Event 1053 ActiveSync doesn't have sufficient permissions to create

Hello all and thanks in advance.
Exchange 2007 to 2013 co-existence. All email now routed (proxies) through 2013 server. For everyone, Outlook functional, OWA functional and for everyone else on the old server, EAS is functional. I only have three clients on the new server.
Outlook and OWA are functional, EAS is not. Two of those accounts get the following message on the 2013 server:
Exchange ActiveSync doesn't have sufficient permissions to create the "CN=Name\, User,OU=Users-IT,DC=HALFF,DC=AD" container under Active Directory user "Active Directory operation failed on SRV05.HALFF.AD. This error is not retriable.
Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0".
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.
These two accounts are also part of several 'protected' security groups such as domain admins and or enterprise admins. I've seen this KB: http://support.microsoft.com/en-us/kb/2579075
One of these accounts is mine. Security for my user object is NOT inherited. I went to make the change in the article and it said 77 items were going to be changed. "Warning. The change you are about to make will result in 77 permissions
being added to the access control list"
Is this normal for AD objects that are part of protected groups? What is the best way to get through this?
Thanks,
Willis

Hello
after enable inherited not add "extra" permission for user like domain admin, but exchange trusted subsystem have got enugh permission on user and user can access to email from phone.
after user registering mobile in exch server you can disable inherited but remember when user have got problem. :)
sorry my english

Similar Messages

Exchange ActiveSync doesn't have sufficient permissions to create the..

I have just upgrade my DC to 2012r2 and Exchange 2010 from an SBS 2003 environs.
I am running into the above issue even thought I have added the Exchange server to the security at domain level, enabled the inheritance and it is still coming up with this issue.
The exchange 2010 is running on the 2012r2 server. This is the first step before migrating the 2010 to 2013
Any help will be deeply appreciated.
thanks

Hi,
From your description, I would like to clarify the following thing:
Exchange 2010 is not supported to run on the Windows Server 2012 R2. If you install the Exchange server 2010 on the Windows Server 2012 R2, some unexpected issues will occur.
Here is an article for your reference.
Exchange Server Supportability Matrix
http://technet.microsoft.com/library/ff728623(v=exchg.150).aspx
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support

Exchange ActiveSync doesn't have sufficient permissions

In one of our cas servers getting the following error.
Anybody have any idea why this error kindly share.
Exchange ActiveSync doesn't have sufficient permissions to create the "CN=a,OU=b-Administrators,DC=comany,DC=domain,DC=domain " container under Active Directory user "Active Directory operation failed on SRVINFDCDR01.kfupm.edu.sa. This error is not retriable.
Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.
Details:%3
Ashraf

Some times you have to do this.
Start Active Directory Users and Computers.
Click View, and then click to enable Advanced Features.
Right-click the object where you want to change the Exchange Server permissions, and then click
Properties.
Note You can change permissions against a user, an organizational unit, or a domain.
On the Security tab, click Advanced.
Click Add, type Exchange Servers, and then click
OK.
In the Apply to box, click Descendant msExchActiveSyncDevices objects.
Under Permissions, click to enable Modify Permissions.
Click OK three times.

SBS 2011 VM and Server 2012 R2 Hyper-V host. After rebuilding the host image, no email is received, EMC states "You don't have sufficient permissions to view this data" when looking at organization config. Server config not shown on EMC.

Hyper-V Host Server 2012 R2 x64 drive c:
All VMs, including SBS 2011 Standard x64 are on drive d:
I replaced my motherboard and defined a Marvell RAID 1 Mirror for my boot drive C:. My drive D: containing all of my Hyper V machines remained untouched since the new MB had Intel Matrix Controller with RAID 5, as did the old MB.
Since the C: drives are a few bytes smaller after configured as a RAID 1, I was unable to restore drive C from the image copy, so I rebuilt a new Hyper-V Host identical as possible using Server 2012 R2 x64. I had to redefine the Hyper-V machines on
the host, and the 1st time I brought it all (host and VMs) I had to reconfigure the NICs due to new MAC addresses, and verifying SBS 2011 DNS and DHCP for all physical and Hyper-V machines. Otherwise my Hyper-V SBS 2011 x(64) wasn't touched.
Now the SBS Exchange 2010 is not receiving mail. In the Exchange Management Console clicking on the Organization config gives me a highlighted error "You don't have sufficient permissions to view this data". The Server
Config is no longer on the EMC. The Recipient Config looks fine.
Outlook 2013 x64 connects to the Exchange Server, but no new mail appeared. There were just a few older messages that came in since the last time I opened Outlook. My public DNS on GoDaddy was not changed. I did not change sending mail
through my ISP Sonic.net. The SBS internal DNS doesn't have an MX record, but I'm not sure it ever did since my GoDaddy public DNS has an MX record.
I tried restoring to an earlier Image Copy, but that made no difference. I'm using the Windows Backup from SBS 2011 for my daily image copy backups.
- Michael Faklis

