I understand ActiveSync will not work for accounts that are in protected groups without checking the inheritable permissions checkbox (which I did). However, I still cannot get ActiveSync to work with one account which happens to be the domain built-in administator account (I know I know). Is there anyway to make this work, or am I going to have to create new account\mbx and migrate mail items?Thx!

You should create a new account (and quit using that one!) but you shouldn't have to migrate that one. Just mail-disable the account, and re-connect the mailbox to the new account.

Ok. Any idea why checking inheritable permissions did not work? Is it because this is the first administrator account? No other why around that created a new account?

I expect that's by design. I don't don't know of a way around it.

Fair enough.. thanks man!