king daddy

<div>
Was able to find a minute to search on this and Alex's info seems correct though I think I am going to use -ActiveSyncEnabled $false as well as -OWAEnabled $false just to be sure they are blocked from all avenues of access from mobile devices.
</div>


<div>
That'll work fine, in which case you just need to populate the txt file :)
</div>


<div>
ha right on. it didn't work though. so the activesync command worked. I can see it disabled in exchange admin center. however, OWA still shows enabled in exchange admin center. weird thing is, running &quot;Get-CasMailbox -identity &quot;upn&quot; -Filter {OWAEnabled -eq $false}&quot; in powershell shows both activesync and OWA as disabled (enabled = false). <br />
<br />
The user I am testing with is still receiving emails. <br />
<br />
Any ideas?
</div>


<div>
It may take time for replication at a guess.<br />
<br />
Is this exchange online you're using?
</div>


<div>
it is office 365. one test user on an iphone using the built-in mail app is no longer receiving email. Another test user using the Outlook for iOS app was still receiving emails when the other user was not, even though I ran the powershell against both of at the same time. I emailed the second test user twice late yesterday and didn't hear back but he may have not been checking his phone. <br />
<br />
Both still show OWA enabled in EAC but disabled when checking in powershell.<br />
<br />
Thanks
</div>


<div>
Weird, really weird, I mean maybe you could try running it again your azure based AD, that may help to speed things up.<br />
<br />
It's obviously the right way to do it since it worked for one....
</div>


<div>
I will try that. The second test user emailed me just a few minutes ago from his phone verifying he is still receiving email to it using the Outlook iOS app. First test user using the apple iOS mail app cannot even connect to the server so she is not getting emails.
</div>


<div>
do you know if you can manipulate the DeviceAccessState setting? If so, I can set it to 'blocked' for those users on iOS or Android Outlook app which would prevent them from getting email. <br />
<br />
So I have a CSV with all Get-CASMailbox info, including device ID. I am thinking I can import a text file with Device IDs or set a variable to pull in the device IDs and add them to the ActiveSyncBlockedDeviceIDs<wbr /> list. Though, I am thinking I would also somehow need to match the DeviceID to a user mailbox and I am not sure how to do that. <br />
<br />
I tried this and waiting to see if it works. If so, I will just need to figure out how to script in for 200 users. <br />
<br />
$MobileDevice = Get-MobileDevice -Mailbox user@company.com<br />
Set-CASMailbox -Identity user@company.com -ActiveSyncBlockedDeviceID<wbr />s $MobileDevice.DeviceId
</div>


<div>
So mine worked but I only tested one user. I am going to use yours as I agree that it will work and should allow me to import a list of mobile device IDs. Just need to figure that out...<br />
<br />
To be clear, mine worked but I typed in the first line and ran it then typed in the second and ran it. The user did not get my test email, nor any others, and also received a pop-up in the Outlook for iOS app stating it was blocked from accessing the server (or something similar).<br />
<br />
Thanks
</div>


