[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 804
  • Last Modified:

Restricting only iPhone through Active Sync

I have a group of users who have OMA enabled.
They are using iPhone for accessing emails. Is there any way we can restrict just iPhone in Active Sync?
I dont want any one connecting to my exchange using any other mobile which supports active sync.

Thanks
Shaba
0
Shabarinath Ramadasan
Asked:
Shabarinath Ramadasan
3 Solutions
 
e_aravindCommented:
I have the following answer for windows mobile...hope this should be fine for iPhone too

How to allow only Provisioned Windows Mobile Devices to Connect to your Network
http://blogs.technet.com/b/vik/archive/2007/02/27/how-to-allow-only-provisioned-windows-mobile-devices-to-connect-to-your-network.aspx
0
 
Shabarinath RamadasanInfrastructure ArchitectAuthor Commented:
Thanks Aravind..
We are about to migrate to E2k10.. currently on 2003.

Any other option? or any third party tool?

Thanks
Shaba
0
 
Jeff BeckhamEngineerCommented:
Are you reverse proxing through ISA?  I've setup ActiveSync through ISA before such that users need to be a member of an AD group in order to use ActiveSync (rather than all users).  It would require you to manage a group in AD containing all of your iPhone user mailboxes (and not prevent them from using another device) but will allow you to manage who is using ActiveSync.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Shabarinath RamadasanInfrastructure ArchitectAuthor Commented:
Good suggestion jebeckham.
I am pretty clear on that part. By default, users wont have active sync enabled.

My only worry is how to make sure that company provided iPhone is only used to connect to our network.

Thanks
Shaba
0
 
Jeff BeckhamEngineerCommented:
Right, corporate management of iPhones becomes challenging rather quickly, particularly if you're using Exchange Server 2003 on the back-end.
0
 
Alan HardistyCo-OwnerCommented:
Short answer is that you can't restrict Activrsync devices on Exchange 2003.  You can on Exchange 2010 happily, but until you migrate, you can only allow or disallow activesync to specific users.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now