I am currently in the middle of an email migration from Exchange 2007 to 2013. The company has about 40 iPhone users. After moving a users mailbox they can no longer get their mail. If I check the settings within the iPhone I can see the the server name has changed to the new Exchange 2013 serer as it should. When I look in the Event Viewer I see the following errors:
Exchange ActiveSync doesn't have sufficient permissions to create the "CN=jdoe,OU=Employees,OU=_HPSUsers,DC=abc,DC=LOCAL" container under Active Directory user "Active Directory operation failed on RAMDC2.abc.LOCAL. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.
What could this be?
I have already checked the Inheritable Permissions in the advanced Security setting........