Hello everyone, I'm working on locking down the mobile devices that connect to our Exchange 2007 environment by configuring each user account to allow only one mobile device connect to Exchange. We are doing this using the following command: Set-CASMailbox -Identity "username" -ActiveSyncAllowedDeviceIDs "deviceid" My question is this. Once I've locked a user down to a specific device or devices, is there a way to list the deviceIDs that are allowed for that user? The command above does not give any feedback, it simply returns you to the next line in EMS. Typing in a known incorrect DeviceID yeilds the same result. So, I want to be certain that the deviceID I have entered is actually the one being used to restrict the user to that particular device. Thanks, Kezzran

Hi Kezzran, From the description about the issue, you want to list the DeviceIDs that are allowed for the specific user. So we should try the following command: [PS] C:\>Get-ActiveSyncDeviceStatistics -Mailbox <username> | fl deviceID For detailed, you can refer the following document, Get-ActiveSyncDeviceStatistics: http://technet.microsoft.com/en-us/library/aa996908(EXCHG.80).aspx If you have any other questions, I am very glad to have a further discussion with you. Best regards, Yang

Yang, Thank you for the response. I have tried that command previously, but it appears to simply list the DeviceID of the device the user is currently using to connect to Exchange, rather than the devices that they are restricted to. For example, I have set my own account to be restricted to one device, and when I run the command you gave it returns the DeviceID of that device. However, I have another user who I have not yet restricted to one device. I would expect that when I run the command that it would return something indicating that they are not restricted to any one device, but instead it simply returns the DeviceID of the device they are currently using. Perhaps there is not a command to accomlish what I'm looking for? I took a look at the document you linked, but didn't see anything that could accomplish this. It seems an obvious thing to be able to list the devices a user is restricted to, but perhaps this functionality is not available in PowerShell. Any other ideas would be greatly appreciated. Thanks! Kezzran

Hopefully this doesn't break forum etiquette, but I thought I'd bump this one more time to see if I can get a resolution to this. If there isn't a way to accomplish what I'm trying to do, that would be good to know also. Thanks! Kezzran

On Mon, 13 Sep 2010 12:35:06 +0000, Kezzran1 wrote: > > >Hopefully this doesn't break forum etiquette, but I thought I'd bump this one more time to see if I can get a resolution to this. If there isn't a way to accomplish what I'm trying to do, that would be good to know also. This property (returned from get-casmailbox) should hold the value(s) you're looking for: ActiveSyncAllowedDeviceIDs --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Rich, Thanks for diving in here, much appreciated. My PowerShell is pretty weak, so I'm not sure the exact command you are indicating needs to be run. I tried the following: Get-CASMailbox -Identity "username" -ActiveSyncAllowedDeviceIDs but it threw an error. If I run the following: Set-CASMailbox -Identity "username" it works, but doesn't produce a DeviceID. Perhaps you can set me on the right path. Thanks! Kezzran

On Mon, 13 Sep 2010 17:51:52 +0000, Kezzran1 wrote: >Get-CASMailbox -Identity "username" -ActiveSyncAllowedDeviceIDs How you get at the property depends on how you write your program. (Get-CASMailbox -Identity "username").ActiveSyncAllowedDeviceIDs or $mbx = Get-CASMailbox -Identity "username" $mbx.ActiveSyncAllowedDeviceIDs If you want to see the set of properties exposed by get-casmailbox you can use "get-casmailbox <name> | fl". To see a complete list of properties and methods, "get-casmailbox <name> | gm". --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Rich, These cmdlets are exactly what I was looking for. Thanks for your assistance! Kezzran