[Tutorial] Resolvendo o problema de ActiveSync do Exchange 2013
Enviado: 07 Dez 2015 10:31
Um problema que vem se tornando muito comum em novas instalacoes do Exchange. Usuarios nao conseguirem conectar seus dispositivos moveis ao exchange 2013, fica sempre pedindo senha mesmo com todos os dados estando corretos.
No eventviewer do servidor Exchange voce recebe as seguintes entradas:
Log Name: Application
Source: MSExchange ActiveSync
EventID: 1053
Exchange ActiveSync doesn't have sufficient permissions to create the "<user object distinguished name>" container under Active Directory user "Active Directory operation failed on <Domain Controller FQDN>. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 ". Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations
Para resolver este problema, siga o passo a passo:
No eventviewer do servidor Exchange voce recebe as seguintes entradas:
Log Name: Application
Source: MSExchange ActiveSync
EventID: 1053
Exchange ActiveSync doesn't have sufficient permissions to create the "<user object distinguished name>" container under Active Directory user "Active Directory operation failed on <Domain Controller FQDN>. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 ". Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations
Para resolver este problema, siga o passo a passo:
Agora e so validar com os dispositivos moveis, devem possuir permissao para se registrar automaticamente* Selecione a raiz do seu AD
* Clique em propriedades , va ate a aba seguranca
* Adicione um novo item, no caso “Exchange Servers"
* Em aplicar, selecione “Descendant msExchActiveSyncDevices"
* Permissione conforme o print em anexo