Today, a customer told me that one of users cannot success to sync emails at his phone, I tried to use Microsoft Remote Connectivity Analyzer to test Exchange ActiveSync Connectivity, it has no issues with Exchange ActiveSync Autodiscover but not Exchange ActiveSync, it failed to attempt the FolderSync command on the Exchange ActiveSync session and error message is “Exchange ActiveSync returned an HTTP 500 response (Internal Server Error).”.
I figured out the issues after troubleshooting, the user is a member of domain admins, Exchange server group does not have the appropriate permission to his mailbox object in Active Directory. It’s easy to fix issues as follow:
Login to the domain controller server.
On the Server Manager page, select Tools and click Active Directory Users and Computers.
On the Active Directory Users and Computers page, select View and click Advance Feature.
Right-click the mailbox account and select Properties.
On the user Properties page, select Security.
On the Security page, click Advanced.
On Advanced Security Settings for the user page, click Enable inheritance and then click OK
On the Permissions Warning page, click Yes.
On the user Properties page, click Ok.
Go back to Microsoft Connectivity Analyzer toll and everything should be fine now, also his phone start to sync his email.
But I would recommend that you do not use a member of domain admins for e-mail purposes. You should have two Active Directory user accounts. These Active Directory accounts include one user account that is added to a domain admin and one user account that is used for e-mail purposes.
Cary Sun has a wealth of knowledge and expertise in data center and deployment solutions. As a Principal Consultant, he likely works closely with clients to help them design, implement, and manage their data center infrastructure and deployment strategies.
With his background in data center solutions, Cary Sun may have experience in server and storage virtualization, network design and optimization, backup and disaster recovery planning, and security and compliance management. He holds CISCO CERTIFIED INTERNETWORK EXPERT (CCIE No.4531) from 1999. Cary is also a Microsoft Most Valuable Professional (MVP), Microsoft Azure MVP, Veeam Vanguard and Cisco Champion. He is a published author with several titles, including blogs on Checkyourlogs.net, and the author of many books.
Cary is a very active blogger at checkyourlogs.net and is permanently available online for questions from the community. His passion for technology is contagious, improving everyone around him at what they do.
Blog site: https://www.checkyourlogs.net
Web site: https://carysun.com
Blog site: https://gooddealmart.com
Amazon Author: https://Amazon.com/author/carysun