Exchange activesync mac os client

Exchange ActiveSync in Exchange Server

Exchange ActiveSync is an Exchange synchronization protocol that’s optimized to work together with high-latency and low-bandwidth networks. The protocol, based on HTTP and XML, lets mobile phones access an organization’s information on a server that’s running Microsoft Exchange.

Overview of Exchange ActiveSync

Exchange ActiveSync lets mobile phone users access their email, calendar, contacts, and tasks, and lets them continue to access this information when they’re working offline.

Standard encryption services add security to mobile communication with the server. You can configure Exchange ActiveSync to use Secure Sockets Layer (SSL) encryption for communications between the Exchange server and the mobile device.

Features in Exchange ActiveSync

Exchange ActiveSync provides the following:

Support for HTML messages

Support for follow-up flags

Conversation grouping of email messages

Ability to synchronize or not synchronize an entire conversation

Synchronization of Short Message Service (SMS) messages with a user’s Exchange mailbox

Support for viewing message reply status

Support for fast message retrieval

Meeting attendee information

Enhanced Exchange Search

Enhanced device security through password policies

Autodiscover for over-the-air provisioning

Support for setting automatic replies when users are away, on vacation, or out of the office

Support for task synchronization

Support for availability information for contacts

Managing Exchange ActiveSync

By default, Exchange ActiveSync is enabled. All users who have an Exchange mailbox can synchronize their mobile device with the Microsoft Exchange server.

You can perform the following Exchange ActiveSync tasks:

Enable and disable Exchange ActiveSync for users

Set policies such as minimum password length, device locking, and maximum failed password attempts

Initiate a remote wipe to clear all data from a lost or stolen mobile phone

Run a variety of reports for viewing or exporting into a variety of formats

Control which types of mobile devices can synchronize with your organization through device access rules

Managing mobile device access in Exchange ActiveSync

You can control which mobile devices can synchronize with Exchange Server. You do this by monitoring new mobile devices as they connect to your organization or by setting up rules that determine which types of mobile devices are allowed to connect. Regardless of the method you choose to specify which mobile devices can synchronize, you can approve or deny access for any specific mobile device for a specific user at any time.

Device security features in Exchange ActiveSync

In addition to the ability to configure security options for communications between the Exchange server and your mobile devices, Exchange ActiveSync offers the following features to enhance the security of mobile devices:

Remote wipe: If a mobile device is lost, stolen, or otherwise compromised, you can issue a remote wipe command from the Exchange Server computer or from any Web browser by using Outlook Web App. This command erases all data from the mobile device.

Device password policies: Exchange ActiveSync lets you configure several options for device passwords. The device password options include the following:

Minimum password length (characters): This option specifies the length of the password for the mobile device. The default length is 4 characters, but as many as 18 can be included.

Minimum number of character sets: Use this text box to specify the complexity of the alphanumeric password and force users to use a number of different sets of characters from among the following: lowercase letters, uppercase letters, symbols, and numbers.

Require alphanumeric password: This option determines password strength. You can enforce the usage of a character or symbol in the password in addition to numbers.

Inactivity time (seconds): This option determines how long the mobile device must be inactive before the user is prompted for a password to unlock the mobile device.

Enforce password history: Select this check box to force the mobile phone to prevent the user from reusing their previous passwords. The number that you set determines the number of past passwords that the user won’t be allowed to reuse.

Enable password recovery: Select this check box to enable password recovery for the mobile device. Administrators can use the Get-ActiveSyncDeviceStatistics cmdlet to look up the user’s recovery password.

Wipe device after failed (attempts): This option lets you specify whether you want the phone’s memory to be wiped after multiple failed password attempts.

Device encryption policies: There are a number of mobile device encryption policies that you can enforce for a group of users. These policies include the following:

Require encryption on device: Select this check box to require encryption on the mobile device. This increases security by encrypting all information on the mobile device.

Require encryption on storage cards: Select this check box to require encryption on the mobile device’s removable storage card. This increases security by encrypting all information on the storage cards for the mobile device.

Источник

Question: Q: Exchange ActiveSync (AES) in Mavericks

I have two email accounts that i use: an exchange office 365 account for uni and my standard hotmail outlook.com account. I have them both set up on my iPhone and they both work flawlessly. I have just set up these two accounts on Mavericks. My uni email works fine syncing all email folders in Mail and my calendar in the Calendar app.

My hotmail account doesn’t work so well. I set it up as an IMAP account as was explained in another thread and it sends and receives email relatively well. It has a slight bug when moving email to the trash within Mail. The deleted email is not moved to the trash on the server (and hence on my iPhone) until the Mail app is quit. Also there is no way I could find to get my hotmail calendar to sync with the Calendar app.

