Nick MacKechnie
#8 wire kinda guy.....

Exchange 2010 Active Sync Issue

Saturday, 21 November 2009 08:04 by Nick MacKechnie

Hi All,

I’ve spent the last few days migrating to Hyper-V, SQL 2008, Windows Server 2008 R2 and Exchange 2010 from 3 machines - Windows Server 2003, SQL 2005 and Exchange 2003. The last thing I had to turn on/get going was Active-Sync for syncing mail with home via a mobile device. This failed miserably, as per the below event log on my Exchange 2010 Server.

Log Name:      Application

Source:        MSExchange ActiveSync

Date:          11/20/2009 12:23:07 PM

Event ID:      1053

Task Category: Configuration

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      <server>


Exchange ActiveSync doesn't have sufficient permissions to create the "CN=<name>,OU=<OU Name>,DC=thenet,DC=gen,DC=nz" container under Active Directory user "Active Directory operation failed on <server> This error is not retriable. Additional information: Access is denied.

Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0


Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.


Event Xml:

<Event xmlns="">


    <Provider Name="MSExchange ActiveSync" />

    <EventID Qualifiers="49156">1053</EventID>




    <TimeCreated SystemTime="2009-11-19T23:23:07.000000000Z" />




    <Security />



    <Data>CN=<name>,OU=<OU Name>,DC=thenet,DC=gen,DC=nz</Data>

    <Data>Active Directory operation failed on <server> This error is not retriable. Additional information: Access is denied.

Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0




The work around was pretty simple, however took me some time trolling through external and internal Knowledge Base Articles. I came across this article, however it didn’t seem to address the issue.

Here’s how I managed to get it sorted -

On a Domain Controller, Click on Start/All Programs/Administrative Tools/Active Directory Users and Computers


Click on View and Select Advanced Features

Select a mailbox that isn’t working with Active Sync, double click on the account, Select the Security Tab and then the Advanced Button.


Select Exchange Servers, and tick the Include inheritable permissions toggle then Apply and OK.


This issue is currently bugged and is likely to be fixed with an update in the future – It seems to be a symptom of ‘upgrading’.


Currently rated 4.0 by 150 people

  • Currently 3.993335/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5

What is SkyDrive Explorer

Friday, 6 November 2009 23:23 by Nick MacKechnie

SkyDrive Explorer is a free, easy-to-use, but very powerful extension for Windows Explorer. With SkyDrive Explorer you can make any every-day operations with your documents from Microsoft Live SkyDrive™ service (read more...) using Windows Explorer, as if they were on your computer.

Moreover you don't need to install and configure any additional programs or ActiveX components. SkyDrive Explorer will organize the interaction with the online storage itself.



With the current beta version you can enjoy the following functionality:

  • View the structure and contents of folders in SkyDrive™;
  • View files information (type, size, creation date in GMT format);
  • Create new root folders and subfolders;
  • Copy files into the storage;
  • Delete files and folders;
  • Copy files from the storage to the computer;
  • Copy folders and subfolders from the storage to the computer keeping their structure;
  • Use Drag & Drop for files operations;
  • Rename files and folders;
  • Create links to SkyDrive™ folders on your computer;
  • Copy URL of the selected object(s) to the Clipboard; New
  • Automatic check for the latest version;New
  • Bidirectional languages support.New

SkyDrive Explorer allows applying some operations for group of objects that is not possible in web browser. This increases performance of work with SkyDrive™.

Examples of multi-operations are:

  • Renaming objects;
  • Deleting group of objects;
  • Copying folders with subfolders and files from SkyDrive™.

You don't need to know how to work with the SkyDrive™ service in web browser. To work efficiently with your data in SkyDrive Explorer you just use base operations with files and folders in Windows Explorer.


SkyDrive Explorer uses the standard Microsoft library for work with Windows Live Id services. Your personal information does not leave this library and even is not passed to SkyDrive Explorer engine. Also, the traffic with online storage goes through HTTPS protocol that protects data from snoopers.

32/64 bit OS support

SkyDrive Explorer works both in 32- and 64-bit Microsoft® Windows OS. Minimal required OS is Windows XP, and SkyDrive Explorer will successfully work in Windows Vista, Windows Server 2003 and 2008, and Windows 7.

SkyDrive Explorer 1.2 Beta has been released, download here.

Currently rated 1.2 by 5 people

  • Currently 1.2/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5