- BlackBerry 10 OS
- BlackBerry Device Service
- BlackBerry Enterprise Service 10
- Microsoft Exchange ActiveSync
This issue can occur if the Owner Rights security principal does not have Full Control permissions on the user account that is trying to synchronize with the smartphone.
Note: Permission can be revoked from the account if the account is part of a protected group presenting a similar scenario as KB04707.
To resolve the issue, assign the Exchange Servers group the right to change permissions against msExchActiveSyncDevices objects using following these steps:
- Start Active Directory Users and Computers.
- Click View, and then click to enable Advanced Features.
- Right-click the object where you want to change the Exchange Server permissions, and then click Properties.
Note: Permissions can be changed against a user, an organizational unit, or a domain.
- On the Security tab, click Advanced.
- Click Add, type Exchange Servers, and then click OK.
- In the Apply to box, click Descendant msExchActiveSyncDevices objects.
- Under Permissions, click to enable Modify Permissions.
- Click OK three times.
If the above does not resolve the issue, check the ActiveSync user's permissions to include inheritable permissions from the parent object (follow the steps below):
- Open Active Directory Users and Computers and go to View then select Advanced Features
- Find the user to be modified and double click the user
- Select the Security tab and then Advanced
- Check the box for Include inheritable permissions from this object's parent and click OK.
By downloading, accessing or otherwise using the Knowledge Base documents you agree:
(b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.
Visit the BlackBerry Technical Solution Center at www.blackberry.com/btsc.