Deploying Windows Mobile 2002 with Windows Small Business Server 2003

Updated: May 27, 2009

Applies To: Windows SBS 2003

The Microsoft® Windows® Small Business Server 2003 operating system provides solutions to help your mobile and remote users stay connected to your network even while they are away from the office. This includes users who need access from home, users who work only from a remote location, and users who work both from the main office and from remote locations.

Before You Begin

This paper helps you plan and deploy a solution for mobile or remote users who need to access your network while they are away from the office. This paper assumes that you have already installed your Windows Small Business Server network and that you are now planning to give access to mobile and remote users. If you have not yet installed your Windows Small Business Server network, perform the installation by following the recommendations in the Windows Small Business Server 2003 Getting Started Guide at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkID=20122).

You can think of your users fitting into two categories—remote users and mobile users.

Remote Users

Remote users typically access the network from a desktop or laptop computer. They include users who need to access the network from home, from a remote location, or while traveling.

Remote users can access the information they need using one of the following methods:

• Remote Web Workplace

• Outlook® via the Internet

• Outlook Web Access

• Connection Manager

Users can connect to their client desktop at the office by using Remote Web Workplace. They can then access their computer at work as though they were sitting in front of it. This gives them access to all of the resources on the network, including shared folders, printers, and any other computer resources that they would normally be able to access at the office. To use this feature, the client computer at work must be running the Windows XP Professional operating system or later.

Windows Small Business Server also supports remote users who do not have a client computer running Windows XP Professional or later at the office but who need to access shared folders and printers. In this case, you can use the Remote Access Wizard to configure the server so that these users can connect to shared folders and printers. Remote users can then use Connection Manager on the remote client computer to connect to the network.

Mobile Users

Mobile users access the network from a handheld device, such as a device running Pocket PC, Phone Edition, or a Smartphone running Windows Mobile. These users might travel frequently and need access to information while they are away from the office. They can use Outlook Mobile Access to access their e-mail, calendar, and contacts.

Terms and Definitions

The following terms and definitions are associated with solutions for remote and mobile users:

Remote Web Workplace A web page on your computer running Windows Small Business Server through which users can access their e-mail and calendars, connect to their computers at work by using Remote Desktop, use shared applications, access the company's internal web site, view server performance reports, and connect a computer to the network by downloading Connection Manager.

Outlook via the Internet A means by which users of the Microsoft Office Outlook® 2003 messaging and collaboration client can connect to the server via the Internet to access their e-mail, calendar, and other information. Outlook via the Internet helps users securely access their e-mail from the Internet when they are working away from the office. It does not require users to have additional security-related hardware or software (such as smart cards or security tokens), and users do not need to establish a virtual-private-network (VPN) connection to the server. This allows remote users to use Outlook 2003 to access their e-mail, calendar, and other information in exactly the same manner as if they were at the office.

Outlook Web Access Gives remote users access to their e-mail over the Internet, using their Web browser.

Outlook Mobile Access A web service on the computer running Windows Small Business Server that allows users to access their e-mail, calendar, and contacts from a mobile device. Users can synchronize with the server, or mobile devices that use Wireless Application Protocol (WAP) 2.x can use their browser to access this information.

Broadband A fast, always-on Internet connection that can be more than 10 times faster than a dial-up connection.

Dial-up A slower Internet connection that uses standard telephone lines and modems.

Virtual Private Network (VPN) A means by which remote client computers can securely connect over the Internet to the network. Once connected, users can use a shared folder or printer as if the client computer was connected to the network locally. You can configure this in Windows Small Business Server by running the Remote Access Wizard.

Certificate A digitally-signed file that is used to identify people or computers and to secure communication over the Internet.

Certification Authority (CA) An entity responsible for establishing and vouching for the authenticity of certificates or other certification authorities. A CA can be a commercial entity that is trusted by the general public, or it can be a private entity that is trusted only by users of that entity.

