Exchange 2010 SP2 new users not able to connect via Activesync (mobile devices)

Posted on 2013-12-12
Last Modified: 2013-12-24
Exchange 2010 SP2 new users not able to connect via Activesync (mobile devices)

I already made sure that their AD properties under Securities/Advance is checked on "Include inheritable permissions from this object's parent".

We have over 1200 mailboxes.
CAS server has Update Rollups ver 4 and 6 only.

Do I need Rollup 2 for SP2? or Do I need to go to SP3 directly?

Older mailbox/accounts are still able to connect via activesync in their phones.

Note that those that cannot connect via ActiveSync uses either iPhone or Android.
We do have a MS Forefront TMG server in the DMZ before things hit the Exchange Servers. (Just FYI)

Help please.
Question by:asilvestre
  • 4
  • 3
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39716114
I would suggest going to Exchange 2010 SP3 with rollup 4 before you doing anything else. Do the Client Access Servers first. There are lots of problems with ActiveSync from non-Windows Phone devices which have been resolved in the later updates. Particularly with iOS.
Ensure that iOS devices are kept up to date with the latest version of the OS.

Rollups are cumulative - therefore you only need to install the latest one.


Author Comment

ID: 39717063
Thanks Sembee2.

Do you have a link where I can download SP3 and ru4? or does it come with just one download?

I'll try this tonight.

So should I install SP3 first and then ru4?
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39717096
SP3 has to be installed, the server rebooted and then do RU4.

The download links are the first hit on Google.


Both will take about 40 minutes to install.

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.


Author Comment

ID: 39719496
I pushed SP3 and ru4 on the 2 CAS/HUB servers but not yet on the MB server (I'm still waiting for backups to finish).

So far email flow is fine but still not connecting in activesync with new users/mailbox.

I've been reading and I think RU1 resolves the syncing of ActiveSync issues....

Should I install RU1 as well?
Shouldn't it worked already? or really necessary to have SP3 and RU4 installed inside the Mailbox server?

Author Comment

ID: 39720538
I completed the install for the MBX server but still same symptom and no new user can sync with ActiveSync.

So not yet resolved.
LVL 63

Accepted Solution

Simon Butler (Sembee) earned 200 total points
ID: 39721245
Rollups are cumulative - so rollup 4 contains all fixes within previous rollups.

Create a test account and then run it through the Microsoft test site at


Author Comment

ID: 39730258
Still not working with the new SP3 and Rullup4.

So desperately I found that re-establishing Exchange Server object rights to having full control to "this object and all descendant objects" on users' main OU works now on every new accounts.

I'm not sure if this is the best way of doing it but at least ActiveSync is again connecting to mobile devices. Most especially the function to "Create msExchangeActiveSyncDevice".

Thanks Simon/Sembee2 for the effort.

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

Utilizing an array to gracefully append to a list of EmailAddresses
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
how to add IIS SMTP to handle application/Scanner relays into office 365.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now