ERROR
=====
Exchange ActiveSync doesn’t have sufficient permissions to create the “CN=Luke Smith,OU=Support 08 No Redirect,OU=Departments OU,OU=ICS OU,DC=ics-solutions,DC=local” container under Active Directory user “Active Directory operation failed on ICS-DC-001.ics-solutions.local. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
“.
Make sure the user has inherited permission granted to domainExchange Servers to allow List, Create child, Delete child of object type “msExchActiveSyncDevices” and doesn’t have any deny permissions that block such operations.
Details:%3
RESOLUTION
========
ADUC -> VIEW -> ADVANCED FEATURES
ADUC -> FIND -> enter username
Select Security Tab
Click Advanced
Tick inherit permissions
Click OK