Ryfujk

AppleTVs create a chatty alternate WiFi network

An adverb for when you're not exaggerating

Why weren't discrete x86 CPUs ever used in game hardware?

How to compare two different files line by line in unix?

One-one communication

What to do with repeated rejections for phd position

What is the meaning of 'breadth' in breadth first search?

Crossing US/Canada Border for less than 24 hours

How were pictures turned from film to a big picture in a picture frame before digital scanning?

How do living politicians protect their readily obtainable signatures from misuse?

How to save space when writing equations with cases?

Should a wizard buy fine inks every time he want to copy spells into his spellbook?

Time evolution of a Gaussian wave packet, why convert to k-space?

Deconstruction is ambiguous

What are the discoveries that have been possible with the rejection of positivism?

Strange behavior of Object.defineProperty() in JavaScript

How does light 'choose' between wave and particle behaviour?

How much damage would a cupful of neutron star matter do to the Earth?

Karn the great creator - 'card from outside the game' in sealed

Is it possible for SQL statements to execute concurrently within a single session in SQL Server?

What is an "asse" in Elizabethan English?

Does the Mueller report show a conspiracy between Russia and the Trump Campaign?

Is there hard evidence that the grant peer review system performs significantly better than random?

Has negative voting ever been officially implemented in elections, or seriously proposed, or even studied?

Error connecting mobile device to Exchange - missing permissions

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}

0

I'm having an issue connecting a mobile device to an exchange 2010 server for a single user.

Using https://testconnectivity.microsoft.com I get the following error:

• The Exchange ActiveSync test failed.
  
  
  
  
  • Errors were encountered while testing the Exchange ActiveSync session.
    
    
    
    
    • The test of the FolderSync command failed.
      An HTTP 403 forbidden response was received. The response appears to have come from IIS7.
      
    
    
    
    
  
  
  
  

All other users work without receiving the error

I've tried including inheritable permissions as described on many blogs/sites, but they were already checked.

http://www.squidworks.net/2012/04/solved-iphone-passes-exchange-2010-setup-but-then-gets-cannot-get-mail-the-connection-to-the-server-failed/

Is there a set of permissions I can check for or add to get this user connecting?

exchange exchange-2010 activesync

share|improve this question

edited Jul 18 '16 at 22:22

waspinator

asked Jul 18 '16 at 20:34

waspinatorwaspinator

2662516

bumped to the homepage by Community♦ 12 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

add a comment | 

0

I'm having an issue connecting a mobile device to an exchange 2010 server for a single user.

Using https://testconnectivity.microsoft.com I get the following error:

• The Exchange ActiveSync test failed.
  
  
  
  
  • Errors were encountered while testing the Exchange ActiveSync session.
    
    
    
    
    • The test of the FolderSync command failed.
      An HTTP 403 forbidden response was received. The response appears to have come from IIS7.
      
    
    
    
    
  
  
  
  

All other users work without receiving the error

I've tried including inheritable permissions as described on many blogs/sites, but they were already checked.

http://www.squidworks.net/2012/04/solved-iphone-passes-exchange-2010-setup-but-then-gets-cannot-get-mail-the-connection-to-the-server-failed/

Is there a set of permissions I can check for or add to get this user connecting?

exchange exchange-2010 activesync

share|improve this question

edited Jul 18 '16 at 22:22

waspinator

asked Jul 18 '16 at 20:34

waspinatorwaspinator

2662516

bumped to the homepage by Community♦ 12 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

add a comment | 

I'm having an issue connecting a mobile device to an exchange 2010 server for a single user.

Using https://testconnectivity.microsoft.com I get the following error:

• The Exchange ActiveSync test failed.
  
  
  
  
  • Errors were encountered while testing the Exchange ActiveSync session.
    
    
    
    
    • The test of the FolderSync command failed.
      An HTTP 403 forbidden response was received. The response appears to have come from IIS7.
      
