Microsoft Knowledge Base Email Alertz

Windows Phone 7 fails to synchronize with error 0x85010013 or 0x8600C2B when connecting to Microsoft Exchange Server

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Error 85010013, 8600C2B, or 86000C29 when you try to synchronize a Windows Phone-based device to an Exchange server

Article ID: 2464593 - View products that this article applies to.

On This Page

Symptoms

When you connect to a server that is running Microsoft Exchange Server by using a Windows Phone-based device, synchronization fails. Additionally, you receive an error message that resembles one of the following:

Error message 1
Mail.Contoso.com requires that certain security policies be enforced before you can sync your information. Contact a support person or your service provider.

Last tried x minutes ago.

Error code: <ErrorCode>

Error message 2
Mail.Contoso.com requires that certain security policies be enforced. Try syncing again to apply the policies. If you keep seeing this message, contact a support person or your service provider.

Last tried x minutes ago.

Error code: <ErrorCode>

In these error messages, the placeholder <ErrorCode> represents one of the following error codes:
  • 0x85010013
  • 0x8600C2B
  • 86000C29


Cause

This issue occurs if an Exchange ActiveSync mailbox policy was implemented that uses parameters that the Windows Phone-based device cannot completely enforce. 

The Exchange Client Access server responds to the device with an HTTP status of 449 when the device cannot enforce every parameter within the Exchange ActiveSync mailbox policy. Each successive synchronization attempt will fail with an HTTP status of 449 while the current Exchange ActiveSync policy is in place.

Resolution

To resolve this issue, change an existing Exchange ActiveSync policy, or create a new Exchange ActiveSync policy, so that the policy applies to Windows Phone-based devices. To do this, take one of the following actions:
  • Change the existing Exchange ActiveSync policy to apply only to supported policy parameters.
  • Create a new Exchange ActiveSync policy that applies the supported policy parameters that Windows Phone devices can implement. Then, assign this policy to Windows Phone users.

Workaround

To work around this issue on a Windows Phone 8-based device, enable the Allow Non-provisionable Devices parameter in your Exchange ActiveSync policy.

Important The Allow Non-provisionable Devices parameter lets devices synchronize. This is true even when policies that the device can enforce do not match the Exchange ActiveSync policy parameters that are configured on the server.

More information

Exchange ActiveSync Mailbox Policies


The following tables detail the policies that are supported by Windows Phone devices.

Policy parameters that are supported by Windows Phone 7
Collapse this tableExpand this table
PasswordRequiredAllowSimplePasswordDisableIrDA
MinPasswordLengthPasswordExpirationDisableDesktopSync
IdleTimeoutFrequencyValuePasswordHistoryBlockRemoteDesktop
DeviceWipeThresholdDisableRemovableStorageBlockInternetSharing


Policy parameters that are supported by Windows Phone 8
Collapse this tableExpand this table
AllowSimpleDevicePasswordMaxInactivityTimeDeviceLock
AlphanumericDevicePasswordRequiredMinDevicePasswordComplexCharacters
DevicePasswordEnabled MinDevicePasswordLength
DevicePasswordExpirationRequireDeviceEncryption
DevicePasswordHistory RemoteWipe
IrmEnabled AllowNonProvisionableDevices
MaxDevicePasswordFailedAttempts

Note Additionally, the EAS policy parameter AllowStorageCard is supported when devices are managed by using Microsoft System Center Configuration Manager.  

For information about how to change or create Exchange ActiveSync policies, go to the following Microsoft TechNet websites:

http://technet.microsoft.com/en-us/library/bb123783.aspx

http://technet.microsoft.com/en-us/library/bb123783(v=exchg.141).aspx

http://technet.microsoft.com/en-us/library/bb123783(v=exchg.80).aspx


Common issues
Microsoft Support frequently receives support requests for issues about ActiveSync Mailbox policy enforcement. The most common cause of these issues is the presence of unsupported policy parameters. When the AllowNonProvisionableDevices parameter is set to False, policy parameters must be enforced for the device to be provisioned successfully, unless there is a valid reason for the policy parameter to be ignored.

Supported policy parameters are listed earlier in this article. When you troubleshoot issues about policies, the existing policies should be reviewed for the presence of an unsupported parameter that cannot be ignored. This includes both default and customized policies. A detailed list of policies and their enforcement is available on the following Microsoft Developer Network (MSDN) webpage:
http://msdn.microsoft.com/en-us/library/ee200827(v=exchg.80).aspx
The following example details an issue with the current version of Windows Phone 8, and will be addressed in a future update.

When the policy parameter Require Encryption on Storage Card is enabled, Windows Phone 8 devices misreport the presence of an SD card, even if the device has no SD card slot. The policy enforcement occurs, provisioning fails, and the device cannot be synchronized. 

According to MSDN topic 2.2.2.51 (RequireStorageCardEncryption) about the policy parameter, if the policy parameter is present but the device does not support removable storage, the parameter should be ignored, and the device should be able to synchronize.

To work around this issue, use the methods that are mentioned in the "Resolution" and "Workaround" sections for the Windows Phone 8 devices.

References

For more information about policies that are supported by Windows Phone, go to the following TechNet website:
http://technet.microsoft.com/en-us/library/aa998357.aspx#WindowsPhone7

For more information about Windows Phone device management and policies that are supported by Windows Phone, go to the following TechNet website:
http://go.microsoft.com/fwlink/?LinkId=270085

For more information about what to consider when you use Windows Phone 7 and Exchange Server, go to the following TechNet website:
http://social.technet.microsoft.com/wiki/contents/articles/exchange-activesync-considerations-when-using-windows-phone-7-clients.aspx


Properties

Article ID: 2464593 - Last Review: May 21, 2013 - Revision: 8.0
Applies to
  • Microsoft Exchange Server 2007 Enterprise Edition
  • Microsoft Exchange Server 2007 Standard Edition
  • Microsoft Exchange Server 2010 Enterprise
  • Microsoft Exchange Server 2010 Standard
Keywords: 
kbsurveynew kbwp8 kbtshoot kbprb KB2464593
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate