please log in access was denied 0×85010002

In the ISA Monitoring you would see a denied connection on your ActiveSync rule with this status:

12239 The server requires authorization to fulfill the request. Access to the Web server is denied. Contact the server administrator.

I tested with Windows Mobile Emulator from outside the firewall and was able to reproduce the error within hours (just letting it sit there).

I first thought this was the HTTP session timeout that changed with a Exchange 2003  service pack when Direct Push came out back in 2005.  I remembered that setting and looked under the ISA Web Listener for ActiveSync on the Connections tab>Advanced>“connection timeout”.  The wizard had correctly set it to 1800 seconds (30 minutes). No dice.

I poked around the web listener settings some more and noticed the timeout settings for forms authentication were set (this same web listener was used for OWA).  ISA is supposed to be smart enough to not apply any of the forms auth settings to clients that don’t support it (falling back to basic auth as with ActiveSync).

Tom and the forums at isaserver.org confirmed my suspicion.  The forms auth timeout was indeed affecting ActiveSync.  To find it, look for the web listener of your ActiveSync rule, go to properties>Forms tab>Advanced> and make sure “apply session timeout to non-browser clients” is unchecked. 

I used an excellent idea found at the How-To Geek site for creating a rule to prevent the “Oh No!” reaction after sending an email you realize you didn’t mean to send. (i.e. forgot the attachment, left someone off the To: line, etc.).  This rule will delay any message you send in Outlook for a period of time (in minutes).  It will look like it sent, but actually is waiting in your Outbox.

I tweaked that rule a bit from the How-To above.  First, mine is only 1 minute, not 5 as the tutorial above suggests.  I find that you almost always “Oh No” with in 60 seconds.  Second, I put in an exception to send right now if i mark the email as high importance (exclamation mark).  Try it out!