    
    
    
    
  
  
  
  

All other users work without receiving the error

I've tried including inheritable permissions as described on many blogs/sites, but they were already checked.

http://www.squidworks.net/2012/04/solved-iphone-passes-exchange-2010-setup-but-then-gets-cannot-get-mail-the-connection-to-the-server-failed/

Is there a set of permissions I can check for or add to get this user connecting?

exchange exchange-2010 activesync

share|improve this question

edited Jul 18 '16 at 22:22

waspinator

asked Jul 18 '16 at 20:34

waspinatorwaspinator

2662516

share|improve this question

edited Jul 18 '16 at 22:22

waspinator

asked Jul 18 '16 at 20:34

waspinatorwaspinator

2662516

share|improve this question

edited Jul 18 '16 at 22:22

waspinator

asked Jul 18 '16 at 20:34

waspinatorwaspinator

2662516

asked Jul 18 '16 at 20:34

waspinatorwaspinator

2662516

asked Jul 18 '16 at 20:34

waspinatorwaspinator

2662516

2 Answers
2

active

oldest

votes

0

Permission inheritance is the usual issue.
Is the user also a member of a privileged group? Domain Admins etc? That can stop things from working.

Using attribute editor in ADUC, look for the value of AdminCount. If the user is not a member of any priviledged groups, but that is set to 1, clear it (so not set). Wait an hour or more for Exchange to clear the permission issue, then try again.

share|improve this answer

answered Jul 19 '16 at 15:42

SembeeSembee

2,8121411

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  turned out to be too many devices assigned to the user
  
  – waspinator
  Jul 19 '16 at 16:10
  

  
  
  
  

add a comment | 

0

The issue was that by default a user can only connect to 10 ActiveSync devices, and this user had reached that limit.

Run the following commands in your Exchange management shell to correct the issue by removing unused devices. Replace username with the affected user's username, and device identity with one of the devices returned from the Get-ActiveSyncDevice command you wish to remove.

Get-ActiveSyncDevice -Mailbox username |fl identity, first*, devicemodel

Remove-ActiveSyncDevice -Identity "device identity"

If you actually do need more than 10 devices you can change the EASMaxDevices policy. Best practices is to keep the number low though. Use the commands bellow to set the number of devices to 20.

New-Throttlingpolicy "Increased ActiveSync Devices" -EasMaxDevices 20 -EasMaxConcurrency 20

Set-Mailbox username -ThrottlingPolicy "Increased ActiveSync Devices"

share|improve this answer

edited Jul 19 '16 at 16:18

answered Jul 19 '16 at 16:10

waspinatorwaspinator

2662516

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f790553%2ferror-connecting-mobile-device-to-exchange-missing-permissions%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

0

Permission inheritance is the usual issue.
Is the user also a member of a privileged group? Domain Admins etc? That can stop things from working.

Using attribute editor in ADUC, look for the value of AdminCount. If the user is not a member of any priviledged groups, but that is set to 1, clear it (so not set). Wait an hour or more for Exchange to clear the permission issue, then try again.

share|improve this answer

answered Jul 19 '16 at 15:42

SembeeSembee

2,8121411

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  turned out to be too many devices assigned to the user
  
  – waspinator
  Jul 19 '16 at 16:10
  

  
  
  
  

add a comment | 

0

Permission inheritance is the usual issue.
Is the user also a member of a privileged group? Domain Admins etc? That can stop things from working.

Using attribute editor in ADUC, look for the value of AdminCount. If the user is not a member of any priviledged groups, but that is set to 1, clear it (so not set). Wait an hour or more for Exchange to clear the permission issue, then try again.

share|improve this answer

answered Jul 19 '16 at 15:42

SembeeSembee

2,8121411

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  turned out to be too many devices assigned to the user
  
  – waspinator
  Jul 19 '16 at 16:10
  

  
  
  
  

add a comment | 

Permission inheritance is the usual issue.
Is the user also a member of a privileged group? Domain Admins etc? That can stop things from working.

