An AD setting that can make or break Active-Sync to your mobile device

Open Active Directory Users and Computers

Click View menu

Select Advanced Features

Locate the user in Active Directory, select Properties on the user profile

Open the Security tab

Click Advanced button at the bottom of the Security tab

Make sure "Include inheritable permissions from this object's parent" is checked