Wednesday, May 1, 2013

Exchange Mobile Devices

I have been traveling a lot for work, and have not had a chance to make a post, but here we go tonight.
I have seen a few people who work for companies that use Microsoft Exchange, and I can only hope that it is Exchange 2010. But they do not force the users to password the mobile devices, they should.
In my elitest view of things I believe that your mobile phone should be guarded at all costs, it is your lifeline to your friends, your family, your bank accounts, and I am willing to bet a reminder for your next doctors appointment. So why not at least password it?
This is an admin guide on how to force users to password their phones if you are on Exchange 2010, anything else, you need to figure out yourself.

You want to start by going to the Exchange Management Console (EMC) and going to Organization Configuration > Client Access
Then select the Exchange ActiveSync Mailbox Policies tab


Once you can create a new policy to deploy to select users, or a global policy that is defaulted on for all users. 

If you want to test it out on a few select users, you can create a new policy. It prompts you for a name, and you can choose the options you want to enforce here as well.


When you hit New it will give you a timer and then a completed.
Once your new policy displays in the EMC, you should open it up and review all the settings it did not show you when you were creating. You can do things like prevent users from accessing their camera or their bluetooth devices.

Now that you have the policy it is time to apply it to some users, for your testing.

!!!NO SCREEN SHOTS FOR THIS SECTION!!!

This is done in under the Recipient Configuration > Mailbox.
Select your user then properties> Mailbox Feature tab > Exchange ActiveSync  and then the arrow above it for properties.
This will let you select from one of the existing Exchange ActiveSync Policies that you have, or the test on your have just created.

Alternatively  you can change the policy via PowerShell script.
Get-CASMailbox -Identity smcgroarty@velcrohurts.net -ActiveSyncMailboxPolicy "StephenTestPolicy"

After your testing, you can switch this over to the default policy by right clicking on it under Exchange ActiveSync Mailbox Policies and selecting "Set as Default"