Plan and Deploy Solutions for Mobile and Remote Users

Before you deploy a solution for mobile and remote users, take a few moments to do some planning. It is helpful to determine who will need to access your network remotely, and what information they will need to access. After you determine this, review your Internet connection method to determine whether it meets the needs of your mobile and remote users. Your connection choices may be limited, depending on what is available in your location. After reviewing your Internet connection, determine whether you need to adjust your firewall.

After you have determined your plan, you can begin deploying your solution. This will include configuring your computer running Windows Small Business Server, your client computers, the mobile devices, and potentially your firewall.

• Step 1: Gather information about the users. Gather information about your users and their requirements to help you develop a plan for mobile and remote users.

• Step 2: Review your Internet connection. Review your Internet connection to determine whether it meets the needs of your mobile and remote users.

• Step 3: Configure your network. Configure your computer running Windows Small Business Server and possibly configure your firewall to meet the needs of your mobile and remote users.

• Step 4: Configure the client computers. Configure the client computers to work with the services that you configured on the server.

• Step 5: Configure the mobile devices. If you have users with mobile devices, configure the mobile devices to work with the services that you configured on the server.

Step 1: Gather Information About the Users

Before you begin to deploy your solution, you should first develop a plan. You’ll need some information about your users to help you plan.

1. First, determine who will need access to company resources while they are away from the office. This could be people who work at the office and occasionally need access from home or while traveling, or it could be people who travel most of the time and primarily access the network while they are away from the office. To help you plan, identify your mobile and remote users by using Worksheet 1, “Mobile and Remote Users,” which is in the last section of this document.

2. After you determine who your mobile and remote users are, determine their access requirements by using Worksheet 2, “Requirements of Mobile and Remote Users”, which is in the last section of this document.

3. Determine whether your users will use Outlook via the Internet. When using Outlook via the Internet to access their mailboxes, users get the full functionality of Outlook 2003, just as if they were using Outlook in the office. For example, they can work offline, use Word 2003 as their e-mail editor, and easily organize their mailbox.

4. If your users need to connect to the network to use shared folders or printers, determine how many of them are likely to connect to the network at the same time.

   If the users will be dialing directly to the server via a modem, they are limited by the number of modems and phone lines installed on the server. For example, if the server has one modem with one phone line, only one user at a time can connect to the network. If you need to have more users connect at the same, you need to add modems and phone lines to the server.

   If the users will connect to the network via a VPN, by default your computer running Windows Small Business Server is configured to support five simultaneous VPN connections. For many small businesses, five VPN connections is sufficient. If you anticipate needing more, you can increase the number of available VPN connections. For now, record how many simultaneous VPN connections you need. You will use this number later when you configure the server. To use these additional connections, you must also purchase additional User or Device Client Access Licenses (CALs). For more information about CALs, see the “CAL Guide” at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=28621).

Step 2: Review Your Internet Connection

To connect their network to an Internet Service Provider (ISP), small businesses commonly use either broadband connections, such as DSL and cable, or dial-up connections, such as standard telephone lines or Integrated Services Digital Network (ISDN). Broadband connections are the better choice for connecting your mobile and remote users to the Internet. Broadband connections are fast and always connected, which allows your users to easily connect to your network via the Internet at an acceptable performance level. Contact your ISP to determine whether broadband is available in your area.

If broadband is not available, you need to use dial-up connections. But dial-up connections have some limitations. They are typically slow and are not always connected, so your users will not always be able to connect to your Windows Small Business Server network via the Internet. Also, you need multiple phone lines and modems if you want to support both outgoing and incoming connections simultaneously. For these reasons, it is not practical to use dial-up connections to support mobile users.

Use the following table to help you determine the best connection type for your business.

Connection Types

Connection Type	When to use
Broadband	Multiple users need Internet access all day. Multiple users are connecting simultaneously. Users are connecting across long distances. Programs being used remotely access large amounts of data (such as databases or large Word or Excel files). Remote users need to connect to their office desktop computers while away from the office. Users want to connect to the network with a mobile device. Users need to access shared folders or printers.
Dial-up	Broadband is not available. Limited Internet use; full-time connection not necessary. Small number of remote users, probably connecting only one at a time, by dialing a local number. Programs being used remotely access small amounts of data (such as e-mail).

