Skip to content

One user cannot add ActiveSync Exchange mailbox to iPhone / Android

Today I ran into a problem that was very unique.  We had one user, with a brand new iPhone, that was unable to successfully add their Exchange Activesync mailbox to their iPhone (this would apply to android as well).  The account would add to the phone, but when they would open the mail app and refresh, they would just get an error message that said “Unable to get mail.”  We could add any other users mailbox to the phone and it would work perfectly.  It ended up having to do with some of the security groups they were a member of, but more importantly, Inheritance had been disabled on their Active Directory account.  We are running Exchange 2013, but I’ve seen this issue apply to Exchange 2010 and other versions as well.

Like I said, we could add the account, but when trying to refresh mail on the phone, we got this nice popup box on the iPhone.

 

cannot-get-mail-server-failed

 

 

To troubleshoot further, I went to http://www.testexchangeconnectivity.com  to see if I could get some more details.  Come to find out, the server was kicking back the following:  “Exchange ActiveSync returned an HTTP 500 response (Internal Server Error).  Only on that one specific user account did we get this error.  Any and every other account worked perfectly.  After some digging and troubleshooting, we found a fix.

How to fix

First, open up Active Directory Users and Computers (ADUC).  Once you have, click View > Advanced Features.

 

2016-03-05 10_33_38-sndc.serenity-networks.com - Chrome Remote Desktop

 

Next, right click on the users account and select Properties.

 

2016-03-05 10_39_19-sndc.serenity-networks.com - Chrome Remote Desktop

 

Select the Security tab at the top, and the select Advanced.

 

2016-03-05 10_39_43-sndc.serenity-networks.com - Chrome Remote Desktop

 

Now click on the button that says “Enable Inheritance” at the bottom.  If you are running a version of Windows Server older than 2012 R2, you might have a check box instead of a button.  If so, click the check box to enable inheritance.

 

2016-03-05 10_40_06-sndc.serenity-networks.com - Chrome Remote Desktop

 

Once you’ve enabled inheritance, click apply and OK.  You will get a dialog box asking you if you’re sure, proceed through it.  Now, be sure to remove your activesync account from your phone, and re add it.  Everything should work perfectly now.  If you have any questions or problems, please feel free to post in the comments below.  Thanks!