Disable a Mobile Phone for Exchange ActiveSync

Applies to: Exchange Server 2010

Microsoft Exchange Server 2010 lets you restrict access to Exchange ActiveSync by using the device ID. This feature prevents users from synchronizing unauthorized devices with Exchange 2010. You can configure this restriction on each user's mailbox. By default, if Microsoft Exchange ActiveSync is enabled for a user, the user can synchronize their Exchange mailbox with any device. To restrict a user to a specific device, populate the ActiveSyncAllowedDeviceIDs parameter from the Set-CASMailbox cmdlet. If Exchange ActiveSync isn't enabled for the user, they won't be able to synchronize any device with Exchange. You can prevent a specific device from synchronizing with Microsoft Exchange, but only by using the Shell.

Looking for other management tasks related to Exchange ActiveSync? Check out Managing Exchange ActiveSync.

Prerequisites

Exchange ActiveSync is enabled for the user.

Use the Shell to disable a device for Exchange ActiveSync

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Exchange ActiveSync device settings" entry in the Client Access Permissions topic.

This example removes the device ID from the ActiveSyncAllowedDeviceIDs parameter list to prevent the device from synchronizing with Microsoft Exchange.

Set-CASMailbox -Identity: "EmailAlias" -ActiveSyncAllowedDeviceIDs: "<DeviceID_1>","<DeviceID_2>"

This example retrieves the device ID after the user has synchronized the device with the Exchange server.

Get-ActiveSyncDeviceStatistics -Mailbox:"<EmailAlias>" |fl DeviceID

For more information about syntax and parameters, see Set-CASMailbox.

For more information about how to manage Windows Mobile phones, visit the Windows Mobile Center Web site.