If users need to connect to shared folders or printers using Remote Web Workplace or a VPN, or if they need to synchronize their mobile devices with the server, you need to have the name of the computer running Windows Small Business Server registered in the Domain Name System (DNS). Contact your ISP about registering the name for you. Use Worksheet 3, “Registered Computer Name,” which is in the last section of this document, to record the registered name and the date it is registered.

Step 3: Configure Your Network

In this step, you configure the computer running Windows Small Business Server to meet the needs of your mobile and remote users. To do this, complete the following procedures:

• Run the Configure E-Mail and Internet Connection Wizard.

  Run this wizard to configure the server for the various services that enable users to connect to the network.

• Run the Remote Access Wizard (if necessary).

  Run this wizard only if your remote users need to connect to shared folders or printers while they are away from the office and Remote Web Workplace does not meet their needs. Refer to Worksheet 2, “Requirements of Mobile and Remote Users,” to determine whether any of your users need this type of access.

  After you run the Remote Access Wizard, run the following wizards to give remote users dial-up or VPN access:

  • For new remote users, run the Add User Wizard

  • For existing remote users, run the Change User Permissions Wizard

  • Configure the number of remote connections available (if necessary)

    Run this wizard only if you ran the Remote Access Wizard and you need more simultaneous connections.

• Finally, examine your firewall to determine whether you need to adjust it so users can connect to your network.

Run the Configure E-mail and Internet Connection Wizard to configure the firewall and the relevant Web services. This procedure focuses on the settings that directly affect the configuration settings for your mobile and remote users. If you need more information about the other settings, click More Information.

To run the Configure E-mail and Internet Connection Wizard

1. Log on to the computer running Windows Small Business Server as Administrator or with an account that has administrative rights and permissions.

2. Click Start, and then click Server Management.

3. In the console tree, click Internet and E-mail.

4. In the details pane, click Connect to the Internet. The Configure E-mail and Internet Connection Wizard appears.

5. On the Connection Type page, ensure that the connection type you have is selected. If you do not need to change the connection type, select Do not change connection type and then click Next.

6. On the Firewall page, if the firewall has not been enabled, click Enable firewall. If the firewall has already been enabled, click Do not change firewall configuration, and then click Next.

7. On the Services Configuration page, make sure the Virtual Private Networking (VPN) check box is selected if you plan to allow mobile and remote users to connect via a VPN, and then click Next.

8. On the Web Services Configuration page, click Allow access to only the following Web site services from the Internet, and select the following check boxes if they are part of your plan for mobile and remote users:

   1. Remote Web Workplace If you select this check box, remote users can connect to your Remote Web Workplace page, which offers one convenient location for accessing e-mail via Outlook Web Access, the company intranet site, and the users’ local desktops, all from a Web browser. This page can be accessed at https://RegisteredDNSName/remote where RegisteredDNSName is your company's registered DNS name.

   2. Outlook Web Access If you select this check box, mobile and remote users can access their e-mail over the Internet using a Web browser.

   3. Outlook Mobile Access If you select this check box, mobile users who use Windows Mobile–based Smartphones or devices running Pocket PC, Phone Edition, can access their e-mail, calendar, and contacts directly from their mobile devices.

   4. Outlook via the Internet If you select this check box, mobile and remote users can access their e-mail over the Internet using Outlook rather than a Web browser. The client computer must be running Windows XP with Service Pack 1 or later and Outlook 2003 or later.

   5. Windows SharePoint® Services intranet site If you select this check box, remote users can connect to your company’s intranet site via your Remote Web Workplace page. If you are using Microsoft Internet Security and Acceleration (ISA) Server 2000, you must follow the instructions in article 838304, “How to publish https://Companyweb to the Internet by using ISA Server” in the Knowledge Base at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkID=20167).

