hi ,
we have complicated issue ( no one solved it in the whole country ) , no one is able to connect active sync on mobile , we used to have self signed ssl certificate for our exchange ,
we have bought a new certificate and activated it on the exchange , but exchange active sync is not working ,
i have tried to :
- reset virtual directories
- re added and re issue the certificate
- pointed active sync and auto discover to external webmail url .
i have even tried to setup the email without autodiscover ( manual ) but still the same :
when i go to event viewer i see permission error , i searched for it and the solution was to inherit user permissions but this either didnot work .
Exchange ActiveSync doesn't have sufficient permissions to create the "CN=Ahmed Al_belbessi,OU=IT OU,DC=luminus,DC=local" container under Active Directory user "Active Directory operation failed on DC1.luminus.local. This error is not retriable.
Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
".
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.
Details:%3
i would be very very very thankful if some one help