Controlling ActiveSync access
Hello,
In my exchange 2007 - all users have the Mailbox Feature Exchange ActiveSync turned on by default.
I would like to control who can attach a smartphone to my exchange server. So, my first thought was how to change that default setting to Disabled.
So, my question is this:
- Howdo youchange the default setting to disabled?
- Also - is there a way to do it by group memborship in AD?
THANKS!!
September 16th, 2008 3:07pm
Hi,
Actually, it can NOT be set Disabled by default while creating new users but it can be scheduled to run a script every midnight which disable all new users which are created in last one day...
Script to disable ActiveSync every night
Add-PSSnapin Microsoft.Exchange.Management.PowerShell.Admin
Get-User -ResultSize Unlimited | Where {($_.WhenCreated -gt (get-date).adddays(-1))} | Set-CASMailbox ActiveSyncEnabled $false
Regarding how to schedule a script, point 3 in below article can be reffered.
Exchange 2007 & Display Name Format
Note: This article is for another issue but method of scheduling above script can be referred from it.
Suplement:
In Exchange 2007 you can disable it for all existing users with below command..
Get-Mailbox -Server "ServerName" | Set-CASMailbox -ActiveSyncEnabled $false
You can enable it for users which are in OU "ActiveSyncEnabled" with below command and same can be written in script for multiple OUs...
Get-Mailbox | Where-Object {($_.Identity -like 'Contoso.com/ActiveSyncEnabled/*') -and ($_.ExchangeVersion -like '0.1*')} | Set-CASMailbox - ActiveSyncEnabled $True
Hope this helps..
Free Windows Admin Tool Kit Click here and download it now
September 16th, 2008 4:56pm