Link to home
Start Free TrialLog in
Avatar of IT_Fanatic
IT_Fanatic

asked on

MSExchange ActiveSync and iPhone issue urgent

This is so weird for no reason I could not receive emails on my iPhone. Then a few months later it happened to someone else. Everything use to work fine. When I setup the accounts on the device it accepts it and says im connected. Once i go to the actual mailbox it says cant connect to server. I go to the exchange server and I see this. Can someone let me know what they think? What I did to get this to work is go to active directory and select advance mode. I went to security on my profile and gave full control permissions to anything that said exchange. I am guessing from what I read on the error it was telling me to do so. But why did this happen? Also did I even read that error correctly? By me giving myself full control on my profile to anything that says exchange is that a bad thing?

Log Name:      Application
Source:        MSExchange ActiveSync
Date:          10/12/2011 3:00:56 PM
Event ID:      1054
Task Category: Configuration
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      XX8TYDN1-V2.companyABC.com
Description:
Exchange ActiveSync doesn't have sufficient permissions to create the object for device type "iPhone" ID "Appl5K047EJNA4T" under Active Directory container "CN=ExchangeActiveSyncDevices,CN=Charlie Bebe,CN=Users,DC=companyABC,DC=com".
Make sure the container has explicit permission granted to domain\Exchange Servers to allow Read property, List, List object, Write property, Create child, Delete child of object type "msExchangeActiveSyncDevice" and doesn't have any deny permissions that block such operations.

Details:Active Directory operation failed on XX8TYDN1-V2.companyABC.com. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange ActiveSync" />
    <EventID Qualifiers="49156">1054</EventID>
    <Level>2</Level>
    <Task>2</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-10-12T19:00:56.000000000Z" />
    <EventRecordID>167380</EventRecordID>
    <Channel>Application</Channel>
    <Computer>XX8TYDN1-V2.companyABC.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>iPhone</Data>
    <Data>Appl5K047EJNA4T</Data>
    <Data>CN=ExchangeActiveSyncDevices,CN=Charlie Bebe,CN=Users,DC=companyABC,DC=com</Data>
    <Data>Active Directory operation failed on XX8TYDN1-V2.companyABC.com. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
</Data>
  </EventData>
</Event>
ASKER CERTIFIED SOLUTION
Avatar of Alan Hardisty
Alan Hardisty
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of IT_Fanatic
IT_Fanatic

ASKER

I have exchange 2010. Any input if the measures i took were correct? If it will cause any am as well? What I did to get this to work is go to active directory and select advance mode. I went to security on my profile and gave full control permissions to anything that said exchange. I am guessing from what I read on the error it was telling me to do so. But why did this happen? Also did I even read that error correctly? By me giving myself full control on my profile to anything that says exchange is that a bad thing?
This helped but it was partial of the fix that needed to be done.