Link to home
Create AccountLog in
Avatar of adembo
ademboFlag for United States of America

asked on

Members of child domain cannot use activesync after migration to exchange 2010 sp1

I have successfully migrated all my users from exchange 2007 to exchange 2010. All my users in domain.local are syncing fine with all types of phones. Android/iphone/windows7/IPAD.

I have several users who are in a child domain of domain.local who I had issues with migrating. I found out it was that there was not the appropriate permissions being inherited in the child domain from the parent domain. So i overcame that by granting the exchange servers security group on each of their accounts full control, which then allowed the mailboxes to be moved. Everything is working, except the syncing of phones for them. This is what I get in the event log:

--- Exception start ---
Exception type: Microsoft.Exchange.AirSync.AirSyncPermanentException
Exception message: A null value was received for the NTSD security descriptor of container CN=ExchangeActiveSyncDevices,CN=John Doe,OU=Project Management,OU=Domain South,DC=south,DC=domain,DC=local.
Exception level: 0
HttpStatusCode: 500
AirSyncStatusCode: 110
XmlResponse:
This request does not contain a WBXML response.
Exception stack trace:    at Microsoft.Exchange.AirSync.ADDeviceManager.SetActiveSyncDeviceContainerPermissions(ActiveSyncDevices container)
   at Microsoft.Exchange.AirSync.ADDeviceManager.CreateActiveSyncDeviceContainer(Boolean retryIfFailed)
   at Microsoft.Exchange.AirSync.ADDeviceManager.CreateActiveSyncDevice(GlobalInfo globalInfo, ExDateTime syncStorageCreationTime, Boolean retryIfFailed)
   at Microsoft.Exchange.AirSync.Command.UpdateADDevice(GlobalInfo globalInfo)
   at Microsoft.Exchange.AirSync.Command.CompleteDeviceAccessProcessing()
   at Microsoft.Exchange.AirSync.Command.WorkerThread()
--- Exception end ---.

Any help would be appreciated. I have the latest rollup 6 for exchange 2010 sp1 installed as well.

The users accounts in the child domain do have the inherit permission box selected on their accounts, which was a common theme upon searching through forums for that error.
ASKER CERTIFIED SOLUTION
Avatar of adembo
adembo
Flag of United States of America image

Link to home
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
See answer
Does setup.com /preparedomain  complete without errors ?
or setup.com /pad
Eventhough inherit permission is ticked it's still a permission issue. You can compare both users permission. One of OKuser and the other NotOKuser with :
[PS] C:\>Get-ADPermission -Identity NotOKuser |ft -AutoSize -Wrap