Home / Articles / Microsoft Exchange / Exchange ActiveSync returned an HTTP 500 response — Exchange 2010

Exchange ActiveSync returned an HTTP 500 response — Exchange 2010

Here at Denver Computer Services company NOYNIM we try to help out the community in some of the things we see and our solutions.

 

Recently we saw the following error after an exchange 2010 migration (this can happen when migrating from exchange 2003 to 2010 or 2007 to 2010 or 2010 to 2010):

 

Exchange ActiveSync returned an HTTP 500 response.

 

One of our processes after every exchange setup/migration is to test everything through:

https://www.testexchangeconnectivity.com/

 

one of our activesync test failed with the following error:

 

Exchange ActiveSync returned an HTTP 500 response.

 

After further investigation we found that we had users with privlidges AD groups (administrators, domain admins, etc).  while this is not best practices it happens for various reasons.

 

To correct this user you will need to do the following:

 

  • Open up AD Users and Computers
  • Click view and make sure you have advanced features checked
  • Goto the account properties in question
    • Click the security tab
    • Click advanced
    • Check if the ‘Inculde inheritable permissions from this object’s parent’ is checked
      • It will need to be checked and most likely isn’t and that’s why you are getting the activesync error
      • To resolve this simply check this box

 

If you have many users you may be asking yourself how to automate this process.  NOYNIM Denver Computer Services recommends using ADModify.NET found here http://admodify.codeplex.com/ , simply download the latest ADModify.NET build you see.  At the time of this writing the latest was ADModify 2.1.

Now you will need to do the following:

  • Download, extract and run ADModify as an administrator (right click and run as administrator)
  • Click Modify Attributes
  • Select your domain (i.e DC=domain)
  • Select the DC that you are running this on
  • Uncheck: groups, contacts and public folders
  • Hit the green go arrow button
  • Double click on your domain
  • Drill into the OU you need to make the changes on
    • Click add to list
  • highlight all of your users
  • click next
  • click account
  • select both check boxes next to allow Inheritable Permissions to Propagate To This Object
  • the pop will tell you how many users were impacted by this change

 

This only changes current users so in you create privileged AD users in the future you will have the same issue.  To overcome this you will need to change the default template that is applied to the users.

 

To do this go back into AD Users and computers

  • select system
  • goto properties of AdminSDHolders
  • click the security tab
  • click advanced
  • check ‘Include inheritable permissions from this objects parent’ and click apply

 

We at Denver Computer Services NOYNIM hope that this article has helped you.  Please also provide us your comments so we know how we are doing.

 

Thank you,

Share


Comment on Exchange ActiveSync returned an HTTP 500 response — Exchange 2010

One Response to “ Exchange ActiveSync returned an HTTP 500 response — Exchange 2010 ”

  1. Bill on April 10th, 2013 3:44 am

    Aw, this was a really nice post NOYNIM.

Leave a Reply






Contact Us