Using attribute editor in ADUC, look for the value of AdminCount. If the user is not a member of any priviledged groups, but that is set to 1, clear it (so not set). Wait an hour or more for Exchange to clear the permission issue, then try again.

share|improve this answer

answered Jul 19 '16 at 15:42

SembeeSembee

2,8121411

share|improve this answer

answered Jul 19 '16 at 15:42

SembeeSembee

2,8121411

answered Jul 19 '16 at 15:42

SembeeSembee

2,8121411

answered Jul 19 '16 at 15:42

SembeeSembee

2,8121411

0

The issue was that by default a user can only connect to 10 ActiveSync devices, and this user had reached that limit.

Run the following commands in your Exchange management shell to correct the issue by removing unused devices. Replace username with the affected user's username, and device identity with one of the devices returned from the Get-ActiveSyncDevice command you wish to remove.

Get-ActiveSyncDevice -Mailbox username |fl identity, first*, devicemodel

Remove-ActiveSyncDevice -Identity "device identity"

If you actually do need more than 10 devices you can change the EASMaxDevices policy. Best practices is to keep the number low though. Use the commands bellow to set the number of devices to 20.

New-Throttlingpolicy "Increased ActiveSync Devices" -EasMaxDevices 20 -EasMaxConcurrency 20

Set-Mailbox username -ThrottlingPolicy "Increased ActiveSync Devices"

share|improve this answer

edited Jul 19 '16 at 16:18

answered Jul 19 '16 at 16:10

waspinatorwaspinator

2662516

add a comment | 

0

The issue was that by default a user can only connect to 10 ActiveSync devices, and this user had reached that limit.

Run the following commands in your Exchange management shell to correct the issue by removing unused devices. Replace username with the affected user's username, and device identity with one of the devices returned from the Get-ActiveSyncDevice command you wish to remove.

Get-ActiveSyncDevice -Mailbox username |fl identity, first*, devicemodel

Remove-ActiveSyncDevice -Identity "device identity"

If you actually do need more than 10 devices you can change the EASMaxDevices policy. Best practices is to keep the number low though. Use the commands bellow to set the number of devices to 20.

New-Throttlingpolicy "Increased ActiveSync Devices" -EasMaxDevices 20 -EasMaxConcurrency 20

Set-Mailbox username -ThrottlingPolicy "Increased ActiveSync Devices"

share|improve this answer

edited Jul 19 '16 at 16:18

answered Jul 19 '16 at 16:10

waspinatorwaspinator

2662516

add a comment | 

The issue was that by default a user can only connect to 10 ActiveSync devices, and this user had reached that limit.

Run the following commands in your Exchange management shell to correct the issue by removing unused devices. Replace username with the affected user's username, and device identity with one of the devices returned from the Get-ActiveSyncDevice command you wish to remove.

Get-ActiveSyncDevice -Mailbox username |fl identity, first*, devicemodel

Remove-ActiveSyncDevice -Identity "device identity"

If you actually do need more than 10 devices you can change the EASMaxDevices policy. Best practices is to keep the number low though. Use the commands bellow to set the number of devices to 20.

New-Throttlingpolicy "Increased ActiveSync Devices" -EasMaxDevices 20 -EasMaxConcurrency 20

Set-Mailbox username -ThrottlingPolicy "Increased ActiveSync Devices"

share|improve this answer

edited Jul 19 '16 at 16:18

answered Jul 19 '16 at 16:10

waspinatorwaspinator

2662516

Get-ActiveSyncDevice -Mailbox username |fl identity, first*, devicemodel

Remove-ActiveSyncDevice -Identity "device identity"

New-Throttlingpolicy "Increased ActiveSync Devices" -EasMaxDevices 20 -EasMaxConcurrency 20

Set-Mailbox username -ThrottlingPolicy "Increased ActiveSync Devices"

share|improve this answer

edited Jul 19 '16 at 16:18

answered Jul 19 '16 at 16:10

waspinatorwaspinator

2662516

answered Jul 19 '16 at 16:10

waspinatorwaspinator

2662516

answered Jul 19 '16 at 16:10

waspinatorwaspinator

2662516