As an exchange administrator sometimes you need to manage ActiveSync option for particular user, this guide shows you how to enable or disable ActiveSync for particular user individually on Exchange 2013 and 2016 server. Since Exchange 2016 did not get much changes than Exchange 2013, the method on both versions are similar. We have earlier published few guides about fixing mails not receiving on newly installed Exchange 2013 and when outgoing mails stuck in drafts on Exchange 2013 after cumulative update.
As you aware, when one user leaves an organization we either disable the account or change the password. In some cases we can’t disable the account because someone might use the same mailbox to receive or access the mails. In this scenario, even after you changed the password in active directory, the left user may receive emails on his ActiveSync enabled smartphone or tablet. So, you must disable the ActiveSync manually for particular user in Exchange 2013/2016 control panel as shown in this guide.
How to Do it?
1) Log in to Exchange Control Panel (ECP), usually it will be https://yourserver/ecp
2) Select the user mailbox you need to enable or disable ActiveSync, on right side you will fine below options.
Click on ‘Disable Exchange ActiveSync’ and confirm the warning on next screen.
You can enable it in the same screen if it’s disabled already.
Since no much changes in between Exchange 2016 and 2013, this method is applicable for both versions.
How to Wipe a Mobile Device in Exchange 2013/2016
This can be done from the same screen itself. Select the user mailbox and click on ‘View details’ as shown in above screenshot (3).
You will be seeing the devices the user has used to connect through ActiveSync protocol. Select the device and click on details to find out more information about the device including last sync date and time. This will be helpful to find out which devices are being used by user currently to access corporate emails.
To wipe a device such as smartphone iPhone or Android or tablet like iPad and Samsung Android tablet, select the device and click Wipe option as below. Remember: This normal wipe from Exchange 2013/2016 control panel will wipe the entire phone/tablet and reset the device to factory default. This is not a selective wipe to erase only company data. It will erase company data/emails and also all the other personal data on the phone to reset factory defaults.
The wipe will be initiated once the device tries to connect mail server. As the warning message says, it will erase the all data on the phone/tablet.
This is the way to wipe a device on Exchange 2013/2016 from GUI mode instead of PowerShell.
If you prefer PowerShell, here is the command to perform remote wipe, (Check this site for more information)
Clear-MobileDevice -Identity Dinesh -NotificationEmailAddresses "firstname.lastname@example.org"
Hope this guide would be helpful in managing ActiveSync option for particular user by disabling or enabling it individually, and wipe the device remotely.