Hi Michael,
à
After more research and running the Best Practices report from the EMC, I am missing a slew of ManagementRolesAndRoleGroups from the RBAC container.
Based on your description, it seems that you have find the cause of this issue. On current situation, I still
suggest that you should run
SBS 2011 BPA and then check if can find some relevant errors. Just for a confirmation.
Meanwhile, please refer to following articles and check if can help you.
Apply
missing Exchange 2010 RBAC Management Roles and Policies
RBAC Manager
(Exchange 2010 SP2)
Hope this helps.
Best regards,
Justin Gu

Have uploaded and installed CC 2014. Several apps give this error when I try to start them: "Unable to launch Adobe InDesign as you do not have sufficient permissions to access the preferences folders" -or- The icon in the dock bounces once, and nothing

Have uploaded and installed CC 2014. Several apps give this error when I try to start them: "Unable to launch Adobe InDesign as you do not have sufficient permissions to access the preferences folders"
-or-
The icon in the dock bounces once, and nothing happens.

Windows or Mac, and exactly which operating system version?

G5 - you do not have sufficient permissions

I have a problem similar to one addressed by joshz last June. But I have gone one better - worse.
I was trying to install an upgrade to Firefox on my G5 PPC and kept getting "you do not have sufficient permissions" message. I did the "apply to enclosed items" on my user folder and still got the "not sufficient permissions". So in frustration I used that command in the Info window for the whole boot drive. It then let me install Firefox. However I noticed that little locks appeared on the icons for my three external drives, two firewire and one USB, and I could not open the Info windows. So I thought I should reboot. (by the way I moved those external drives to my Intel iMac to check them out but the locks went with them)
It would not reboot and the fans came on full blast. I reset PRAM and would get a gray screen w/ slashed circle and full fans. I reset NVRAM in Open Firmware and got a brief flash of the Apple screen then the gray w/ slashed circle and full fans. Next in Open Firmware I entered mac-reboot. this time I got the gray screen and then this thread repeated three times:
Kernel version:
Darwin Kernel Version 8.0.0: Sat Mar 26 14:15:22 PST 2005; root :xnu-792.obj~1/RELEASE_PPC
No debugger configured - dumping debug information
MSR=00001030
Latest stack backtrace for cpu 0:
Backtrace:
0x00095C64 0x00026838 0x000A8184 0x000AB880
Proceeding back via exception chain:
Exception state (sv=0x548E8500)
PC=0x54986F94; MSR=0x00009030; DAR=0x00000000; DSISR=0x40000000; LR=0x54986F90; R1=0x446A39A0; XCP=0x0000000C (0x300 - Data access)
Backtrace:
0x54986F90 0x002B9088 0x002DCE6C 0x002DD064 0x002DCD4C 0x002DB7E8
0x002EF400 0x54986828 0x002BD350 0x002BD118 0x002BDB80 0x002BE1EC 0x000A9654
Kernel loadable modules in backtrace (with dependencies):
com.apple.driver.AppleMacRISC4PE(1.6.0d9)@0x54985000
dependency: com.apple.iokit.IOPCIFamily(1.6)@0x54967000
dependency: com.apple.driver.IOPlatformFunction(1.7.0b1)@0x54975000
Exception state (sv=0x00F96280)
PC=0x00000000; MSR=0x0000D030; DAR=0x00000000; DSISR=0x00000000; LR=0x00000000 R1=0x00000000; XCP=0x00000000 (Unknown)
And ending with:
Kernel version:
Darwin Kernel Version 8.0.0: Sat Mar 26 14:15:22 PST 2005; root :xnu-792.obj~1/RELEASE_PPC
panic: We are hanging here. . .
I have available install disk for OS X 10.5.1 and DiskWarrior Rev 901. Before I try booting with either of these, does any one know if joshz's Unix scripts might unlock the boot drive and external drives? The scripts:
1. Open /Applications/Utilities/Terminal from the affected account.
IMPORTANT NOTE: copy the blue text in. Don't attempt to retype it, as a mistake could cause more issues.
2. Copy the blue text in, and press enter. chmod -R -N ~
That command removes all ACL entries from your home folder. The next commands put them back where they should be.
3. (Press enter after copying and pasting this command in). chmod +a "everyone deny delete" ~/ ~/Desktop ~/Documents ~/Downloads ~/Library ~/Movies ~/Music ~/Pictures ~/Public ~/Sites
4. (Press enter after copying and pasting this command in). chmod +a "`id -un` allow list,addfile,search,delete,add_subdirectory,delete_child,readattr,writeattr,readextattr, writeextattr,readsecurity,writesecurity,chown,file_inherit,directoryinherit" ~/Public/Drop\ Box
After running those commands, your home folder permissions should be fine. NOTE: You may get a response:
chmod: Failed to clear ACL on file Commands: Invalid argument
chmod: Failed to clear ACL on file Notification: Invalid argument
That is safe to ignore. The rest of the commands will still work fine.
Any good advice here?
To Joshz,
I will never use "Apply to enclosed items" again.

farmerbob wrote:
OK, these comments are helpful. Now regarding backing up my home folder, can the G5 be booted in target mode from my Intel iMac in order to copy the home folder?
yes, but if you have TM backups there is no great need to do this.
Also is there a way to unlock the external drives without using the G5? The external USB drive has all my Time Machine backups on it. The Firewire drives have much of my customer data. Thanks to all for the advice so far.
you can unlock those drives from terminal after you reinstall the OS.
run the following terminal commands from and admin account with drives attached.
sudo chflags 0 /volumes/*
sudo chmod a+rx /volumes/*
you'll have to enter your admin password (which you won't see). that's normal.

Editing a pdf form that I created. Adding header error msg "do not have sufficient permissions to perform this task"

Editing a pdf form that I created. Adding header, currently the header only appears on page 1 of a 3 page pdf form. I want it to appear on each page. I am receiving the error msg "do not have sufficient permissions to perform this task"

In Adobe Acrobat use a Action for this.

Dashboard Designer Error - You do not have sufficient permissions to complete the request.

Hi all
I have created a PerformancePoint Data Source library and a PerformancePoint Reports list on a SharePoint site. The PerformancePoint site collection and site features are also both activated. The data source library is in
the 'trusted data soruces' list in administration. Existing reports I have created show OK on the site.
When user, who has full control of the entire site, clicks "add a new item" in the BI Reports list, SharePoint launches Dashboard Designer OK.
The problem is when Dashboard Designer loads, it does not load the existing data sources & reports. Clicking on the refresh icon results in the error:
You do not have sufficient permissions to complete the request.
If I add this user to the Site Collection Administrators list, the user can refresh and view the data sources & reports OK. Is this a requirement to create reports in Dashboard Designer? It is not acceptable to set all
our report designer users as the site collection administrator.
Cheers
Tyson

Hi,
Have you also tried to assign rights using the technique mentioned in the above given document (i.e. using Dashboard Designer):
Important To assign or change user permissions for dashboard items, you must have
Full Control permissions. Although you can create and publish dashboard items with
Design permissions, you cannot assign or change permissions for dashboard items unless you also have
Full Control (Site) or Site Collection Administrator permissions.
Use the SharePoint Permissions dialog box to assign or change user permissions for a dashboard item. You can open the
SharePoint Permissions dialog box from Dashboard Designer or from the SharePoint list or document library that contains the dashboard item. The following sections describe both methods.
Edit user permissions in Dashboard Designer
In the Workspace Browser, click PerformancePoint Content or
Data Connections, depending on the item that you want to modify. Then, in the center pane, double-click the dashboard item to open it for editing.
In the ribbon, click the Home tab, locate the Item group, and then click
Permissions. A browser window opens, which enables you to view or change the SharePoint permissions for the dashboard item that you opened.
Use the SharePoint permissions dialog box to modify the user permissions for your dashboard item, and then save your changes.
Edit user permissions in a SharePoint list or document library
Locate the dashboard item that you want to modify in its SharePoint list or document library.
Select the check box that is next to the name of the dashboard item. At first glance, you might not see a check box next to your dashboard item. The check box is visible when you put your cursor next to the
Title column, which is located next to the name of the dashboard item. The ribbon appears in the SharePoint site.
In the SharePoint ribbon, click List Tools, and then click
Items. Locate the Manage section, and then click
Document Permissions. A SharePoint Permissions dialog box opens. This enables you to view and change the user permissions for the item that you selected.
Use the SharePoint Permissions dialog box to modify user permissions for your dashboard item, and then save your changes.
Please tell us if this approach shows different permissions assigned and solves your problem.
Thanks and best regards,
Martin
Martin W. Angler, MCTS
Blog angler.wordpress.com
Twitter: Follow me on twitter

Oracle Instalation error (You do not have sufficient permissions to access)

Hi
my enviroment is SAP ECC6/Oracle 10g/ SUN Solaris 10 SPARC
I'm installing SAP but run into the error below. I don't understand why the inventory file is pointing to /home/prodora which does not exist. this directory is owned by root and ownership cannot be changed to user oraq11.
Is it possible to change the location of the inventory ?
kindly assist
regards
simbatech:oraq11> ./RUNINSTALLER
oracle_stage is not set (OK)
oracle_base is not set (OK)
oracle_home is not set (OK)
oracle_sid is not set (OK)
oracle_home_name is not set (OK)
oracle_inst_group is not set (OK)
from_location is not set (OK)
tmp_netca_file is not set (OK)
tmp_dbca_file is not set (OK)
Working in /oracle/stage/102_64/database/SAP ...
Oracle SID:            Q11
Oracle Home:           /oracle/Q11/102_64
Oracle Home Name:      Q11_102_64
Oracle Install Group: dba
Installing from:       /oracle/stage/102_64/database/stage/products.xml
oracle_stage="/oracle/stage/102_64"
oracle_base="/oracle/Q11"
oracle_version="102_64"
oracle_home="/oracle/Q11/102_64"
oracle_sid="Q11"
oracle_home_name="Q11_102_64"
oracle_inst_group="dba"
from_location="/oracle/stage/102_64/database/stage/products.xml"
tmp_netca_file="/tmp/.orainst_netca.15383"
tmp_dbca_file="/tmp/.orainst_dbca.15383"
ORACLE_BASE="/oracle/Q11"
ORACLE_HOME="/oracle/Q11/102_64"
================================
Preparing response files. Please wait:
======================================
Working on /oracle/stage/102_64/database/SAP/SVRCUSTOM.RSP
/oracle/stage/102_64/database/SAP/SVRCUSTOM.RSP --> /tmp/.orainst_rsp.15383: Done
You do not have sufficient permissions to access the inventory +'/home/prodora/oraInventory'.+ Installation cannot continue. Make sure that you have read/write permissions to the inventory directory and restart the installer.: No such file or directory
simbatech:oraq11>

Hi,
Yes, Solution describe in 350251 - Creating a New or 2nd Oracle SID with runInstaller
"THE SOLUTION"
The good news is the solution is very simple and takes a few seconds
First cd /var/opt/oracle
You will find a file called oraInst.loc # cat oraInst.loc
inventory_loc=/oracle/PR1/oraInventory
inst_group=dba
Use vi or emacs to edit the file and change the inventory_loc to the directory of the oracle instance you are currently installing. ie inventory_loc=/oracle/PR2/oraInventory
Restart your oracle installer eg. su - orapr2
cd /oracle/stage/816_64
setenv DISPLAY localhost:0.0
./runInstaller
Regards;

Office 365 MP Config Issue - Account doesn't have administrator permissions

SCOM 2012 R2 RU3 | Windows Server 2012 R2
I just configured this MP in the environment using the following references:
Office 365 MP Operations Guide
Reference 1
Reference 2
In addition I've configured the Office 365 Subscription Proxy secure reference.
When looking in the SCOM console I only see one error:
Source: Office 365 Monitoring
Full Path Name: Office 365 Monitoring
Alert Monitor: Office 365 Connection State monitor
Created: 1/14/2015 4:42:56 PM
Account doesn't have administrator permissions
Knowledge: View additional knowledge...
Summary
The monitor oversees the availability connection to Office 365 API EndPoint.
Causes
An error state is caused by having issues with connecting to Office 365 API EndPoint. It can be caused by:
• Issues with global connection to Office 365 API EndPoint
• Credentials for Office 365 Subscription's account are not correct
• Office 365 Subscription's account is not allowed to getting data from Office 365 EndPoint API
I've verified that the account is able to log into the server, has the _identifier, and global admin permissions in the Office 365 admin console.
Wondering if there's anything I may have missed.
Any responses appreciated.

