This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exchange profile deploy error -27

I am trying to deploy an Exchange ActiveSync profile to my mobile users.

I'm using a Samsung S6 (so its Android)

When I deploy (task) the profile with the Exchange configuration I receive an error with the notification that it completely failed.

When i look into the task details i see the following lines with the date/time stamps:

- accepted

- Started

- Notified

- Completely failed
  error description:  Intern error
  Error code: -27

I searched through documentation and I my palls from Google, but not one single mention about this on internet.

I did find an error report about error -44 for iOS, and someone requesting the list of error codes because he ran into error -72.
Error -44 seemed to have an answer

The error list request got answered by Sophos claimed there is no list with error codes....


From the Sophos control app I send the logfile to myself. When I start the deployment of the Exchange profile there is nothing in the logfile.

I created a new profile to test where I configured appprotection for Dropbox (to test) and send the logfile to myself again.
Now in the logfile i can actually see that the profile is being applied...

Seems that the Exchange profile is not even being send to the mobile device.... Any place I could check on the server for logfiles or something?



This thread was automatically locked due to age.
  • Hi WimNoordhoek,

    It sounds like it's not communicating with the SMC server... For Android devices you will need to manually install the SSL certificate. Can you confirm the SSL cert has been installed on the device and re-test?

    Also, mobile control logs can be found here:

    C:\Program Files\Sophos\Sophos Mobile Control\jboss\server\mdm\log

    PaulD

  • Hey PaulD

    Ill check into the certificate.

    The communication is happening since all the other settings are being executed properly. It's only the Exchange profile that has no response at all.

    The logs are not to be found on the location you mention. I'm running Server 2012 (so it would be "program files (x86)" but its not there either

    The jboss directory is not present (running the most up-to-date version os SMC)

  • Hi WimNoordhoek,

    most times error -27 indicates an issue regarding personalizing a profile.
    This means, that you most likely have configured e.g. a placeholder like %_EMAILADDRESS_% or %_USERNAME_% within your profile which the SMC server tries to replace with an actual value of a user.
    This may not work if the device which you try to send the profile to is not linked to a user and error -27 might be shown.

    To link a device to a user go to the device and press the "Edit" button. From the "Actoins" pane select "Assign User to device" and search for the user in question. Make sure to save the changes.

    Once the user is linked to the device, you can try to resend the profile which should now be possible.

    Best regards
    Stefan

  • Hello Stefan,

    Sorry for the late reply, I have been swamped with other priority work.

    The device is connected to the user, its been deployed via the selfservice portal. I did check the given steps but instead of Assign I have the option to UNassign... Indicating also that the device is connected....
    I do try to use the variables in the Exchange sync profile.

    Maybe i have not read the manual correct but I dont see any examples of a working configuration or definition of all the possible variables. I would really like to see an example of a working configuration for the Exchange profile.
    Also how can I test if the AES proxy is working propperly?

    FYI:  I'm testing with Samsung Galaxy S6


    Greetings

    Wim

  • I still have a problem deploying the Exchange profile without any clear error telling me what the problem is. This should really be easier to troubleshoot, right?

    All the other settings are being pushed, so that should indicate everything works well.

    Manually installing the Exchange settings in the standard mailclient works just fine but then there is no control over the syncing.
  • Hi Wim,

    you can have a look at the server.log during the time when the profile should be deployed. The server.log might help you a little bit more as it has more details.
    Alternatively, you could contact Sophos support to troubleshoot this topic.

    Best regards
    Stefan