2515136 - Exchange ActiveSync account is added to iOS device but the device does not show up in Exchange Management Console

• Exchange ActiveSync account is deployed to and configured on iOS device, but the device does not exist in Exchange (e.g. Get-MobileDevice -Identity "username" returns nothing)
  AND
• The following error is present in Event Viewer Application Log:

Event Code 1053

Source: MSExchange ActiveSync

Exchange ActiveSync doesn't have sufficient permissions to create the "CN=iOS,CN=Users,DC=domain,DC=com" container under Active Directory user "Active Directory operation failed on <DOMAIN CONTROLER ADDRESS>. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03152612, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0. Make sure the user has inherited permission granted to domain\Exchange Servers to allow List, Create child, Delete child of object type "msExchangeActiveSyncDevices" and doesn't have any deny permissions that block such operations.

• Afaria 7
• Microsoft Exchange 2013

Exchange ActiveSync doesn't have sufficient permissions to create, Active Directory operation failed on, Access is denied, INSUFF_ACCESS_RIGHTS, Make sure the user has inherited permission granted to, msExchangeActiveSyncDevices, Event code 1053, iOS Exchange ActiveSync , KBA , MOB-AFA , Afaria , Problem