Geeks With Blogs
UC The Future Covering all things Microsoft UC!

Hello fellow geeks!

I'm kicking off this new blog with an issue that was a real nuisance, but was relatively easy to fix.

During a recent Exchange 2003 to 2010 migration, one of the users was getting an error on his Windows Phone 7 device. The error code that popped up on the phone on every sync attempt was 86000C09

We tested the following:

  1. Different user on the same device: WORKED
  2. Problem user on a different device: FAILED

 

Seemed to point (conclusively) at the user's account as the crux of the issue. This error can come up if a user has too many devices syncing, but he had no other phones. We verified that using the following command:

Get-ActiveSyncDeviceStatistics -Identity USERID

Turns out, it was the old familiar inheritable permissions issue in Active Directory. :-/ This user was not an admin, nor had he ever been one. HOWEVER, his account was cloned from an ex-admin user, so the unchecked box stayed unchecked. We checked the box and voila, data started flowing to his device(s).

Here's a refresher on enabling Inheritable permissions:

Open ADUC, and enable Advanced Features:

Then open properties and go to the Security tab for the user in question:

Click on Advanced, and the following screen should pop up:

Verify that "Include inheritable permissions from this object's parent" is *checked*.

 

You will notice that for certain users, this box keeps getting unchecked. This is normal behavior due to the inbuilt security of Active Directory. People that are in the following groups will have this flag altered by AD:

  • Account Operators
  • Administrators
  • Backup Operators
  • Domain Admins
  • Domain Controllers
  • Enterprise Admins
  • Print Operators
  • Read-Only Domain Controllers
  • Replicator
  • Schema Admins
  • Server Operators

Once the box is cheked, permissions will flow and the user will be set correctly. Even if the box is unchecked, they will function normally as they now has the proper permissions configured.

You need to perform this same excercise when enabling users for Lync, but that's another blog. :-)

 

-Chris

Posted on Wednesday, June 29, 2011 3:32 PM | Back to top


Comments on this post: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
thank you!! you've solved a biiiggggg issue for my phone (i migrate from 2007 to 2010 exchange)
Left by Davide Ruocco (Italy) on Aug 04, 2011 4:59 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
I think the only way to prevent this kind of dilemma is to have the presence of mind while working. You won't push the wrong button if you are fully aware and attentive to what you are doing. You don't need special programs to alter your mistake. - Joe Zanotti
Left by Joe Zanotti on Jan 07, 2012 7:06 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Thanks a lot Chris. This described & fixed my problem for 1 user coming from SBS 2003 (exch 03) to SBS 2011 (Exch 2010). I have no clue how that could have gotten unchecked on the user account. But now it's fixed! :-)

-
Doug
Left by Doug Mortensen on Jan 07, 2012 2:00 PM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Great post, but i still receive this error...

I tried to delete exchange account on my wp7, and when i added it again it worked, synced perfectly until i added myself as a recipient and after that, the same thing...
please help as im getting pretty annoyed and am about to test my phones endurance against a wall.
Left by Marko on Jan 12, 2012 7:53 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Hello again!

I managed to come up with an idea how to solve the issue...
Namely, i have installed as a firewall solution MS forefront for exchange who used to give me so much headache, and simply uninstalled it for this case, and after restarting server, voila!
Left by Marko on Jan 12, 2012 10:04 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Thank for you this post!
One iPhone user was unable to connect to mail after our 2007 to 2010 upgrade and couldn't figure out why. Tried setting up his account on my WP7 and got the 86000C09 error bringing me here. You solved a problem that I couldn't figure out for 3 days :D
Left by Nick on Apr 12, 2012 11:56 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Great post - got our iPhones working after a migration from SBS 2003 to 2011

It was only the oldest users who were not checked - the ones that were added back on SBS 4.5
Left by Simon Cooper on Apr 15, 2012 6:45 PM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Very helpful post!
Left by gatorHeel on Apr 25, 2012 8:08 PM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Thank you so much for this!! Mine was a swing migration from SBS 2003 to SBS 2011. The problem only affected one user, but the instructions above cured the problem. Thanks again!
Left by MStaples on May 22, 2013 10:25 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Awesome!!! Such a simple fix for such a #@$%# headache.

Thank you, Thank YOU!
Left by KTaczala on Oct 28, 2013 1:34 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Issue Resolved in a second. Thank you.
Left by Anil Jadhav on Nov 08, 2013 5:52 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
This worked for me after going from;
Server 2003 - Server 2012
Exchange 2007 - Exchange 2013.

We had one user with WP7 who I could not get to connect to exchange.
Almost re-created the account until I came across this.

Many thanks
Left by Alex Morris on Dec 11, 2013 9:38 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
thanks thanks thanks
Left by Raffaele turrini on May 08, 2014 11:35 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Thanks a lot for your helpful solution.
Saved what would have been a massive headache!
Left by Phil McGeehan on Jul 02, 2014 5:19 AM

# re: Windows Phone 7 ActiveSync error 86000C09 (My First Post!)
Requesting Gravatar...
Thank you for the post. This resolved the problem for me. We migrated the user from Exchange 2007 to Exchange 2013.
Left by Naga on Jul 19, 2015 5:37 AM

Your comment:
 (will show your gravatar)


Copyright © Chris Heacock | Powered by: GeeksWithBlogs.net