Solved

How do I disable Exchange ActiveSync access by default for new users in AD?

Posted on 2007-11-14
8
9,900 Views
Last Modified: 2013-12-05
We are trying to lock down the ActiveSync feature for mobile devices, having it available only to people I manually enable it for.  Is there a way to make it so when a new user is built in Active Directory, Exchange ActiveSync is disabled by default?
0
Comment
Question by:quinnjudge
8 Comments
 
LVL 48

Expert Comment

by:Mikal613
ID: 20283568
Go in the Exchange System Manager
Then Mobile Settings
 Global Settings
0
 
LVL 22

Expert Comment

by:ATIG
ID: 20283571
create a template that you copy.......
0
 
LVL 48

Assisted Solution

by:Mikal613
Mikal613 earned 100 total points
ID: 20283572
0
 
LVL 1

Author Comment

by:quinnjudge
ID: 20283645
Does changing the settings in First Organization > Global Settings > Mobile Services for ActiveSync completely disable it for all users, or does it just make it disabled by default at the user level?  (Meaning, I could then enable it on a user-by-user basis).  I want to find the easiest way to allow ActiveSync only to about 5% of the company...
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 104

Accepted Solution

by:
Sembee earned 150 total points
ID: 20283908
You cannot disable it by default for all new users without a template.
If you turn it off in Global Settings that is it for everyone.

Microsoft work on the basis of everything enabled and then disable for each user.

The only thing you can do is use something like admodify.net to disable it across all users then enable it for each user as required. For new users you will have to put it in to the account setup procedure or use a template.

Simon.
0
 
LVL 22

Expert Comment

by:ATIG
ID: 20286239
man no love for me :P
0
 

Expert Comment

by:dwlinder
ID: 23177842
If I turn off the global and turn on one users does the one user work ????

Would not think so.... Looking for way to have every new user created have mobile Services OFF.

Thanks,
David
0
 
LVL 1

Expert Comment

by:dbllp
ID: 34148789
get-Mailbox -ResultSize Unlimited| set-CASMailbox -ActiveSyncEnabled:$False

This will disable it for everyone then you can enable on a per mailbox basis in the GUI or by script.
0

Featured Post

Are end users causing IT problems again?

You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now