Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

Unable to delete disabled AD account with CN=ExchangeActiveSyncDevice even though inherit permissions is checked through MIIS

$
0
0
Hi Experts,

one of our clients uses MIIS to manage some of the AD users, The issue here we are facing is we are unable to delete disabled accounts which were enabled for ActiveSync and have a child object created as CN=ExchangeActiveSyncDevice. I have read other blogs with this same issue which was solved by checking "inherit permission", I have checked these users and found they already have the check mark. Also the service account used by MIIS is listed in Domain Admins group and has full control permissions on the user object. These disabled user objects can be deleted manually but when tried from MIIS it does not.

Can I have some help and pointers please.

Thank you.

Heman Gupta

Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>