Exchange ActiveSync doesn't have sufficient permissions

[guest]

Situation: The client is running Exchange 2010 on Windows 2008 R2. The Active-Sync for syncing mail with a mobile device get this message:
Exchange ActiveSync doesn't have sufficient permissions to create the "CN=bob lin,OU=Staff,DC=chicagotech,DC=net" container under Active Directory user "Active Directory operation failed on mail.chicagotech.net. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
".
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.

Windows Event Viewer has this ID: 1053

Description: Exchange ActiveSync doesn't have sufficient permissions to create the "CN=<name>,OU=<OU Name>,DC=thenet,DC=gen,DC=nz" container under Active Directory user "Active Directory operation failed on <server>.thenet.gen.nz. This error is not retriable. Additional information: Access is denied.

Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0".

Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.

Resolution: On a Domain Controller, Click on Start/All Programs/Administrative Tools/Active Directory Users and Computers

Click on View and Select Advanced Features

Select a mailbox that isn’t working with Active Sync, double click on the account, Select the Security Tab and then the Advanced Button.

Select Exchange Servers, and tick the Include inheritable permissions toggle then Apply and OK.

Or refer to this page for more details:
Event ID 1053: Exchange ActiveSync doesn't have sufficient ...Event ID 1053: Exchange ActiveSync doesn't have sufficient permissions to create container. ActiveSync on Android Phone doesn't work because of Exchange ...
www.chicagotech.net
www.chicagotech.net/troubleshooting/eventid1053.htm

[blin]

Before we go further, I would like to confirm the following questions:



1. Does this issue encounter on all users?

2. Can other devices synchronize with Exchange server normally? Such as Windows Mobile.

3. What is the version of your Exchange server?



Based on my knowledge, it is very possible that the inheritable permissions is not selected under the user. I suggest you to do the following steps to troubleshoot this issue:



1. Please check the permission on the user:



Open ADSIEDIT.msc, expand to below path:



CN=Users,DC=Domain,DC=com



Right click the user object, select "Properties", go to "Security" tab, then select "Advanced". Confirm that the "Include inheritable permissions from this object's parent" is selected.



2. If this issue still occurs, please try to run setup /preparead against your Exchange server, then perform a test again.