Manage ActiveSync Access

By default, Microsoft Office 365 allows new ActiveSync devices to connect. This procedure describes how to configure Exchange Server to set new ActiveSync devices into Quarantine mode and send a quarantine email to the user when it attempts to connect.

1.      Log in to the Exchange Admin Center (EAC).

2.      In the navigation pane, click Mobile. The Mobile Device Access page appears.

3.      Click Edit. The Exchange ActiveSync access settings dialog box appears.

4.      Click + to add users that will receive copies of the quarantine emails. Repeat this procedure for all users.

Note: The user email attribute in Identity as a Service must match the Microsoft Exchange email address. See Create and manage user attributes for more information.

5.      In the Text to include in messages section, enter the message users receive.

Example: You can approve the quarantined device by logging in to your Identity as a Service account at https://<mycompany>.<region>.trustedauth.com/#/myprofile/devices Consult the Identity as a Service Online Help for instructions on how to approve your device.

6.      Click Save.

When configuring the admin userid and password for ActiveSync Device Management, the userid used should come from a Managed Domain (and cannot come from a Federated domain). Typically this is an admin account in the onmicrosoft.com domain.

1.      Click > Configuration > ActiveSync Access. The ActiveSync Access page appears.

2.      Select the Enable ActiveSync Access check box to allow your users to manage their Exchange ActiveSync devices on Identity as a Service.

3.      Connect as follows:

a.      Click Authorize. The Microsoft Authorization dialog box appears. Copy the code provided and then click the Sign in to Microsoft link.

b.      Enter the code in the Microsoft window and then click Next.

c.      Enter your Exchange administrator username and password.

d.      Close the  Microsoft Authorization dialog box.

e.      Enter the Connection Uri to connect to the Exchange online PowerShell.

f.        Accept the default unless you are using the following:

–  For Office 365 operated by 21Vianet, use the Connection Uri value: https://partner.outlook.cn/PowerShell

–  For Office 365 Germany, use the Connection Uri value: https://outlook.office.de/powershell-liveid/ 

–  For Office 365 Government Community Cloud High (GCC High), use the Connection Uri value: https://outlook.office365.us/powershell-liveid/ 

g.      Click Test Connection to ensure that you can connect to your Microsoft Office 365 server.

4.      Click Save. Once you save the changes, UPN and Tenant ID values appear automatically.

When enable ActiveSync Access is set, a Devices tab appears on the user's My Profile page. Users can then allow, block, or delete ActiveSync Devices.