【问题描述】
===========================

用户迁移邮箱迁移后，尝试使用iPhone，Android等手机使用Exchange ActiveSync访问邮箱，显示无法连接，造成无法同步邮件。在系统事件是报以下信息错误：
Log Name:      Application

Source:        MSExchange ActiveSync

Date:          2013-12-14 14:12:54

Event ID:      1053

Task Category: Configuration

Level:         Error

Keywords:      Classic

User:          N/A

Computer:     ex01.test.com

Description:

Exchange ActiveSync doesn't have sufficient permissions to create the "CN=user1,OU=MIS,DC=test,DC=com" container under Active Directory user "Active Directory operation failed on dc.test.com. This error is not retriable. Additional information: Access is denied.

Active directory response: 00000005: SecErr: DSID-03151E07, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

".

Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchActiveSyncDevices" and doesn't have any deny permissions that block such operations.

Details:%3

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="MSExchange ActiveSync" />

    <EventID Qualifiers="49156">1053</EventID>

    <Level>2</Level>

    <Task>2</Task>

    <Keywords>0x80000000000000</Keywords>

    <TimeCreated SystemTime="2013-12-14T06:12:54.000000000Z" />

    <EventRecordID>5779</EventRecordID>

    <Channel>Application</Channel>

    <Computer>ex01.test.com</Computer>

    <Security />

  </System>

  <EventData>

    <Data>CN=user1,OU=MIS,DC=test,DC=com</Data>

    <Data>Active Directory operation failed on asiabmp.bmp-asia.com. This error is not retriable. Additional information: Access is denied.

Active directory response: 00000005: SecErr: DSID-03151E07, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

</Data>

  </EventData>

</Event>

【解决方法】
===========================

1.     打开Active Directory Users and Computers

2.     在View菜单选择“高级功能”

3.     找到无法手机同步用这个用户，选择属性，切换到安全选项卡，选择“高级”，

4.     确认是否“Allow inheritable permissions…”(允许父项的继承权限…)没有勾选，如果没有勾选，请勾选，并应用。

5.     尝试用户现在是否可以使用Exchange ActiveSync访问邮箱。

【参考资料】
===========================

http://support.microsoft.com/kb/2579075/en-us

http://www.chicagotech.net/troubleshooting/eventid1053.htm

http://www.petenetlive.com/KB/Article/0000695.htm