Solved

Exchange 2010 remove mobile partnership not working

Posted on 2013-05-23
7
1,582 Views
Last Modified: 2013-05-23
Exchange 2010 SP1
I have a test account setup on a droid and also on an iphone

From the EMC I right-click the user to Manage Mobile Phone and then choose to remove the mobile phone partnership. It succeeds fine. Initially email on the phone will go away, throw some errors about connecting, then within 5 minutes all email is back and I can send/receive email from the phone. I also tried using the shell - Remove-ActiveSyncDevice -Identity...

I also tried from OWA. I logged on as the test user and hit the X to delete the phone. It goes away for a few minutes and then returns. ANy ideas? Does SP2 fix this?? Thanks so much for any help.
0
Comment
Question by:cb_it
  • 5
  • 2
7 Comments
 
LVL 14

Expert Comment

by:Ben Hart
ID: 39192386
You have to manually remove the account info from the phone.  The relationship is re-established if the device re-syncs to the server.
0
 

Author Comment

by:cb_it
ID: 39192412
So, if an employee loses the device, what are my options? What is the point then of having the option to 'remove mobile phone partnership'??
0
 
LVL 14

Expert Comment

by:Ben Hart
ID: 39192414
All I can find so far indicate manual removal of the account settings on the mobile device are required.. either that or you disallow ActiveSync for the user.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 14

Expert Comment

by:Ben Hart
ID: 39192426
Look like the best option to do is set the default active sync access settings to Quarantine new devices for admin approval.  Check here: http://mobilitydojo.net/2009/09/28/restricting-exchange-activesync-access/
0
 
LVL 14

Accepted Solution

by:
Ben Hart earned 500 total points
ID: 39192443
When a user reports a lost mobile device, one of the first things done should be changing their password.  So if the device was found and someone tries accessing their mail you've performed a remote wipe that has hopefully succeeded, then you remove the device from their ActiveSync settings and changed the users password.  Without new credentials the thief cannot access mail.
0
 

Author Comment

by:cb_it
ID: 39192473
Like I said, the remove mobile partnership is pointless, within a few minutes the phone syncs right back up. I also am hesitant to do a full remote wipe. We have a BYOD setup here and I cant imagine the blowback from wiping someone's phone. They lose all data. Yikes!

I guess changing their password is the option.
0
 
LVL 14

Expert Comment

by:Ben Hart
ID: 39192483
Here's the problem with BYOB.. what we've been looking at at work ourselves.  We've worked up a disclaimer the employee must agree to before they can use their own device.  If they want to store the companies information on their personal device then they MUSt agree to let us wipe it in the event they lose it.. lest company owned information winds up in the wrong hands.  If they do not agree to that (and our policy forcing a password on the device) then they do not get to use their device and must use a company-provided Blackberry.  Simple as that.

the information belongs to the organization.. not the employee, therefore to safeguard the info the company must be allowed to impose rules.
0

Featured Post

Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Join & Write a Comment

Suggested Solutions

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now