Exchange, inheritance, and ActiveSync

[WANguy2k]

I just got a new smartphone and tried to set up activesync on it, but had problems. After some research I found our since I'm a member of protected groups (domain admins, etc) that I'll have trouble synching. So, I made a second ID for admin purposes and got the phone set up by removing my original ID from all protected groups. Unfortunately I do so many things all day that require admin privileges that I need to use that ID. So, I decided to create a second ID just to use on the phone, and keep my regular ID for admin purposes. I gave the new ID full access and “send-as” access to my mailbox, but when I try to sync using the new ID it fails saying “Your Microsoft Exchange Server account does not have permission to synchronize with your current settings. I there anything I can add to the mailbox or the user account to allow my second account to sync with Exchange?

 

[ntinlin]

Unfortunately not.
ActiveSync will only connect to the primary mailbox for any particular user and will ignore the e-mail address that you use to set it up once you give it the login details. It only needs the e-mail address to attempt to do auto-discover of the server.

Only option would be to transfer the mailbox to this new non-admin account that you have created and run that way.

 

[ntinlin]

Actually now I'm remembering correctly you can get activesync to work with your original account.

What you need to do is allow your account to inherit permissions within AD so that Exchange can write information about your device, which is what is causing the initial setup to fail. Then quickly get your sync set up.

The AdminSDHolder job to strip those permissions back out only runs once an hour so you should be fine.

Neill

 

[WANguy2k]

Thanks, I discovered this for myself: I turned off inheritence and my setup worked, but I was told once the inheritence got turned back on that I would have problems with future syncs-- that's why I was going through the whole excercise, but my phone has been working fine. Turns out once the account is set up inheritence doesn't matter. Thanks for your response.