prevent users from accessing Exchange online from non activesync device

I will try and make this question as clear as I can-

We recently switched from an on-prem Exchange to Exchange online. Previously, the only three ways of accessing our email was VPN, ActiveSync and webmail. However, it now appears that any user can use any device that accepts an Exchange email account and start getting their emails. I understand this is the idea of cloud email, but as a HIPAA organization, this presents a serious security risk. My question is this-how can I track how users access email? I know I can limit things based on IP(http://technet.microsoft.com/en-us/library/hh526961(v=ws.10).aspx), but then it would work if they had a VPN connection and we allow certain users to access our servers using their home PC if they use a VPN connection. But now they do not need that.

Is there any way to track what devices and users are accessing our hosted Exchange environment, or is this just the nature of hosted email?
dkurz8814Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

basil2912Commented:
Hello, might wanna check http://technet.microsoft.com/en-us/library/dn282287.aspx and http://technet.microsoft.com/en-us/library/dn282277.aspx.

Mind that win8 client is ActiveSync Based.

Setting device access rules might help - here is the 2013 version http://justaucguy.wordpress.com/2013/02/25/exchange-2013-configure-your-mobile-device-mailbox-policy/

ansd here is the blog that should give you some insight: http://blogs.technet.com/b/exchange/archive/2010/11/15/3411539.aspx.

Depending on exactly you need to achieve, other types of filtering/block might be needed, I am thinking here at get-CasMailbox settinhd -  http://technet.microsoft.com/en-us/library/bb125264(v=exchg.150).aspx

Hope it helps.
0
Mohammed HamadaSenior IT ConsultantCommented:
I think for hosted environment the software "Exchange reporter plus" does what you're looking for. it's free for 25 users.

http://www.manageengine.com/products/exchange-reports/
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.