“Exchange ActiveSync doesn’t have sufficient permissions to create the “” container under Active Directory user “Active Directory operation failed on dc.domain.com. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152611, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type “msExchActiveSyncDevices” and doesn’t have any deny permissions that block such operations.”
Issue : Data will not sync in mobile phones for domain admins accounts after exchange 2010 upgrade .
Solution: configure security inheritance to the exchange servers objects for those users:
1. Start Active Directory Users and Computers.
2. Click View, and then click to enable Advanced Features.
3. Right-click the object where you want to change the Exchange Server permissions, and then click Properties.
4. Click Add, type Exchange Servers, and then click OK.
5. In the Apply to box, click Descendant msExchActiveSyncDevices objects.
6. Under Permissions, click to enable Modify Permissions. Click OK three times.
7. Tick the Include inheritable permissions toggle then Apply and OK.
