To work around this issue, assign the Exchange Servers group the right to change permissions against msExchActiveSyncDevices objects. To do this, follow these steps:

1. Start Active Directory Users and Computers.
2. Click View, and then click to enable Advanced Features.
3. Right-click the object where you want to change the Exchange Server permissions, and then click Properties.

    Note

   You can change permissions against a user, an organizational unit, or a domain.

4. On the Security tab, click Advanced.
5. Click Add, type Exchange Servers, and then click OK.
6. In the Apply to box, click Descendant msExchActiveSyncDevices objects.
7. Under Permissions, click to enable Modify Permissions.
8. Click OK three times.