Solved

How to block exchange active synce on personal cell phones

Posted on 2015-01-21
4
102 Views
Last Modified: 2015-04-20
Hi,
  How you do block users from using Exchange Active Sync to access e-mail on their personal cell phones but allow company owned devices to access do it?
0
Comment
Question by:masterofall
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 250 total points
ID: 40562685
You can achieve this using the built-in Allow/Block/Quarantine option:

http://blogs.technet.com/b/exchange/archive/2010/11/15/3411539.aspx

When a device attempts to gain access it can be quarantined until approved or denied, thus you get the ability to block and allow the devices you want.

You may have to remove all Activesync devices after setting this up so that everyone has to go through the ABQ process.

Alan
0
 
LVL 2

Assisted Solution

by:NICK S
NICK S earned 250 total points
ID: 40563236
Allow block quarantine is best option , but most simple method would be to enable active sync using below command

Set-CASMailbox -Identity: "username" -ActiveSyncAllowedDeviceIDs: "<DeviceID_1>"

this will allow only device which is in allow list , you can also add multiple device IDs if you want
0
 
LVL 6

Expert Comment

by:Minecraft_ Enderman
ID: 40563806
1. Retrieve the device ID after the user has synchronized the device with the Exchange server.

Get-ActiveSyncDeviceStatistics -Mailbox:"<EmailAlias>" |fl DeviceID

2. Prevent that device from synchronizing with Microsoft Exchange.

Set-CASMailbox -Identity: "EmailAlias"
-ActiveSyncBlockedDeviceIDs: "<DeviceID_1>","<DeviceID_2>"

3. Enable a Device for Exchange ActiveSync

Set-CASMailbox -Identity: "EmailAlias" -ActiveSyncAllowedDeviceIDs: "<DeviceID_1>","<DeviceID_2>"
0
 
LVL 1

Author Closing Comment

by:masterofall
ID: 40733210
Kiss
0

Featured Post

 Watch the Recording: Learning MySQL 5.7

MySQL 5.7 has a lot of new features. If you've dabbled with an older version of MySQL, it is definitely worth learning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question