9. When you are finished, click Next.

10. On the Web Server Certificate page, click Do not change current Web server certificate, and then click Next.

11. On the Internet E-mail page, click Do not change Internet e-mail configuration,, and then click Next.

12. Click Finish to complete the wizard.

To run the Remote Access Wizard

Run the Remote Access Wizard only if your remote users need to connect to a shared folder or printer. For more information about any particular page of this wizard, click More Information.

You do not need to run the Remote Access Wizard if you plan to use Remote Web Workplace. It is strongly recommended that you use broadband Internet connections with Remote Web Workplace. You also do not need to run the Remote Access Wizard to allow access from mobile devices.

To run the Remote Access Wizard

1. Log on to the computer running Windows Small Business Server as Administrator or with an account that has administrative rights and permissions.

2. In the Server Management console tree, click Internet and E-mail.

3. In the details pane, click Configure Remote Access. The Remote Access Wizard appears. Click Next.

4. On the Remote Access Method page, click Enable remote access. Then select the VPN access check box if you plan to allow VPN access. Select Dial-in access (requires modem) if you plan to allow users to dial-in directly to the server. Click Next.

5. If you selected VPN access, the VPN Server Name page appears. Enter the full Internet server name that you recorded on Worksheet 3, “Registered Computer Name,”, and then click Next.

6. If you selected Dial-in access (requires modem), the Model Selection page appears. Select the model of your modem and then click Next. The Dial-Up Phone Number page appears.

7. Enter the Primary phone number and Alternate phone number (if applicable), and then click Next.

8. Click Finish to complete the Remote Access Wizard.

To give access permissions to new users using the Add User Wizard

After running the Remote Access Wizard, you must give users permission to access the network. For new remote users who need VPN or dial-up access to a shared folder or printer, run the Add User Wizard. For existing users, run the Change User Permissions Wizard following the instructions in the next procedure.

Give access permissions to new users using the Add User Wizard

1. Log on to the computer running Windows Small Business Server as Administrator or with an account that has administrative rights and permissions.

2. In the Server Management console tree, click Users.

3. In the details pane, click Add a User. The Add User Wizard appears. Click Next.

4. On the User Account Information page, enter the user’s account information, and then click Next.

5. On the User Password page, enter the user’s password, and then click Next.

6. On the Template Selection page, select Mobile User Template to give the user dial-up or VPN access to your network. If the user has administrative duties, select either the Power User Template or the Administrator Template, whichever is more appropriate for the user. Click Next.

7. On the Set Up Client Computer page, click Set up a client computer for this user if the user has a client computer in the main office connected to the network. If so, enter the computer name, and then click Next. If the user does not have a client computer connected to the network at the office, click Do not set up a computer, click Next, and skip to Step 8 of this procedure.

   1. If you chose to set up a client computer, the Client Applications page appears.

   2. Configure the appropriate client applications, and then click Next.

   3. On the Mobile Client and Offline Use page, select the Install Connection Manager check box. Also select the Install ActiveSync 3.7 check box if the user uses a mobile device. Click OK on the Set Up Computer Wizard dialog box.

8. Click Finish to complete the Add User Wizard.

To give access permissions to existing users using the Change User Permissions Wizard

Use this procedure to give existing users VPN or dial-up permission so that they can connect to a shared folder or printer.

Give access permissions to existing users using the Change User Permissions Wizard

1. Log on to the computer running Windows Small Business Server as Administrator or with an account that has administrative rights and permissions.

2. On the Server Management console tree, click Users.

3. In the details pane, click Change User Permissions. The Change User Permissions Wizard appears. Click Next.

4. On the Template Selection page, select Mobile User Template to give the user dial-up or VPN access to the network. If the user has administrative duties, select either the Power User Template or the Administrator Template, whichever is more appropriate for the user. See the Note in the previous procedure for definitions of these types of users. Click Next.

5. In the User column, click the name of the user whose permission you would like to change, and then click Add. You can add multiple users if you need to. When you are finished, click Next.

6. Click Finish to complete the Change User Permissions Wizard.

To increase the number of VPN connections

Use this procedure to increase the number of VPN connections that are available. You need to do this only if you determined during your planning that you might have more than five VPN users connecting at the same time.

