Well it has to be 1 of 3 things. Something changed in the AD account, something changed in the Exchange account or something changed on the phone itself. Can you enable debugging on the phone to ascertain why exactly the phone is throwing an error.
Follow these steps to enable debugging:
1. On the android phone go to menu -> email. You will need to have an already configured email account in order to enable debugging. If there is not one then you can simply add the User's gmail account. After this gmail account has been added go to the "Accounts" screen in the email app and type the following.
debug
2. This should pop up a new screen with 4 checkboxes to enable enable debugging. Select all four check boxes and press the back button.
3. Now attempt to connect the User's phone to Exchange several more times so we get some good log data.
4. Connect the phone to a PC and Turn on USB storage.
The log should be located at the root of the phone's SD card and will be called emaillog.txt
Search the log for any pertinent error messages and look them up to ascertain the real reason behind the sync failure.
Edit:
Well the log info that you have posted is fairly generic. So I am going to post a couple of things that have helped me in the past:
1. Attempt to disable the the Exchange ActiveSync policy on the User's mailbox and then attempt to re-enable. You could even try making a copy of your current EAS and have him point to that one instead to see if that does anything.
2. Under the User's Active Directory make sure Include Inheritable permissions from this object's parent is check marked. You can view this setting by doing the following:
- In Active Directory Click
View->Advanced Features
- Right Click the User's account and go to the
Security Tab
- Click on
Advanced
- Check the box
Include Inheritable permissions from this object's parent pic below:
Best Answer
You appear to have hit a long-standing issue in Android. In particular Android will only load the autodiscover XML over HTTPS. If you serve it over HTTP then Android will refuse to even attempt to use it.
As described in the bug, Android does not use DNS SRV records to locate mail services.