Exchange ActiveSync

superiofan
superiofan used Ask the Experts™
on
I'm having problems with one account using an adroid phone with Exchange ActiveSync.

This was after a migration from Exchange 2010 to 2016.    

Tried another account on this phone and it Sync'ed fine.   Tried the account on another phone and it did not work on that phone either.  

OWA for the account works fine.  

The account creates on the phone but nothing Sync's.  

This is the largest account on the server almost 4.5GB
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
IT Architect
Distinguished Expert 2017
Commented:
Please check inheritance permission. Goto AD>Search for user>Properties>Security>Advance and make sure inheritance checked. If not enable it and apply it again. Wait for sometime and test again. Let me know the result.
Mitchell MilliganInformation Technology Network Administrator

Commented:
I had the same exact problem in my environment and Amit's solution is the one that resolved it for us.
Tim EdwardsIT Team Lead - Unified Communications & Collaboration

Commented:
Have you verified that active-sync feature is enabled for this user?
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Top Expert 2015

Commented:
Any error log on the sync that can provide clues?

Author

Commented:
where do I find security under properties?   I'm in the Active Directory Users and Computers.  Under the user Properties I don't see security tab.

Author

Commented:
found this in error log

Exception type: Microsoft.Exchange.Data.Directory.ADOperationException
Exception message: Active Directory operation failed on xxxxx.local.xxxxxxxx.org. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521E1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Exception level: 1

note I changed the domain name in this example.  This user has administrator rights as they are a co-administrator of the domain.

Author

Commented:
also this error in the log

HttpStatusCode: InternalServerError
AirSyncStatusCode: ServerErrorRetryLater
ProtocolLoggerString: ADOperationException1:Active Directory operation failed on xxxxxx.local.xxxxxxxxxxxx.org. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521E1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

XmlResponse:
[No XmlResponse]
Exception stack trace:    at Microsoft.Exchange.AirSync.Common.ADDeviceManager.CreateActiveSyncDeviceContainer(Boolean retryIfFailed)
AmitIT Architect
Distinguished Expert 2017

Commented:
advance.jpgEnable advance feature in AD snap-in. Then open user properties again.
Tim EdwardsIT Team Lead - Unified Communications & Collaboration

Commented:
Best was to do enable to active-sync feature is log into the Exchange admin console and enable the feature;

In the EAC, navigate to Recipients > Mailboxes.
In the list of user mailboxes, click the mailbox that you want to enable or disable Exchange ActiveSync for, and then click Edit Edit icon.
On the mailbox properties page, click Mailbox Features.
Under Mobile Devices, do one of the following:
To disable Exchange ActiveSync click Disable Exchange ActiveSync.
A warning appears asking if you're sure you want to disable Exchange ActiveSync. Click Yes.
To enable Exchange ActiveSync, click Enable Exchange ActiveSync.
Click Save to save your change.

If it is enable disable and re-enable

Author

Commented:
yes I checked to make sure the activesync was enabled.   I did try to disable and re-enable as well.

Author

Commented:
Yes this resolved the problem.   Thank you.
AmitIT Architect
Distinguished Expert 2017

Commented:
Great :)

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial