Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2015
  • Last Modified:

Exchange 2013 activesync not working

I have a new Exchange 2013 install on a new Windows Server 2012 R2 in a brand new Domain. Exchange is working fine sending and receiving both internal and external e-mails. OWA is working fine. ActiveSync is not working. I can connect my device (iPhone 6) to my new Exchange server just fine but it will not sync my inbox nor send any e-mails. On the Exchange server, I keep getting:
________________________________________________________________________
Event ID 1053:
Exchange ActiveSync doesn't have sufficient permissions to create the "CN=Test User,OU=Test,DC=MFL,DC=local" container under Active Directory user "Active Directory operation failed on SVR-DC1.MFL.local. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152612, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0"

Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.
________________________________________________________________________

I have already gone through the steps here: https://support.microsoft.com/kb/2579075?wa=wsignin1.0   and still can not sync any device.
0
wilkox1
Asked:
wilkox1
1 Solution
 
John ChristopherAnylystCommented:
Hi,

You've mentioned it is an issue with all d users...
check for the EAS Virtual directory Authetication and URL settings.
TRy and fetch the IIS logs  and Look at errors if any.

also go through this link.. will be helpful

http://msexchangeguru.com/2012/02/01/exchange-activesync/

Thanks & Regards
John Christopher
0
 
Md. MojahidCommented:
1. Run Active Directory Users and Computers.
2. Click on View and Select Advanced Features
3. Select a mailbox that isn’t working with Active Sync, double click on the account.
4. Click the Security Tab and then the Advanced button.
5. Highlight Exchange Servers, and check the Include inheritable permissions from this object's parent.
6. Click OK to save the settings.
0
 
wilkox1Author Commented:
Thanks for the comments.  MD. Mojahid - that worked thank you! Any idea why those permissions didn't get inherited automatically? Is there a way to fix this for all users without editing user by user?

-Mike
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now