Symptom
After enabling the CAS test connectivity user (extest), the ActiveSync test may fail with 403 forbidden.
Cause
The 403 error is usually caused by not allowing non-provisionable devices in your Microsoft Exchange Activesync policy.
Resolution
Modify the existing ActiveSync policy or create a new policy and apply it to the test Exchange account for monitoring can resolve this.