ActiveSync issues with iPhone 3Gs & Exchange 2010 RC

Not open for further replies.


Unable to sync with my iPhone 3Gs - seems to be a permissions issue ?

Log Name:      Application

Source:        MSExchange ActiveSync

Date:          28/08/2009 10:28:52

Event ID:      1053

Task Category: Configuration

Level:         Error

Keywords:      Classic

User:          N/A



The Exchange ActiveSync doesn't have enough permissions to create "CN=Ian,OU=Users,OU=Konnexion,DC=konnexion,DC=net" container under AD user "Active Directory operation failed on This error is not retriable. Additional information: Access is denied.

Active directory response: 00000005: SecErr: DSID-03152492, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0


Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions blocking such operartions.

Brian Day MCITP [MVP]

Did you already do what it said and make sure inherited permissions are on? If your user is or ever was a member of an AD protected group then it'll be off.Brian Day / MCSA / CCNA, Exchange/AD geek.


Brian I'm not exactly sure what it's telling me and where to go to fix it. By "user" does it mean my domain account, ie the account trying to activesync ?


Got it, thanks !

For anyone else as confused as I was, bring up Properties/Security of the user account, click on Advanced and enable the checkbox "Include inheritable permissions from this object's parent"


Arman Obosyan [MVP]

same issue on Windows Mobile 6.x (tested on 6.5, 6.1, 6.0) so its not Mobile Device platform issue

Seems its litle bug in Exchange Server 2010 RC, I tested it on 14.0.639.11, and DC running on Windows Server 2008 R2,
Arman Obosyan,

Brian Day MCITP [MVP]

Not a bug. It is just proving people out there are not following best practices and are using their admin accounts for email and daily tasks. :)  If you are a member of a protected group AD will remove inheritence automatically every 1 hour. Use a non-admin account for your day to day stuff and use run-as for an admin account to perform admin tasks.

Brian Day / MCSA / CCNA, Exchange/AD geek.

Brian Day MCITP [MVP]

Glad it's working now! :)Brian Day / MCSA / CCNA, Exchange/AD geek.

Arman Obosyan [MVP]

will remove inheritence automatically Very cool :)
Thanks Brian!

I use my standard account, but later found that is member of schema admin (left after some experiments), so i remove it :)

Thanks again!
Arman Obosyan,


Thanks for the info on Exchange with iphone devices and the protected groups within AD.

Now we know why we were having issues after our upgrade, with our admin staff accessing email via iphones.

Now for the next evolution, just wondering if you know if the same problem occurs when using exchange 2010 and blackberry devices via a BES or BES express server?

thanks in advance.

Dave Savoie


Yes, this issue presents itself when working with Blackberry Server (BES, BES Express, etc.) We had to remove everyone from the Domain Admin protected group before their Blackberrys would work because the BES Admin account you use for Blackberry services, will not propogate permissions down to those protected accounts.
Not open for further replies.
Thread starter Similar threads Forum Replies Date
S 2010 CAS > 2003 BE - ActiveSync issues... Exchange Server Administration 1
B ActiveSync issues with TMG/ISA in permieter network Exchange Server Administration 3
J 2010 SP1 Upgrade introduced ActiveSync issues with Windows Mobile via TMG Exchange Server Administration 5
E Customer wants a portion of GAL from exchange to sync down to Android contacts via Activesync Using Outlook 2
PMR0001 Exchange cf Exchange ActiveSync Exchange Server Administration 1
B Outlook Anywhere vs Activesync and Enterprise Security Exchange Server Administration 8
A Unable to send with attachments in Outlook 2013 (Exchange ActiveSync) Using Outlook 2
B Outlook syncing -- Outlook 365 and Sky Drive and Exchange ActiveSync Using Outlook 0
J Exchange 2010 + Disable ActiveSync/Outlook Anywhere/POP/IMAP/ By Default Exchange Server Administration 5
M Exchange ActiveSync HTTP 500 Exchange CAS/HUB 2007 and Exchange 2003 BE & MBX CCR 2007 Using Outlook 1
O Exchange Activesync gives support code: 0x86000c01 after Exchange Server Migration Using Outlook 4
S Activesync Device Quarantine issue Exchange Server Administration 1
W ActiveSync redirection Using Outlook 1
T About activeSync v14.0 ,Sendmail status code is 110, means unknown server error. Could you tell Exchange Server Administration 1
M Activesync having difficulty syncronizing large mailboxes Using Outlook 1
M Startcom SSL certificate not working for Exchange 2010 Activesync Exchange Server Administration 3
T ActiveSync proxy problem from Exchange 2010 CAS to Exchange 2007 CAS Exchange Server Administration 5
A Are Public Folders Contacts available through activesync for Windows Phone 7, Iphone, etc? Exchange Server Administration 3
R Outlook support for Exchange ActiveSync protocol Using Outlook 1
S How to set public SSL cert for Activesync? Exchange Server Administration 3
C Help Configuring Exchange Server 2003 SP 2 for ActiveSync with a Droid X Using Outlook 11
R ActiveSync Not Working with Exchange 2010 Using Outlook 3
C How to allow admins to enable ActiveSync and edit address book information in EMC Exchange Server Administration 3
L Re: IPhone and ActiveSync (just ActiveSync). Using Outlook 10
K Exchange 2003 SP2 OWA error 500 / unspecified on Frontend, while OMA and ActiveSync is working, even Using Outlook 3
G MS Exchange ActiveSync 2007 Denying Select Devices Exchange Server Administration 2
S Activesync Quarantine Devices Exchange Server Administration 3
A ActiveSync can't send emails to certain accounts, but problem does not exsit in OWA / Outlook Exchange Server Administration 4
P Exchange 2003 and Activesync and IPhones Using Outlook 4
G How to enable Outlook Anywhere for domain joined clients, enable Exchange ActiveSync, but disable OA Exchange Server Administration 1
M activesync doesn't work on some mobiles Exchange Server Administration 6
S exchange 2010 activesync not proxying to 2003. "TiSyncStateLocked_Mbx:" Exchange Server Administration 4
L IPhone and ActiveSync (just ActiveSync). Using Outlook 22
C Exchange 2010 not accepting activesync or outlook connections Exchange Server Administration 10
D Exchange 2010 ActiveSync: Two phone will not connect Exchange Server Administration 2
K Only one node of Exchange 2003 NLB cluster responds to Activesync requests Exchange Server Administration 1
C 2010 sp1 legacy activesync fails Exchange Server Administration 6
M Quarantine ActiveSync Devices Exchange Server Administration 4
M Exchange 2010 sp1 ActiveSync not working for HTC Desire (Bravo) Anrdoid 2.1 with Telstra firmware (A Exchange Server Administration 39
M SendMail problem with ActiveSync 14.0 (Exchange Server 2010) Exchange Server Administration 3
S ActiveSync Error 0x80070006 on phone Exchange Server Administration 9
D ActiveSync Error : 0x85010014 - Exchange 2010, TMG 2010, WM6.5 Exchange Server Administration 7
D IIS Returns HTTP 505 Version Not Supported when accessing Microsoft-Server-ActiveSync Exchange Server Administration 47
W ActiveSync Failure Exchange Server Administration 25
J Time Zone Issues - Outlook Calendar and Webcal Feed Using Outlook 8
M Managing Gmail "All Mail" sync issues with IMAP Using Outlook 1
B BCC issues after changing root folder path for gmail Using Outlook 1
Commodore Outlook (2013) issues with mail Using Outlook 0
A Outlook 2019 having issues with 'people search' and not making suggestions in email To: etc Using Outlook 12
Similar threads