Solved

ActiveSync policies set in various places in various management consoles

Posted on 2016-08-01
2
30 Views
Last Modified: 2016-08-26
We are  doing a risk assessment of certain security settings on a number of our key systems, including 3 internal 2010 exchange servers. on each server, we can go to the exchange management console and view the active sync policies within organization configuration > client access > exchange ActiveSync mailbox policies. There are some concerns about the active sync policies set here. However, the admin has shown some completely contradictory AS policies set in some sort of web admin console (exchange control panel? > phone & video > ActiveSync access?). How can we tell which policies are taking effect, or whether both are valid. Or can policies set via either management console, if so which takes precedent and overrules the other?
0
Comment
Question by:pma111
  • 2
2 Comments
 
LVL 36

Accepted Solution

by:
Jian An Lim earned 500 total points (awarded by participants)
ID: 41745935
Activesync policy is policies defined by administrator
you can have multiple active sync policy

then administrator then apply one activesync policy to a mailbox. you cannoy apply more than one policy to a user

So your console shows every activesync policy, where the websites shows the users end (and how many device they owns)

i usually prefer powershell as it can be use in other form

https://technet.microsoft.com/en-us/library/bb123994%28v=exchg.141%29.aspx?f=255&MSPPError=-2147217396



what exactly you want to do probably will help me to guide you on your journey.
0
 
LVL 36

Expert Comment

by:Jian An Lim
ID: 41771432
provided an overview for the answer
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question