We help IT Professionals succeed at work.

Exchange ActiveSync

superiofan
superiofan asked
on
255 Views
Last Modified: 2017-03-22
I'm having problems with one account using an adroid phone with Exchange ActiveSync.

This was after a migration from Exchange 2010 to 2016.    

Tried another account on this phone and it Sync'ed fine.   Tried the account on another phone and it did not work on that phone either.  

OWA for the account works fine.  

The account creates on the phone but nothing Sync's.  

This is the largest account on the server almost 4.5GB
Comment
Watch Question

IT Architect
CERTIFIED EXPERT
Distinguished Expert 2017
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
Mitchell MilliganInformation Technology Network Administrator

Commented:
I had the same exact problem in my environment and Amit's solution is the one that resolved it for us.
Tim EdwardsIT Team Lead - Unified Communications & Collaboration
CERTIFIED EXPERT

Commented:
Have you verified that active-sync feature is enabled for this user?
CERTIFIED EXPERT
Top Expert 2015

Commented:
Any error log on the sync that can provide clues?

Author

Commented:
where do I find security under properties?   I'm in the Active Directory Users and Computers.  Under the user Properties I don't see security tab.

Author

Commented:
found this in error log

Exception type: Microsoft.Exchange.Data.Directory.ADOperationException
Exception message: Active Directory operation failed on xxxxx.local.xxxxxxxx.org. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521E1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Exception level: 1

note I changed the domain name in this example.  This user has administrator rights as they are a co-administrator of the domain.

Author

Commented:
also this error in the log

HttpStatusCode: InternalServerError
AirSyncStatusCode: ServerErrorRetryLater
ProtocolLoggerString: ADOperationException1:Active Directory operation failed on xxxxxx.local.xxxxxxxxxxxx.org. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521E1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

XmlResponse:
[No XmlResponse]
Exception stack trace:    at Microsoft.Exchange.AirSync.Common.ADDeviceManager.CreateActiveSyncDeviceContainer(Boolean retryIfFailed)
AmitIT Architect
CERTIFIED EXPERT
Distinguished Expert 2017

Commented:
advance.jpgEnable advance feature in AD snap-in. Then open user properties again.
Tim EdwardsIT Team Lead - Unified Communications & Collaboration
CERTIFIED EXPERT

Commented:
Best was to do enable to active-sync feature is log into the Exchange admin console and enable the feature;

In the EAC, navigate to Recipients > Mailboxes.
In the list of user mailboxes, click the mailbox that you want to enable or disable Exchange ActiveSync for, and then click Edit Edit icon.
On the mailbox properties page, click Mailbox Features.
Under Mobile Devices, do one of the following:
To disable Exchange ActiveSync click Disable Exchange ActiveSync.
A warning appears asking if you're sure you want to disable Exchange ActiveSync. Click Yes.
To enable Exchange ActiveSync, click Enable Exchange ActiveSync.
Click Save to save your change.

If it is enable disable and re-enable

Author

Commented:
yes I checked to make sure the activesync was enabled.   I did try to disable and re-enable as well.

Author

Commented:
Yes this resolved the problem.   Thank you.
AmitIT Architect
CERTIFIED EXPERT
Distinguished Expert 2017

Commented:
Great :)