Friday, 22 May 2015

ActiveSync devices still sync after disabling account or changing password


Windows 2008 R2 with Exchange 2010


In case when employee is "walked out the door", access to account and emails has to be terminated immediately, but ActiveSync can work up to 24h after disabling Active Directory account.


Disable ActiveSync and OWA for user Jack Rambo

1. Open up "Exchange Management Console"
2. Right click on Jack's mailbox and select Properties
3. Select "Mailbox Features" tab
4. Disable "Exchange ActiveSync" & "Outlook Web App"


Start "Exchange Management Shell" and run the following commands
Set-CASMailbox -Identity "Jack Rambo" -ActiveSyncEnabled:$False
Set-CASMailbox -Identity "Jack Rambo" -OWAEnabled:$False

Microsoft KB

No comments:

Post a Comment