Exchange 2007 ActiveSync Policies

In Exchange 2007 administrators will have a more robust way of managing their remote ActiveSync users with ActiveSync Mailbox Policies. This will allow administrators to enforce settings to control how users use their ActiveSync mobile devices. This means administrators have more control and security when deploying ActiveSync devices.

Below is a list of the few of the settings you can set:


Alphanumeric password required -
- Requires that the password contains both numbers and letters.


Maximum failed password attempts -
- Set the number of times a user can enter an incorrect password before the device wipes itself.


Attachments enabled -
- Enabled the downloading of email attachments.


Maximum inactivity time lock -
- Set the maximum time the device can be inactive before it locks.


WSS file access -
- Allow access to SharePoint sites.


The main benefit over Exchange 2003 in Exchange 2007 is that an administrator has the ability to set a policy on a user by user basis, whereas in Exchange 2003 policies would be set globally. In Exchange 2007 there are two ways of creating ActiveSync policies: using the Exchange Management Shell or Exchange Management Console. The management console only has the ability to set some of the settings; the Management Shell is where all other settings can be found. Also note that you do not have to specify all policy settings when creating a new policy as any policy setting that you do not set will keep the default value.



Eren