server-side synchronization error - not have read/write privilege over the mailbox entity

I configured Email server profiles with "credentials specified in email server profile", and setup username/password, and set this user's impersonation on Exchange server.

When I test and Enable users, some are fine, and other get:

I googled, but got nothing.

Somebody have suggestion?

Thanks.