Mobile Device Management for Exchange
Mobile & Client AccessMobile Device Management for Exchange

Mobile Device Management for Exchange

25 mins

Understanding the Concept

Exchange Online provides built-in mobile device management through Exchange ActiveSync (EAS) policies. These policies control device security settings like PIN requirements, encryption, and remote wipe capabilities.

Mobile device access rules define which devices can connect to Exchange Online. Rules can allow, block, or quarantine devices based on device family, model, or operating system.

For advanced mobile management, Microsoft Intune integrates with Exchange Online to provide app-level management, conditional access, and compliance policies beyond what EAS offers.

Key Points

ActiveSync policies control device PIN, encryption, and security
Device access rules: Allow, Block, or Quarantine by device type
Remote wipe removes Exchange data from lost/stolen devices
ABQ (Allow/Block/Quarantine) list manages device access
Intune provides advanced MDM beyond Exchange ActiveSync
Outlook mobile supports modern authentication and app protection

Why This Matters

Mobile email access is essential for modern workforces. Balancing accessibility with security through proper mobile device policies prevents data leaks from lost devices while enabling productivity on the go.

Common Mistakes to Avoid

Not enabling mobile device access rules, allowing any device to connect
Using only EAS policies when Intune would provide better management
Forgetting to test remote wipe procedures before an actual incident

Interview Discussion Points

💡Compare Exchange ActiveSync management with Intune MDM capabilities
💡Describe how to implement a mobile device access policy
💡Discuss the remote wipe process and its implications

MS-203 Exam Tips

📝Know ActiveSync policy settings and their device requirements
📝Understand device access rules and ABQ list behavior
📝Be familiar with the difference between Exchange MDM and Intune MDM