Solved

How do I disable Exchange ActiveSync access by default for new users in AD?

Posted on 2007-11-14
8
10,003 Views
Last Modified: 2013-12-05
We are trying to lock down the ActiveSync feature for mobile devices, having it available only to people I manually enable it for.  Is there a way to make it so when a new user is built in Active Directory, Exchange ActiveSync is disabled by default?
0
Comment
Question by:quinnjudge
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 48

Expert Comment

by:Mikal613
ID: 20283568
Go in the Exchange System Manager
Then Mobile Settings
 Global Settings
0
 
LVL 22

Expert Comment

by:ATIG
ID: 20283571
create a template that you copy.......
0
 
LVL 48

Assisted Solution

by:Mikal613
Mikal613 earned 100 total points
ID: 20283572
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 1

Author Comment

by:quinnjudge
ID: 20283645
Does changing the settings in First Organization > Global Settings > Mobile Services for ActiveSync completely disable it for all users, or does it just make it disabled by default at the user level?  (Meaning, I could then enable it on a user-by-user basis).  I want to find the easiest way to allow ActiveSync only to about 5% of the company...
0
 
LVL 104

Accepted Solution

by:
Sembee earned 150 total points
ID: 20283908
You cannot disable it by default for all new users without a template.
If you turn it off in Global Settings that is it for everyone.

Microsoft work on the basis of everything enabled and then disable for each user.

The only thing you can do is use something like admodify.net to disable it across all users then enable it for each user as required. For new users you will have to put it in to the account setup procedure or use a template.

Simon.
0
 
LVL 22

Expert Comment

by:ATIG
ID: 20286239
man no love for me :P
0
 

Expert Comment

by:dwlinder
ID: 23177842
If I turn off the global and turn on one users does the one user work ????

Would not think so.... Looking for way to have every new user created have mobile Services OFF.

Thanks,
David
0
 
LVL 1

Expert Comment

by:dbllp
ID: 34148789
get-Mailbox -ResultSize Unlimited| set-CASMailbox -ActiveSyncEnabled:$False

This will disable it for everyone then you can enable on a per mailbox basis in the GUI or by script.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Configuring Remote Assistance for use with SCCM
This video discusses moving either the default database or any database to a new volume.
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question