Configure Microsoft Exchange to allow only authorized devices to access Exchange ActiveSync
You must configure Microsoft Exchange Server to allow only authorized devices to access Exchange ActiveSync. Devices for existing users that are not explicitly added to the allowed list in Microsoft Exchange must be quarantined until BlackBerry UEM allows them access.
To perform this task, you must be a Microsoft Exchange administrator with the appropriate permissions for the Set-ActiveSyncOrganizationSettings command. Visit https://technet.microsoft.com to find more information about the command and managing devices that access Exchange ActiveSync.
- Configure permissions for gatekeeping.
- Verify with your Microsoft Exchange administrator whether or not there are any users currently using Exchange ActiveSync. If your organization’s default access level for Exchange ActiveSync is set to allow, and you have users set up and successfully synchronizing their devices, you must make sure that these users have a personal exemption or device rule associated to their user account or device before you set the default access level to quarantine. If they do not, then they are quarantined and their devices do not synchronize until they are allowed by BlackBerry UEM.
- On a computer that hosts the Microsoft Exchange Management Shell, open the Microsoft Exchange Management Shell.
- Type Set-ActiveSyncOrganizationSettings –DefaultAccessLevel Quarantine. Press ENTER.