.
Untick all of the available options and click Next. It is important to ensure that these elements are NOT ticked as it will cause the Intellisync software to malfunction otherwise.
Click Next and then Finish.
Once the ActiveSync partnership has been created, initiate a synchronisation from the Pocket PC by tapping the Sync button.
NOTE – on the Pocket PC, browse to the Intellisync settings page and select the ActiveSync settings. Ensure that ActiveSync connections are enabled:
NOTE – it may be necessary to add a line to the PC’s host file as described above.
NOTE – if the PC normally sends web requests to a proxy server, it may be necessary to bypass the proxy when sending requests.
Open Internet Explorer, open the Tools menu and select Internet Options.
Click on the Connections tab.
Click on the LAN Settings button:
Click on the Advanced button:
In the Exceptions box enter the address of the Intellisync server.
Verify access via GPRS / 3G
In order to verify that the client can access the server via the Internet, you will first need to configure an Internet connection.
See the Appendices for details on creating an Internet connection on a Pocket PC device.
Once the Internet connection has been configured, verify that the device can access the Internet by browsing to Google, then verify that the Intellisync software can synchronise with the server.
If entering the friendly name of the server does not work, try entering the IP address. If this works then the company DNS records may need to be updated.
If neither works, but the user can access other web sites, check whether they are on the Vodafone network. If they are using Vodafone as their provider, they may need to have the Content Barring system lifted from their account.
The content barring system was introduced in August 2004 and will block any IP address that the system does not recognise. This system was originally introduced to prevent under 18s from accessing sites with adult content. Unfortunately the system blocks all unrecognised IP addresses whether they correspond to adult sites or not.
The solution is to have the barring removed from the account. This is done by contacting Vodafone customer services and proving that you are over 18 – normally by having an amount charged to your credit card and then refunded.
Installing the PC client
The simplest way to install the PC client is to open a web browser and navigate to the web interface for the Intellisync server. Log in to the web interface then select Settings and Add Sync Device. Select Windows PC as the device type and follow the on-screen prompts to install the client.
The Intellisync client for Windows requires that Microsoft Outlook be installed and set as the default email program.
NOTE – Offline folders (.oft files) cannot be used with the Intellisync client, it is necessary to set up a separate folder for synchronised information.
Outlook XP / 2003
The most effective solution is to create two Outlook profiles: one for use when in the office (accessing the Exchange server directly), and one for use when out of the office (using the Intellisync client).
Ensure that Outlook is NOT RUNNING.
Open the Control Panel and double click the Mail icon. The following window will be displayed:
Click the Show Profiles button. A list of available profiles will be displayed. You will most likely have one listed called “Outlook”:
Click Copy. You will be prompted to enter a name for the new profile. Enter “In Office” and click OK:
Select the Outlook Profile and click Remove. You will be prompted to confirm that you want to remove the profile, click OK.
Click Add. You will be prompted to enter a name for the new profile, enter “Out of Office” and click OK:
The following window will be displayed:
Select the option to Add a new email account and click Next. The following window will be displayed:
Select the option to create a POP3 account and click Next. The following window will be displayed:
Enter your name in the Name field, and enter your email address in the Email Address field.
In the other fields simply put the letter “a”, the contents of these fields are not relevant.
Click Next. Click Finish.
Both profiles will now be listed. Select the option to Prompt for a profile to be used when starting Outlook:
Select the Out of Office profile and click Properties. The following window will be displayed:
Click the Data Files button. The following window will be displayed:
You should see an entry for Personal Folders.
If the list is empty, click Add. The following window will be displayed:
Select Office Outlook Personal Folders File and click OK.
Click OK again. The following window will be displayed:
Enter a name for the new file, Intellisync is recommended. Click OK.
Click Close and then Close again.
Click OK.
Launch the Intellisync client. Open the Settings menu and select What to Sync…
The following window will be displayed:
Click on Settings to the right of Microsoft Outlook, the following window will be displayed:
From the first drop down menu select the Out of Office profile.
From the second drop down menu select Intellisync.
When starting Outlook you will be prompted to select which profile you want to use: “In Office” or “Out of Office”.