Increase the number of VPN connections

1. Log on to the computer running Windows Small Business Server as Administrator or with an account that has administrative rights and permissions.

2. Click Start, select Programs, select Administrative Tools, and then click Routing and Remote Access.

3. If the tree is not expanded already, double-click your computer name, right-click Ports, and then click Properties.

4. Select WAN Miniport (PPTP), and then click Configure.

5. On the Configure Device - WAN Miniport (PPTP) page, increase the Maximum ports number from 5 to a number that will meet your requirements, and then click OK.

6. Click OK to close the Ports Properties window.

7. Close the Routing and Remote Access management console.

Next, examine your firewall solution to determine whether you need to adjust its configuration. If you use an external firewall device, you might need to configure it to allow mobile and remote users access to your Windows Small Business Server network.

In many cases, you do not need to adjust the firewall configuration manually. For example, if your server uses two network cards and you have configured it as your firewall or if you have a firewall device on your network that supports configuration by the UPnP™ standard, you can use the Configure E-mail and Internet Connection Wizard to configure the firewall.

If your server uses one network card to access both the local network and the Internet and you use a firewall device that does not support the UPnP standard, you need to configure the device manually. Consult the manual or the technical support for the device to determine how to do this.

For information about what settings need to be configured on your firewall, see Appendix C of the Windows Small Business Server 2003 Getting Started Guide at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkID=20122).

Step 4: Configure the Remote Client Computers

There are three procedures that you can perform to help your remote users connect to your Windows Small Business Server network. Complete any or all of the following procedures, as appropriate for your users:

• Configure Outlook via the Internet so that the remote users can use Outlook 2003 to read their e-mail, calendar, and other information.

• Download Connection Manager from Remote Web Workplace if the remote users need to connect to shared folders or printers.

• Create a Remote Connection Disk if the remote users need to connect to shared folders and printers but cannot download Connection Manager from your Remote Web Workplace.

To configure Outlook via the Internet

If remote users want to access their e-mail using Outlook via the Internet, you need to configure their client computers. You also need to make sure you configured the server to offer this service, which was covered in “Step 3: Configure Your Network.”

You can find instructions to configure the client computers on your Remote Web Workplace page. Follow the procedure below to find the instructions.

Configure Outlook via the Internet

1. From a remote client computer, browse to the following URL in the address bar: https://RegisteredDNSName/remote(where RegisteredDNSName is your company's registered DNS name).

2. Log on to Remote Web Workplace, and then click Configure your computer to use Outlook via the Internet.

3. Follow the instructions to configure the computer to use Outlook via the Internet.

To download Connection Manager from Remote Web Workplace

If remote users need to connect to the network via VPN or dial-up connections, and their computers do not have Connection Manager installed on them, the users can download Connection Manager from the Remote Web Workplace page.

This procedure works only if the network uses broadband Internet connections.

Download Connection Manager from Remote Web Workplace

1. From the remote client computer, browse to the following URL in the address bar: https://RegisteredDomainName/remote(where RegisteredDomainName is your company's registered DNS name).

2. Log on to Remote Web Workplace, and then click Download Connection Manager.

3. Follow the instructions to install Connection Manager.

To create a Remote Connection disk

If the remote users cannot connect to Remote Web Workplace (for example, if your network connects to the Internet using only dial-up connections), you can create a Remote Connection disk to give to them. This procedure helps you create a floppy disk that installs Connection Manager.

Create a Remote Connection disk

1. Log on to the computer running Windows Small Business Server as Administrator or with an account that has administrative rights and permissions.

2. On the Server Management console tree, click Client Computers.

3. In the details pane, click Create Remote Connection Disk. The Create Remote Connection Disk Wizard appears.

4. Complete the wizard to create the floppy disk. You can specify how many disks you want to create.

Step 5: Configure the Mobile Devices

Before users can use their mobile devices with the server, you need to first configure a certificate solution. Next, you need to configure ActiveSync so that it can synchronize the mobile device with the server.

A certificate solution is required if mobile users need to securely access their Internet e-mail on the server with a Windows Mobile–based Smartphone; a mobile device running the Pocket PC, Phone Edition, software; or a mobile device that uses the Wireless Application Protocol (WAP) 2.x. The certificate solution that you can use depends on the device type and version.

You can purchase certificates from a trusted certification authority (CA), or you can generate and self-sign your own certificates using the Configure E-mail and Internet Connection Wizard in Windows Small Business Server. If you purchase a commercial certificate and install it on your server, anybody in the general public can securely communicate with your server. If instead you generate a self-signed certificate, you eliminate the need to purchase a certificate, but the general public cannot securely communicate with your server. Only the client computers of your network can trust a self-signed certificate.

You do not need a commercial certificate on your server if the mobile devices are running Windows 2003 or later software. For these devices, you can use either a self-signed certificate that you create or a commercial certificate that you purchase from a trusted CA. When you connect one of these mobile devices to a client computer, the certificate information is pushed automatically from the server to the mobile device via ActiveSync, and the user does not need to take any further action.

However, if the mobile devices are running Windows Mobile 2002 software, then the server must have either a certificate from a trusted CA or you must follow a procedure so the device works with a self-signed certificate that you create. This procedure decreases the security of your mobile device. Therefore, the recommended and most secure method is to use a commercial certificate.

For information about the certificate requirements of non-Microsoft mobile devices, consult the documentation or technical support of the mobile-device manufacturer.

To request a commercial certificate from a trusted certification authority

If you want to use a commercial certificate from a trusted certification authority (CA), you must first generate a certificate request using the Internet Information Services (IIS) console.

Request a commercial certificate from a trusted certification authority

1. Log on to the computer running Windows Small Business Server as Administrator or with an account that has administrative rights and permissions.

2. Click Start, and then click Server Management.

3. In the console tree, click Advanced Management, click Internet Information Services, click your server name, and then click the Web Sites folder.

4. In the details pane, right-click Default Web site, and then click Properties.

5. On the Default Web Site Properties page, click the Directory Security tab, and under Secure communications, click Server Certificate.

6. On the Server Certificate page of the IIS Certificate Wizard, click Create a new certificate.

7. On the Delayed or Immediate Request page, click either Prepare the request now, but send it later or Send the request immediately to an online certificate authority, as needed.

8. On the Name and Security Settings page, in Name, type a name for the new certificate. Next, select the appropriate bit length based on your organization's requirement. Verify with the CA that it supports certificates of the corresponding encryption strength before you submit the certificate request.

9. On the Organization Information page, in Organizational Name, type the legal name of your organization. In Organizational unit, type the name of your division of department. If your organization does not have a division, you can type the legal name of your organization.

10. On the Your Site's Common Name page, type the common name for your site exactly as it appears to external users, such as www.MyDomain.com.

11. On the Geographic Information page, type the required information.

12. On the Certificate Request File Name page, type a file name.

13. On the Request File Summary page, click Next.

14. Click Finish.

To install a commercial certificate from a trusted certification authority

After you have requested the certificate, the certification authority (CA) sends you the certificate file and instructions for installing it. You must then rerun the Configure E-mail and Internet Connection Wizard to change your Web server certificate settings.

Install a commercial certificate from a trusted certification authority

1. Log on to the computer running Windows Small Business Server as Administrator or with an account that has administrative rights and permissions.

2. Click Start, and then click Server Management.

3. In the console tree, click Internet and E-mail.

4. In the details pane, click Connect to the Internet. The Configure E-mail and Internet Connection Wizard appears. Click Next.

5. On the Connection Type page, select Do not change connection type, and then click Next.

6. If your server has two network adapters, the Firewall page appears. Click Do not change firewall configuration, and then click Next.

