How to remove ExchangeActiveSyncDevices child object without exchange installed

Question

We've recently migrated to Server 2016 from SBS 2011. We disabled / removed 90% of Exchange under the previous SysAdmin so unfortunately there are a few issues.

We have come across these when setting up Azure AD Sync for Office 365.

There are Sync errors occuring for the users that had ExchangeActiveSyncDevices on the old local exchange server. This fortunately is only 5 of us, but we need to fix it.

Using both ldp.exe and ADSI Edit you get an access denied error when trying to remove the child object.

Is there a way to forcefully remove these child objects without exchange being installed?

Cheers.

Solution 1

Try to use ADUC to delete the elements (its not recommended, but might work for you). You need to use the "view -> users, Contacts, Groups, and Computers as containers" option:

Then the ActiveSync elements will show:

Solution 2

If you are a domain admin, an access denied is not going to stop you; chances are permissions are restricted on those objects... but you can still take ownership of them and change their permissions to give you full control, then delete them.

What's more important, you should make sure all of your user accounts have been properly cleaned of all Exchange-related attributes before trying to sync them with Office 365.

Comments

[BastianW]

Did you tried ADUC via Domain admin? Normally the child object is visible here and you can delete it as well (not really recommended by Microsoft).

[Welshname]

You cant see it under ADUC.

[BastianW]

sure you can, I just created an screenshot for you inside my answer.