Selecting “In Office” will contact the Exchange server directly.
Selecting “Out of Office” will display the emails that have been synchronised using the Intellisync client.
The client has now been successfully configured. Verify that the client can synchronise with the server both via the LAN and the Internet.
Appendix A – Enabling Network Push
The network push feature of the Intellisync Mobile Suite allows the remote worker to receive email on his or her integrated device on a “live” basis. As soon as an email arrives in your mailbox it will be forwarded to your device, provided that it is connected to the Internet.
Contact and calendar changes can also be delivered if you wish.
Filters can be applied to which emails are “pushed” so that only emails marked urgent are sent, or mails from certain senders, or mails with certain words in the subject etc.
To use the network push feature your firewall will need to be configured to allow outbound access from the Intellisync server on TCP port 3102.
In order to use the network push feature, it must be enabled on the server. Open the Admin console and browse to Profile Settings \ General \ Push/ReadySync \ Default
Open the Properties, the following window will be displayed:
Ensure that the option to Enable Push is ticked.
You will also need to configure an account on the Exchange server with access to the users’ mailboxes which you want to use the network push feature:
Open the Active Directory Users and Computers tool.
Create a new user called “Intellisync Service Account”.
Open the Properties for the user and click on the Exchanged Advanced tab.
Click on the Mailbox Rights button, the following window will be displayed:
Click on the Add button, the following window will be displayed:
Enter the name of the user you want this user to have access to, click the Check Names button to verify that the user can be located. Click OK, the mailbox will be listed:
Select the mailbox and tick the option to allow Full mailbox access.
Repeat this procedure for all the users you want to use network push.
Once this has been done, return to the Intellisync Admin Console and browse to Profile Settings \ Wireless Email \ Microsoft Exchange \ Default. Open the Properties.
In the Exchange Change Monitoring section, tick the option to Monitor using this account, and enter the details of the Exchange service account you created earlier:
Click OK.
If you want to configure the rules governing which mail items are “pushed” to users, browse to Profile Settings \ Email Accelerator \ Push \ Default. Open the Properties, the following window will be displayed:
Configure the options to your requirements.
How does it work?
All devices which are connected to the Internet are assigned an IP address. This is a unique address, much like a postal address, which allows other machines to send data to that device.
When a device connects to the Internet, it will be assigned an IP address automatically. This address may be static (it belongs permanently to that device and does not change) or dynamic (an address will be assigned to the device every time it connects from a “pool” of addresses).
When the Internet connection is established, the Intellisync client software on the device will send a message to the server to let it know that it online, and the server will store that IP address. The client will then continue to send “HELO” messages to the server to let it know that it is still online.
The Intellisync server will constantly monitor users’ mailboxes using the service account created. As soon as a change is made, the server will send the information to the IP address on record for that device. Provided that the device is still online, the data will be received after a few minutes depending on the speed of the Internet connection the device has. Once received, the device will send a message back to the server to indicate that the data was received successfully.
Because mobile devices are, by definition, on the move, and will move between areas of strong and weak signal strength, the Internet connection may be interrupted.
Each time the device reconnects to the Internet it will send a message to the server to indicate that it is online. The server will update its records accordingly with the new IP address information, if the information has changed.
If the sends data to a device and does not receive confirmation that the data was received successfully within an acceptable timeframe, it will assume the device is offline and will resend the data the next time it hears from the device.
Appendix B - Creating a GPRS Internet connection on Microsoft Pocket PC devices
From the Home screen tap on Start and select Settings
Tap on the Connections tab at the bottom of the screen
Tap on the Connections icon
Select the option to Add a new modem connection
Enter a name for the connection and select Cellular Line (GPRS) from the list of modems. Tap Next
Enter the Access Point Name (APN) for your GPRS service provider:
Orange orangeinternet
Vodafone internet
O2 mobile.o2.co.uk
T-Mobile general.t-mobile.uk
Three three.co.uk
and tap Next
Enter your user name and password details:
Orange leave blank
Vodafone use “web” for both
O2 use “web” for both
T-Mobile leave blank
Three leave blank
Leave the Domain field blank.
then tap Finish
Your connection has now been created.