Solved

How do I disable Exchange ActiveSync access by default for new users in AD?

Posted on 2007-11-14
8
9,977 Views
Last Modified: 2013-12-05
We are trying to lock down the ActiveSync feature for mobile devices, having it available only to people I manually enable it for.  Is there a way to make it so when a new user is built in Active Directory, Exchange ActiveSync is disabled by default?
0
Comment
Question by:quinnjudge
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 48

Expert Comment

by:Mikal613
ID: 20283568
Go in the Exchange System Manager
Then Mobile Settings
 Global Settings
0
 
LVL 22

Expert Comment

by:ATIG
ID: 20283571
create a template that you copy.......
0
 
LVL 48

Assisted Solution

by:Mikal613
Mikal613 earned 100 total points
ID: 20283572
0
Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

 
LVL 1

Author Comment

by:quinnjudge
ID: 20283645
Does changing the settings in First Organization > Global Settings > Mobile Services for ActiveSync completely disable it for all users, or does it just make it disabled by default at the user level?  (Meaning, I could then enable it on a user-by-user basis).  I want to find the easiest way to allow ActiveSync only to about 5% of the company...
0
 
LVL 104

Accepted Solution

by:
Sembee earned 150 total points
ID: 20283908
You cannot disable it by default for all new users without a template.
If you turn it off in Global Settings that is it for everyone.

Microsoft work on the basis of everything enabled and then disable for each user.

The only thing you can do is use something like admodify.net to disable it across all users then enable it for each user as required. For new users you will have to put it in to the account setup procedure or use a template.

Simon.
0
 
LVL 22

Expert Comment

by:ATIG
ID: 20286239
man no love for me :P
0
 

Expert Comment

by:dwlinder
ID: 23177842
If I turn off the global and turn on one users does the one user work ????

Would not think so.... Looking for way to have every new user created have mobile Services OFF.

Thanks,
David
0
 
LVL 1

Expert Comment

by:dbllp
ID: 34148789
get-Mailbox -ResultSize Unlimited| set-CASMailbox -ActiveSyncEnabled:$False

This will disable it for everyone then you can enable on a per mailbox basis in the GUI or by script.
0

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question