Verify that a proxy account is domain account.
Also check below office 365 MP Guide
http://www.microsoft.com/en-us/download/details.aspx?id=43708
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"Mai Ali | My blog:
Technical | Twitter:
Mai Ali

Itunes wont load asking - verify you have sufficient permissions to start service

hi
i am trying to re-install itunes on my Window7 PC
and the install stops and asks Apple Mobile Service failed to start - verify you have sufficient permissions to start service
Help please

Try the following user tip:
Troubleshooting issues with iTunes for Windows updates

Why don't I have sufficient permissions on my own computer?

I'm trying to set up a new Mini Mac after returning another Mini Mac and exchanging it for this one. Before returning the other, I copied off the mail folders. Now I'm trying to copy the Mail folder from the backup of the main Library folder to the main Library on the new Mac. I'm being told that I don't have sufficient permission to do so. Who the heck DOES have permission, if not me? How do I get permission? I own the computer; there's no other administrator besides myself. How do I get the thing to do what I want it to do?

There are certain files on your Mac that - even though you are an Administrator - have permissions that are above yours. These are system files, some application files, and possibly server files.
These are given higher status because they need that status to accomplish certain tasks (like back up certain files or create logs even though you are logged out). It may seem odd that your computer would do things when you are not logged in, but it's a very normal action for a modern OS - especially UNIX.
You could try
File > Import Mailboxes
to import the mail form the old drive/computer. That may solve your problem.
-------------------S

How to determine whether a file doesn't exist or doesn't have enough perms

Hello everone,
I am stuck in determining whether a file does not exist or does not have enough permissions so that access to this file is denied?". I am using
java.io.File.exists() or java.io.File.canRead() methods to check this but both of them just return false in both above mentioned cases.
In the documentation however its mentioned that these method throw SecurityException - If a security manager exists and its SecurityManager.checkRead(java.lang.String) method denies read access to the file. But then problem is to write a security manager which denies
read access if the file does not have permissions so that exception can the thrown.
Any suggestions or pointers will be highly appreciated.
Thank You.
Regards,
Vikash Kumar

Some platforms will let you rename or remove an open
file.Unless those platforms support file locking, and the file has a lock on it.

When I try to load a newer version of firefox I get the error message "you don't have sufficient permissions to load firefox" from firefox. How do I get them?

have firefox 3.0.10 on my Mac with OS X .5.6 I can download the latest version of firefox, 7.0.1 dmg. I can open that and get a drive on the desktop. I am the only user and system administrator. How can I not have sufficient privileges? but when I drag the firefox program to the applications folder I always get this message from the firefox program. "you don't have sufficient privileges to open firefox" What is going wrong to prevent me from updating my firefox?

See:
*Firefox/Tools > Options > Advanced > General : Accessibility : [ ] "Warn me when web sites try to redirect or reload the page"
The setting in "Tools > Options > Advanced > General" is meant as an accessibility feature, as you can see by the label of that section, so that people with disabilities or people who use screen readers do not get confused and is not meant as a safety protection to stop redirecting.
See also:
*https://support.mozilla.org/kb/Options+window+-+Advanced+panel#General_tab
*http://kb.mozillazine.org/accessibility.blockautorefresh
*http://kb.mozillazine.org/Accessibility_features_of_Firefox

How do I update to Firefox 3.6.3 for Mac OS X 10.4 when although logged in as an administrator I don't have sufficient permissions?

I am trying to update to Firefox 3.6.3 for Mac OS X 10.4 but when I try to install am told that I don't have sufficient privileges. I am logged in as an administrator.

See http://kb.mozillazine.org/Installing_Firefox#Mac_OS_X
Download a new copy of the Firefox program: http://www.mozilla.com/firefox/all.html
Trash the current Firefox application to do a clean reinstall.
Install the new version that you have downloaded.
Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data.

Event 1053 ActiveSync doesn't have sufficient permissions to create

Similar Messages

Maybe you are looking for