Hi, we have approximately 1000 users with Exchange mailboxes, and utilise ActiveSync with the name  activesync.company.com  for most users, and this works well.

However, for around 45 users (mostly senior execs, road warriors and early adopters), when we were on Exchange 2007, we used ISA 2006 server, and these people utilise an ActiveSync name of  OMA.company.com  that is published through ISA server, which connects to one of our Exchange CAS servers directly (no Load Balancer).

We want to decomission our ISA 2006 server, and migrate these 45 users over to using  activesync.company.com   - we would like to do this without having to visit these users. Is there a way to reconfigure the Android and iOS users to use the new ActiveSync load-balanced name and IP?

We don't use OWA, but our "LegacyURL" is currently blank.

We have considered DNS changes so that OMA.company.com is directed to ActiveSync.company.com - but the certificate at ActiveSync.company.com does not include any SAN names or CN for OMA.company.com

Does anyone have any guidance on how we can remotely transition these users?

Hi ChristianWickham,

As you have already considered,

• DNS change is the best bet you have (if you resolve the certificate prob).
• Drop them an email, call them up are other options.

If you are really up for this, in future you might want to deploy MDM solutions like MS Intune, Airwatch to name a few.

These applications have the capacity to remotely deploy ActiveSync settings on registered devices apart from loads of other features.

Enable access to corporate email using email profiles with Microsoft Intune

Email profiles in Microsoft Intune help you create, deploy and monitor Exchange ActiveSync email settings on devices. This lets users access corporate email on their personal devices without any required setup on their part.

AirWatch-  Email Infrastructure Integration:
Configure email over-the-air

Corporate Resources:
Authentication certificates for Email, Wi-Fi and VPN can be silently installed and removed from devices, and native email clients can be configured for Exchange ActiveSync (EAS).

 

References:

Set up mobile device management using Exchange ActiveSync in Microsoft Intune

Thanks Satyajit!

We already have Citrix XenMobile MDM solution utilised for managing the ActiveSync connection for the remaining 900 users - and this will allow us to remotely change configuration.

However, it's the 45 users who are not yet on any MDM solution that are the problem - these are the people we want to move off ISA and onto MDM.

I will ask my customer if they can replace the activesync.company.com certificate with one that has a SAN that includes OMA.company.com

Still open to other ideas!