7. If your server has one network adapter, the Web Services Configuration page appears. Click Next.

8. On the Web Server Certificate page, click Use a Web server certificate from a trusted authority.

9. Click Browse to browse to the folder where the certificate file is located.

10. Select the certificate file, and then click Open.

11. Click Next.

12. On the Internet E-Mail page, click Do not change Internet E-mail configuration, and then click Next.

13. Click Finish to complete the wizard.

To configure ActiveSync to synchronize the mobile device with the server

The following procedures configure a mobile device to synchronize with the server over a wireless service-provider network. They assume that you have already configured the server and the client computer. If this is not the case, configure the server and client computer now by performing Steps 3 and 4 of this document.

Also, these procedures assume that your mobile device already can access the Internet. If it cannot, contact your wireless service provider to properly configure your mobile device to access the Internet.

Configure ActiveSync to synchronize the mobile device with the server

1. Connect the mobile-device cradle to a USB or serial port on a client computer that is connected to your Windows Small Business Server network.

2. Insert the mobile device into the cradle and turn the device on.

3. The ActiveSync New Partnership Wizard appears on the client computer desktop.

4. Verify that Standard Partnership is selected, and then click Next.

5. Select Synchronize with Microsoft Exchange Server and/or this desktop computer, and then click Next.

   The Enable synchronization with a serverpage appears.

6. Verify the server name in the Server name text box. You recorded this name in Worksheet 3, “Registered Computer Name.”

7. Verify that the This server uses an SSL connection check box is selected.

8. In the User name text box, enter your logon name.

9. In the Password text box, enter your password.

10. Verify the domain name in the Domain text box. This should be the domain name of the computer running Windows Small Business Server.

11. Select the Save Password check box.

12. Click Next.

13. Select the Calendar, Contacts, and Inbox check boxes,, and then click Next.

14. Select any options that you would like to synchronize with the mobile device, and then click Next.

15. Click Finish to complete the New Partnership Wizard.

16. The mobile device synchronizes with the client computer and the server. It continuously synchronizes while it is connected to the desktop.

To configure Microsoft mobile devices running Windows Mobile 2002 to work with your self-signed certificate

Configure Microsoft mobile devices running Windows Mobile 2002 to work with your self-signed certificate

1. Download the Disable Certificate Verification tool from the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=28726).

2. Click Download to start the download.

3. Do one of the following:

   1. To start the installation immediately, click Open or Run this program from its current location.

   2. To copy the download to your computer for installation later, click Save or Save this program to disk.

4. Ensure that the mobile device is connected to the client computer and that ActiveSync is installed. A partnership is not necessary. You may connect as Guest if you want to.

5. On the client computer, open a command prompt, and change to the directory containing the file CERTCHK.EXE.

6. To disable certificate checking, type: CERTCHK off and press the Enterkey.

To configure the mobile schedule on the mobile device

You can now configure the mobile schedule on the mobile device, which establishes how often the mobile device attempts to synchronize with the server.

You can configure the mobile device to synchronize with the server whenever new items arrive. However, unless you have unlimited data service and do not pay extra for Systems Management Server (SMS) messages, this can increase your wireless bill. You should review this possible extra expense before you select this option.

The default synchronization setting is manual. If you want to change this setting, use the following procedure.

Configure the mobile schedule on the mobile device

1. Turn on the mobile device and select Start, ActiveSync.

2. Select Sync.

3. During synchronization, a dialog appears that asks if you want to synchronize items as they arrive. Click Yes.

4. On the Mobile Schedule page, choose an interval for synchronizing during peak times, off-peak times, and while roaming that fits your billing and user needs,, and then click OK.

5. If you select When new items arrive for either the peak times or off-peak times, a device address dialog appears that indicates you must supply delivery-address information. Click OK to continue.

6. On the Device Address page, enter your Device SMS address. You can obtain this address from your wireless provider.

7. Click OK to close the Device Address page.

8. Click OK to close the Mobile Schedule page.

If you want to manually synchronize the mobile device with the server, use the following procedure.

