Exchange 2010 SP2 new users not able to connect via Activesync (mobile devices)

Posted on 2013-12-12
Last Modified: 2013-12-24
Exchange 2010 SP2 new users not able to connect via Activesync (mobile devices)

I already made sure that their AD properties under Securities/Advance is checked on "Include inheritable permissions from this object's parent".

We have over 1200 mailboxes.
CAS server has Update Rollups ver 4 and 6 only.

Do I need Rollup 2 for SP2? or Do I need to go to SP3 directly?

Older mailbox/accounts are still able to connect via activesync in their phones.

Note that those that cannot connect via ActiveSync uses either iPhone or Android.
We do have a MS Forefront TMG server in the DMZ before things hit the Exchange Servers. (Just FYI)

Help please.
Question by:asilvestre
  • 4
  • 3
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39716114
I would suggest going to Exchange 2010 SP3 with rollup 4 before you doing anything else. Do the Client Access Servers first. There are lots of problems with ActiveSync from non-Windows Phone devices which have been resolved in the later updates. Particularly with iOS.
Ensure that iOS devices are kept up to date with the latest version of the OS.

Rollups are cumulative - therefore you only need to install the latest one.


Author Comment

ID: 39717063
Thanks Sembee2.

Do you have a link where I can download SP3 and ru4? or does it come with just one download?

I'll try this tonight.

So should I install SP3 first and then ru4?
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39717096
SP3 has to be installed, the server rebooted and then do RU4.

The download links are the first hit on Google.


Both will take about 40 minutes to install.

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why


Author Comment

ID: 39719496
I pushed SP3 and ru4 on the 2 CAS/HUB servers but not yet on the MB server (I'm still waiting for backups to finish).

So far email flow is fine but still not connecting in activesync with new users/mailbox.

I've been reading and I think RU1 resolves the syncing of ActiveSync issues....

Should I install RU1 as well?
Shouldn't it worked already? or really necessary to have SP3 and RU4 installed inside the Mailbox server?

Author Comment

ID: 39720538
I completed the install for the MBX server but still same symptom and no new user can sync with ActiveSync.

So not yet resolved.
LVL 63

Accepted Solution

Simon Butler (Sembee) earned 200 total points
ID: 39721245
Rollups are cumulative - so rollup 4 contains all fixes within previous rollups.

Create a test account and then run it through the Microsoft test site at


Author Comment

ID: 39730258
Still not working with the new SP3 and Rullup4.

So desperately I found that re-establishing Exchange Server object rights to having full control to "this object and all descendant objects" on users' main OU works now on every new accounts.

I'm not sure if this is the best way of doing it but at least ActiveSync is again connecting to mobile devices. Most especially the function to "Create msExchangeActiveSyncDevice".

Thanks Simon/Sembee2 for the effort.

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Find out what you should include to make the best professional email signature for your organization.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to:…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit If you want to manage em…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question