Solved

Active Sync Device Rule not working

Posted on 2015-02-02
2
43 Views
Last Modified: 2016-06-23
Hello, wer are running Exchagne 2010 SP3 RU8v2 in our enviornment.  In light of some security issues with the new Outlook for iOS and Android, we decided to block any device trying to sync with this application.
 
I created an Active Sync rule, based on the UserAgent first, and seemed to not work, so i created on based on DeviceOS (see blow) and that doesn't seem to work either.  It's been about 2 hours since I created these, so not sure if it's a timing thing either.
 
as you can see from the below output, I'm expecitng the device to be blocked but it is still in the allowed state.
 
Am I missing something?  Anyone have any insight?
 
DeviceId                : C62DDA89E034BB93
 DeviceImei              :
 DeviceMobileOperator    :
 DeviceOS                : Outlook for iOS and Android 1.0
 DeviceOSLanguage        :
 DeviceTelephoneNumber   :
 DeviceType              : Outlook
 DeviceUserAgent         : Outlook-iOS-Android/1.0
 DeviceModel             : Outlook for iOS and Android
 DeviceAccessState       : Allowed
 DeviceAccessStateReason : Individual
 DeviceAccessControlRule :
 DeviceActiveSyncVersion : 14.1

Capture.PNG
0
Comment
Question by:SahinBoluk
2 Comments
 
LVL 36

Accepted Solution

by:
Jian An Lim earned 500 total points
ID: 40589711
the quick fix is to apply the filter on IIS server

goto IIS/Microsoft-Exchange-activesync Request filtering and add filtering rules in there.

(Header = User-Agent, File Extension = .eas Deny strings = Outlook-iOS-Android/1.0)
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Utilizing an array to gracefully append to a list of EmailAddresses
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now