Solved

How do I disable Exchange ActiveSync access by default for new users in AD?

Posted on 2007-11-14
8
9,915 Views
Last Modified: 2013-12-05
We are trying to lock down the ActiveSync feature for mobile devices, having it available only to people I manually enable it for.  Is there a way to make it so when a new user is built in Active Directory, Exchange ActiveSync is disabled by default?
0
Comment
Question by:quinnjudge
8 Comments
 
LVL 48

Expert Comment

by:Mikal613
ID: 20283568
Go in the Exchange System Manager
Then Mobile Settings
 Global Settings
0
 
LVL 22

Expert Comment

by:ATIG
ID: 20283571
create a template that you copy.......
0
 
LVL 48

Assisted Solution

by:Mikal613
Mikal613 earned 100 total points
ID: 20283572
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 1

Author Comment

by:quinnjudge
ID: 20283645
Does changing the settings in First Organization > Global Settings > Mobile Services for ActiveSync completely disable it for all users, or does it just make it disabled by default at the user level?  (Meaning, I could then enable it on a user-by-user basis).  I want to find the easiest way to allow ActiveSync only to about 5% of the company...
0
 
LVL 104

Accepted Solution

by:
Sembee earned 150 total points
ID: 20283908
You cannot disable it by default for all new users without a template.
If you turn it off in Global Settings that is it for everyone.

Microsoft work on the basis of everything enabled and then disable for each user.

The only thing you can do is use something like admodify.net to disable it across all users then enable it for each user as required. For new users you will have to put it in to the account setup procedure or use a template.

Simon.
0
 
LVL 22

Expert Comment

by:ATIG
ID: 20286239
man no love for me :P
0
 

Expert Comment

by:dwlinder
ID: 23177842
If I turn off the global and turn on one users does the one user work ????

Would not think so.... Looking for way to have every new user created have mobile Services OFF.

Thanks,
David
0
 
LVL 1

Expert Comment

by:dbllp
ID: 34148789
get-Mailbox -ResultSize Unlimited| set-CASMailbox -ActiveSyncEnabled:$False

This will disable it for everyone then you can enable on a per mailbox basis in the GUI or by script.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question