Signin Policies: User Type: Authorization Only Access Virtual Hostname: {your domain name you place in the phone as the active sync server must have a valid DNS record} Backend URL: {the activesync name on your exchange box} Authorization Server: [No Authorization] Role Option: {Your Role that has Web Access to the exchange Box} Protocol Option: Allow Activesync Traffic only [checked] You can always check your settings with a test account @ https://testexchangeconnectivity.com Do other phones work? Hope this helps ... View more

I just tested the iphone 3gs running OS 4.1 without the "Profile fix" and this works, so will test the iphone 4 with OS 4.1 tonight and see what happens. ... View more

Thanks Russ ... View more

OK I ran a config change on the iphone located here and it works: On a side note I did not need to apply this fix to another location that does activesync over a fortigate system. Running the same version exchange 2010, so I still think the juniper is doing somthing to the headers causing the errors. Any info anyone has will be helpful. thanks ... View more