Exchange 2010 Active Sync

Posted on 2011-10-10
Last Modified: 2012-05-12
I just installed a new exchange server 2010 with server 2008 64 bit. All users can connect to the active sync via there iphones/android devices i have one user that it keeps saying cannot connect to server.

But, if I change his password to the "wrong" password it tells me the password is incorrect!! His account is enabled for activesync I have double checked that via the GUI interface. I have tried his account from a working phone as well to verify that its nothing to do with the phone. The phone will also connect to other accounts perfectly so it has to be something with his exchange account any thoughts??
Question by:k_hoffhines

    Author Comment

    The users that do have issues are the users that were already members of the domain. The new users are the ones that are working correctly.
    LVL 49

    Accepted Solution

    In exchange 2010 activesync won't work for any member of AD protected groups (like domain admins, enterprise admins etc...)

     so make sure your user isn't part of any protected group and follow the below

    1) Remove the user from the protected group

    2) Goto active directory users and computers, view > advanced features
    Go to the user account, security tab and >  advanced button.
    and tick Include inheritable permissions from this object’s parent.  wait 5 minutes for replication

    Now activesync will work
    LVL 14

    Expert Comment

    I've seen this before with IPhones and it could be down to the way apple interpret active sync policies. If your user is using a strong Password with multiple special characters then the phone Meses this up slightly. For starters I would create a new active sync policy using basic pin passwords and assign the user to this policy if this works then you can experiment with the users password to find one that works.
    LVL 3

    Expert Comment

    Use Microsoft Remote Connectivty Analyzer to aid in isolating the issue:

    If it is a protected group issue follow these steps for testing.

    The common practice I use is to create a separate admin account for administration purposes.  for example say jmunson is the user accouint with a mailbox I'll create jmunson_admin or something to that effect and use that for administrative purposes.

    Author Closing Comment

    Thanks!! Fixed right away!!

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    Join & Write a Comment

    Suggested Solutions

    Title # Comments Views Activity
    outlook 2016 orgnize ideas 2 33
    Office 365 tenant not receiving SMTP emails 5 26
    Exchange 2007 13 18
    Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
    To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now