[Webinar] Learn how to a build a cloud-first strategyRegister Now


Exchange 2010 Active Sync

Posted on 2011-10-10
Medium Priority
Last Modified: 2012-05-12
I just installed a new exchange server 2010 with server 2008 64 bit. All users can connect to the active sync via there iphones/android devices i have one user that it keeps saying cannot connect to server.

But, if I change his password to the "wrong" password it tells me the password is incorrect!! His account is enabled for activesync I have double checked that via the GUI interface. I have tried his account from a working phone as well to verify that its nothing to do with the phone. The phone will also connect to other accounts perfectly so it has to be something with his exchange account any thoughts??
Question by:k_hoffhines

Author Comment

ID: 36946561
The users that do have issues are the users that were already members of the domain. The new users are the ones that are working correctly.
LVL 49

Accepted Solution

Akhater earned 2000 total points
ID: 36946586
In exchange 2010 activesync won't work for any member of AD protected groups (like domain admins, enterprise admins etc...) http://technet.microsoft.com/en-us/magazine/2009.09.sdadminholder.aspx

 so make sure your user isn't part of any protected group and follow the below

1) Remove the user from the protected group

2) Goto active directory users and computers, view > advanced features
Go to the user account, security tab and >  advanced button.
and tick Include inheritable permissions from this object’s parent.  wait 5 minutes for replication

Now activesync will work
LVL 14

Expert Comment

ID: 36946973
I've seen this before with IPhones and it could be down to the way apple interpret active sync policies. If your user is using a strong Password with multiple special characters then the phone Meses this up slightly. For starters I would create a new active sync policy using basic pin passwords and assign the user to this policy if this works then you can experiment with the users password to find one that works.

Expert Comment

ID: 36947111
Use Microsoft Remote Connectivty Analyzer to aid in isolating the issue:


If it is a protected group issue follow these steps for testing.  


The common practice I use is to create a separate admin account for administration purposes.  for example say jmunson is the user accouint with a mailbox I'll create jmunson_admin or something to that effect and use that for administrative purposes.

Author Closing Comment

ID: 36951700
Thanks!! Fixed right away!!

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Are you looking for the options available for exporting EDB files to PST? You may be confused as they are different in different Exchange versions. Here, I will discuss some options available.
This article will help to fix the below errors for MS Exchange Server 2016 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
Suggested Courses

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question