2515136 - Exchange ActiveSync account is added to iOS device but the device does not show up in Exchange Management Console | SAP Knowledge Base Article

SAP Knowledge Base Article - Preview

2515136 - Exchange ActiveSync account is added to iOS device but the device does not show up in Exchange Management Console

Symptom

  • Exchange ActiveSync account is deployed to and configured on iOS device, but the device does not exist in Exchange (e.g. Get-MobileDevice -Identity "username" returns nothing)
    AND
  • The following error is present in Event Viewer Application Log:

Event Code 1053

Source: MSExchange ActiveSync

Exchange ActiveSync doesn't have sufficient permissions to create the "CN=iOS,CN=Users,DC=domain,DC=com" container under Active Directory user "Active Directory operation failed on <DOMAIN CONTROLER ADDRESS>. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152612, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0. Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.


Read more...

Environment

  • Afaria 7
  • Microsoft Exchange 2013

Product

SAP Afaria 7.0

Keywords

Exchange ActiveSync doesn't have sufficient permissions to create, Active Directory operation failed on, Access is denied, INSUFF_ACCESS_RIGHTS, Make sure the user has inherited permission granted to, msExchangeActiveSyncDevices, Event code 1053, iOS Exchange ActiveSync , KBA , MOB-AFA , Afaria , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.