<div>
So I ended up using these commands. There may be a better way but it worked for me to get the job done (block email on non-company phones).<br />
Thanks for the help Alex Green.<br />
<br />
<b>Disable EAS / OWA for multiple users</b><br />
$Users = gc &quot;PATH TO TEXT (.txt) FILE WITH USER’S PrimarySmtpAddress&quot;<br />
Foreach ($User in $Users){Set-CASMailbox -Identity &quot;$User&quot; -OWAEnabled $false}<br />
Foreach ($User in $Users){Set-CASMailbox -Identity &quot;$User&quot; -OWAforDevicesEnabled $false}<br />
Foreach ($User in $Users){Set-CASMailbox -Identity &quot;$User&quot; -ActiveSyncEnabled $false}<br />
<br />
<b>Reenable EAS / OWA for multiple users</b><br />
$Users = gc &quot;PATH TO TEXT (.txt) FILE WITH USER’S PrimarySmtpAddress&quot;<br />
Foreach ($User in $Users){Set-CASMailbox -Identity &quot;$User&quot; -OWAEnabled $true}<br />
Foreach ($User in $Users){Set-CASMailbox -Identity &quot;$User&quot; -OWAforDevicesEnabled $true}<br />
Foreach ($User in $Users){Set-CASMailbox -Identity &quot;$User&quot; -ActiveSyncEnabled $true}<br />
<br />
<b>Disable / reenable EAS / OWA for individual user</b><br />
<b>DISABLE</b><br />
Set-CASMailbox -Identity &quot;User PrimarySmtpAddress&quot; -OWAforDevicesEnabled $false<br />
Set-CASMailbox -Identity &quot;User PrimarySmtpAddress&quot; -OWAEnabled $false<br />
Set-CASMailbox -Identity &quot;User PrimarySmtpAddress&quot; -ActiveSyncEnabled $false<br />
<br />
<b>REENABLE</b><br />
Set-CASMailbox -Identity &quot;User PrimarySmtpAddress&quot; -OWAforDevicesEnabled $true<br />
Set-CASMailbox -Identity &quot;User PrimarySmtpAddress&quot; -OWAEnabled $true<br />
Set-CASMailbox -Identity &quot;User PrimarySmtpAddress&quot; -ActiveSyncEnabled $true<br />
<br />
<br />
<b>CONFIRM EAS/OWA STATUS INDIVIDUAL USER</b><br />
Get-CASMailbox -identity &quot;User PrimarySmtpAddress&quot;<br />
<br />
<br />
<br />
<b>DISABLE EWS MULTIPLE USERS</b><br />
$Users = gc &quot;PATH TO TEXT (.txt) FILE WITH USER’S PrimarySmtpAddress&quot;<br />
Foreach ($User in $Users){Set-CASMailbox -Identity &quot;$User&quot; -EwsBlockList @{<b>Add</b>=&quot;Outlook-iOS/*&quot;,&quot;Outlook-<wbr />Android/*&quot;<wbr />}}<br />
<br />
<b>DISABLE EWS SINGLE USER</b><br />
Set-CASMailbox -Identity &quot;User PrimarySmtpAddress&quot; -EwsBlockList @{<b>Add</b>=&quot;Outlook-iOS/*&quot;,&quot;Outlook-<wbr />Android/*&quot;<wbr />}<br />
<br />
<b>REENABLE EWS MULTIPLE USERS</b><br />
$Users = gc &quot;PATH TO TEXT (.txt) FILE WITH USER’S PrimarySmtpAddress&quot;<br />
Foreach ($User in $Users){Set-CASMailbox -Identity &quot;$User&quot; -EwsBlockList @{<b>Remove</b>=&quot;Outlook-iOS/*&quot;,&quot;Outlook-<wbr />Android/*&quot;<wbr />}}<br />
<br />
<br />
<b>REENABLE EWS SINGLE USER</b><br />
Set-CASMailbox -Identity &quot;User PrimarySmtpAddress&quot; -EwsBlockList @{<b>Remove</b>=&quot;Outlook-iOS/*&quot;,&quot;Outlook-<wbr />Android/*&quot;<wbr />}<br />
<br />
<br />
<b>CONFIRM EWS</b><br />
Get-CASMailbox &quot;User PrimarySmtpAddress&quot; | Select *EWS*
</div>


<div>
Nice, that's a good breakdown, thanks for sharing :-)
</div>


<div>
<div class="content wysiwyg-content">
Is there a way to import a CSV with either UPN or SMTP addresses into powershell then run a command to block those users OWA and EAS access on their mobile devices? Is it then possible to wipe only account data (which is an option in the Exchange Admin Center)? I'd rather not have to touch each user account to do this.<br />
<br />
FYI, I set up Office 365 MDM and it was able to enroll and manage a few users. Problem is we also use Meraki MDM. As such, those with Meraki MDM (only for company wifi and maybe VPN - that is another group) received failures when trying to enroll. The devices did show up in Office 365 MDM as managed, but trying to wipe company data did not work (stuck on pending) and it is too much of a hassle for the user to have to download the company portal app, install the cert, then allow management. It was much simpler on my Samsung with Android. <br />
<br />
Anyway... any help <b>much appreciated</b> as I need to have this sorted by Friday so I can enforce the new company policy.
</div>
</div>


Is there a way to import a CSV with either UPN or SMTP addresses into powershell then run a command to block those users OWA and EAS access on their mobile devices? Is it then possible to wipe only account data (which is an option in the Exchange Admin Center)? I'd rather not have to touch each user account to do this.

FYI, I set up Office 365 MDM and it was able to enroll and manage a few users. Problem is we also use Meraki MDM. As such, those with Meraki MDM (only for company wifi and maybe VPN - that is another group) received failures when trying to enroll. The devices did show up in Office 365 MDM as managed, but trying to wipe company data did not work (stuck on pending) and it is too much of a hassle for the user to have to download the company portal app, install the cert, then allow management. It was much simpler on my Samsung with Android. 

Anyway... any help much appreciated as I need to have this sorted by Friday so I can enforce the new company policy.

Help blocking and disabling mobile access to office 365 email

Windows PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language built on the .NET Framework. PowerShell provides full access to the Component Object Model (COM) and Windows Management Instrumentation (WMI), enabling administrators to perform administrative tasks on both local and remote Windows systems as well as WS-Management and Common Information Model (CIM) enabling management of remote Linux systems and network devices.

Powershell

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

Exchange

Mobile web development, also known as responsive web design, is an approach to web design aimed at crafting sites to provide an optimal viewing and interaction experience—easy reading and navigation with a minimum of resizing, panning, and scrolling—across a wide range of devices (from desktop computer monitors to mobile phones). A site designed with RWD adapts the layout to the viewing environment by using fluid, proportion-based grids, flexible images, and CSS3 media queries.