How to limit access to Exchange 2003 Mobile Activesync server by user?

Posted by micilin on Server Fault See other posts from Server Fault or by micilin
Published on 2010-03-24T16:03:12Z Indexed on 2010/03/25 3:43 UTC
Read the original article Hit count: 283

Filed under:

exchange

|

activesync

|

users

|

permissions

|

groups

So I was asked to set up an Exchange Activesync mobile gateway. That's done. It's a separat eExchange 2003 front-end server configured for SSL, and I've put an off-domain ISA server in front of it. Now I'm being asked to limit which users can connect to it.

By default an Exchange front-end server allows any user who has a mail account to connect to the front -end server. So I'm looking at the permissions on the various IIS sites/apps on the server, but I know that it's easy to break Exchange Front-end server perms.

So I've got the following in IIS:
Exadmin
Exchange
EchWeb
Microsoft-SErver-ActiveSync
MobileAdmin
OMA

And a couple of others that I dont think are relevant.

Can I change the permissions on one of these to restrict who can connect to Activesync?

As a bonus: Can I do it in a way that does not affect ordinary browser based Exchange Access?

Thanks in Advance!!

© Server Fault or respective owner

Related posts about exchange

Upgrade Exchange 2003 to Exchange 2010 – Part II

as seen on Simple Talk - Search for 'Simple Talk'
In Jaap's second article on upgrading straight from Exchange Server 2003 to 2010, he explains how to move the various services from Exchange Server 2003 to Exchange Server 2010 and fully decommission the Exchange Server 2003 servers. >>> More
Upgrade Exchange 2003 to Exchange 2010

as seen on Simple Talk - Search for 'Simple Talk'
In this article, the first of two in which Jaap describes how to move from Exchange Server 2003 straight to Exchange Server 2010, he shows what is required before moving mailboxes from Exchange Server 2003 to Exchange Server 2010. He shows how to upgrade Active Directory, install both Exchange Server… >>> More
exchange server 2010 Outlook Web Access - Exchange Control Panel WEB Interface

as seen on Server Fault - Search for 'Server Fault'
from what i can gather the mailbox bit of the web interface works fine.. when any of the users go to options (top right) and try to use some of the features such as the Organise Mail Delivery Reports to find messages etc... it comes up with a message .. "An item with the same key has already been… >>> More
Backup multiple Exchange Accounts without direct access to exchange server

as seen on Server Fault - Search for 'Server Fault'
For e-mail, we use Microsoft Exchange and it is hosted by 1and1.com. We have about 30 Exchange accounts that I would like to backup to a PST file. That is, for each account that we have (all 30), I would like to create a single PST file (1.pst thru 30.pst). I do not have direct access to the Exchange… >>> More
when using exchange 2010 it complains of not talking to Information Store service on exchange 2007

as seen on Server Fault - Search for 'Server Fault'
I am attempting to do an upgrade in my org from exchange 2007 to exchange 2010. I moved all the mailboxes and made sure my certificates were setup in exchange 2010. I then changed my ip forwarding rules to forward mail to my exchange 2010 box. I can receive email. I then powered off my exchange 2007… >>> More

Related posts about activesync

Setup Exchange 2007 ActiveSync web application on a separate server

as seen on Server Fault - Search for 'Server Fault'
Hello, I have Exchange 2007 installed on SBS 2008. I also run a web server on the network. I only have one static IP and all traffic trough port 443 is routed to the webserver. I would like to publish the ActiveSync application externally. If i temporarily route 443 traffic to the SBS then it is… >>> More
ActiveSync gives a 401.2 error

as seen on Server Fault - Search for 'Server Fault'
Hello - I've been struggling for a while with a problem with ActiveSync, it is giving 401.2 errors when trying to access the mailboxes. Oddly enough, clients can get to the calendars just fine. I've tried from an Android device as well as the Exchange remote connectivity troubleshooter, same error… >>> More
Exchange 2007 - Exchange ActiveSync

as seen on Server Fault - Search for 'Server Fault'
We have ISA 2006 and Exchange 2007 and would like to get the Exchange ActiveSync to sync with non-windows base phones eg.Sony Ericsson... We got it to sync with Windows base phone ie. smart phone or PDA... but not able to get it to syc with Sony Ericsson phone which is not a windows base phone. Does… >>> More
SBS 2003 Event ID 3005 (ActiveSync Related)

as seen on Server Fault - Search for 'Server Fault'
I've recently noticed the following Error in my Server logs. Happens whenever Mobile device user attempts to syncrhonise using OMA. The error is logged on the server, but the user is able to sync, albeit slowly. Event Type: Error Event Source: Server ActiveSync Event Category: None Event ID: … >>> More
Exchange ActiveSync Exception

as seen on Server Fault - Search for 'Server Fault'
One of the users on my network is having an issue with his iPhone syncing via ActiveSync. Overall it's working, but every now and then he gets a "Synchronization with your iPhone failed for 3 items." I asked him to go into OWA and turn on the Mobile Phone logging. I looked through the logs and this… >>> More