Manually synchronize the mobile device with the server

1. Turn on the mobile device and select Start, ActiveSync.

2. Select Sync.

Troubleshooting

A user who is accessing Microsoft Outlook Mobile Access (OMA) on Windows SBS 2003 with a handheld computing device may receive the error, "Item no longer exists. The item you are attempting to access may have been deleted or moved." In this case, the path name of the virtual directory for OMA may not be correct.

To update the path name of the virtual directory for OMA

1. Click Start, click Administrative Tools, and then click Internet Information Services (IIS) Manager. The Internet Information Services (IIS) Manager opens.

2. In the console tree, click to expand the node with the local computer name, click to expand the Web Sites node, and then click to expand the Default Web Site node.

3. Right click exchange-oma, and then click Properties.

4. On the Virtual Directory tab, examine the path in the Local path text box. The syntax for the path should be \\.\backofficestorage\DomainName\mbx, where DomainName is the e-mail domain name that you specified when you set up e-mail in the Configure E-mail and Internet Connection Wizard (CEICW).

5. If the local path name is not correct, type the correct path name, using the syntax \\.\backofficestorage\DomainName\mbx, where DomainName is the e-mail domain name that you specified when you set up e-mail in the CEICW.

6. If you are not certain what the primary e-mail domain name is, do the following:

   1. Move the exchange-oma Properties box so that you can see the console tree in Internet Information Services (IIS) Manager.

   2. Right-click Exchange, and then click Properties.

   3. Copy the entire path name that is in the Local path text box, and then paste the path name into the Local path text box in the exchange-oma Properties box.

7. Click OK to save the changes, and then close Internet Information Services (IIS) Manager.

8. Click Start, and then click Command Prompt.

9. At the command prompt, type iisreset, and then press Enter. The Microsoft Exchange System Attendant Service stops and then restarts, pointing to the new path that you just set up.

Related Links

See the following resources for further information:

• “Securing Your Windows Small Business Server 2003 Network” at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkID=28727).

• “Windows Mobile Frequently Asked Questions” at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkID=28728).

• For the latest information about Windows Small Business Server 2003, see the Windows Small Business Server 2003 Web site (https://go.microsoft.com/fwlink/?LinkID=22341).

Mobile and Remote Users Worksheets

Worksheet 1   Mobile and Remote Users

Prepared by:

Date Prepared:

Use this worksheet to record information about the users who need to connect to your Windows Small Business Server network from a remote location. For each user, record the following information:

• Name: The name of the user

• User account: The user’s logon name

• Types of Use: Home, remote office, travel, etc.

Name	User Account	Types of use

Worksheet 2   Requirements of Mobile and Remote Users

Prepared by:

Date Prepared:

Use this worksheet to record your the requirements of the remote and mobile users. This information helps you determine how to configure your solution for remote and mobile users.

• User Account Record the name of the user account. This is either an existing user account or one that you need to create for a new user.

• Device Types Record the types of devices that users want to connect to the network. Examples include a laptop; a desktop; a Windows Mobile–based Smartphone; a device running the Pocket PC, Phone Edition, software; or a similar mobile device.

• Connection Type Record the type of connection the user uses to connect to the network. For example, the user can use a broadband connection; a modem and dial-up connection to directly access the server; a modem and dial-up connection to connect to the Internet; or a wireless service provider using a Windows Mobile–based Smartphone, a device running the Pocket PC, Phone Edition, software, or a similar mobile device.

• Applications Record what programs the user needs to run that access the Windows Small Business Server network. Examples include Outlook, remote desktop connections, a business program, a word processor, etc.

• Shared folder or printer access? (Yes or No) Record whether the user needs to connect to shared folders or printers on the Windows Small Business Server network. Most users do not need to do this, but some applications require it. If you are not sure, check with the application vendor.

User Account	Device Types	Connection Type	Applications	Shared folder or printer access? (Yes or No)

Worksheet 3   Registered Computer Name

Prepared by:

Date Prepared:

Use this worksheet to record your server’s full Internet computer name, which is registered with your ISP, and the date that the name was registered. For example, the full Internet computer name might look like: MyComputerName.MyBusiness.com. Date name was registered __________________________________________________________ Registered name __________________________________________________________