My question is if Apple can implement Exchange ActiveSync on iPhone and have it work, why can it not be done in OS X? Is the ability to syc with outlook.com accounts something we can expect any time soon ?

OS X Mavericks (10.9.1), Mail 7.1, Calendar 7.0

Posted on Feb 22, 2014 3:37 AM

Helpful answers

why can it not be done in OS X?

Because Microsoft only licenses its patents in ActiveSync for use on mobile devices.

Feb 22, 2014 5:23 AM

There’s more to the conversation

Loading page content

Page content loaded

Apple don’t pre-announce their changes, it’s a wait and see situation.

ActiveSync is not yet supported on Windows either (with the sole exception of Outlook 2013) so it seems there is little momentum to expand it from mobile devices to PC’s or Macs.

Feb 22, 2014 4:33 AM

why can it not be done in OS X?

Because Microsoft only licenses its patents in ActiveSync for use on mobile devices.

Feb 22, 2014 5:23 AM

One of the conclusions I had come to was that it was a licensing issue. I had no other explanation for why it would work on iPhone and not OS X and it is good to have this confirmed. At least it shows that it is Microsoft being greedy and not a fault on Apple’s side. I hope in the future this gets resolved as it seems a lot if people have similar problems in using outlook.com accounts in OS X and it would benefit a lot of people.

Feb 22, 2014 2:15 PM

Do you have a verifiable source on this?

Aug 2, 2014 10:05 AM

Do you have a verifiable source on this?

How about Microsoft themselves?

Aug 2, 2014 10:12 AM

EAS is not available on Macs or PC’s (unless the PC has Outlook 2013).

Touchdown (3rd party) will enable EAS on a Mac if you must have it.

Aug 2, 2014 10:17 AM

@Barney-15E : It talks about how useful it is for mobile devices. Where did you read about restrictions to only mobile devices?

Aug 3, 2014 10:45 AM

This part that only refers to Mobile devices:

The Exchange ActiveSync protocol allows mobile devices running Windows Mobile to synchronize e-mail, calendar, contacts, and tasks (known as PIM, Personal Information Manager) over the air with the Microsoft Exchange Server

And every other document relating to EAS that only discusses mobile devices and an Exchange server.

But, as per CSound’s post, NitoDesk has licensed it and is making a desktop connection client.

Aug 3, 2014 11:01 AM

Microsoft have the following proprietary email protocols —

EAS (Exchange Active Sync)

EWS (Exchange Web Services)

Of these the iPhone/iPad support EAS, Apple Mail supports EWS, Outlook 2008/2011 for Mac support EWS, Outlook 2010 for Windows supports MAPI, and Outlook 2013 for Windows supports MAPI to talk to MS Exchange and EAS to talk to Hotmail/Outlook.com.

As far as I am aware Outlook 2013 for Windows does not support EAS for connecting to MS Exchange.

Technically it would be possible for Microsoft to allow using Outlook 2013 for Windows or Apple Mail or a.n.other client to use EAS to connect but as others have discussed Microsoft have chosen to limit the use of EAS.

So, in your case you can do the following.

You can use IMAP to link Apple Mail to Hotmail/Outlook.com to get email only.

You can use EAS to link an iPhone to HotMail/Outlook.com to get email, calendar, and contacts.

You might be able to do the following to link Calendar on the Mac to the calendar that is part of Hotmail/Outlook.com, it appears to be one way though meaning any changes you make on the Mac do not get sent to HotMail/Outlook.com 😟

You can go to http://calendar.live.com , and get a sharing link for a calendar. Take the ICS link, open Calendar on your Mac. Then, go to Import Subscribed Calendar and paste this link. Make sure to replace webcals:// with https:// . This gives you a read-only subscription and at present, is the only workaround to Microsoft’s stubbornness. I have no solution for Contacts though.

Aug 4, 2014 9:35 AM

Microsoft have the following proprietary email protocols —

EAS (Exchange Active Sync)

EWS (Exchange Web Services)

Of these the iPhone/iPad support EAS, Apple Mail supports EWS, Outlook 2008/2011 for Mac support EWS, Outlook 2010 for Windows supports MAPI, and Outlook 2013 for Windows supports MAPI to talk to MS Exchange and EAS to talk to Hotmail/Outlook.com.

As far as I am aware Outlook 2013 for Windows does not support EAS for connecting to MS Exchange.

Technically it would be possible for Microsoft to allow using Outlook 2013 for Windows or Apple Mail or a.n.other client to use EAS to connect but as others have discussed Microsoft have chosen to limit the use of EAS.

Aug 4, 2014 9:37 AM

There is one (that I know of) ActiveSync client available for OS X, Touchdown, I have used it to add EAS to Android devices a couple of times (where it worked well) but have no experience of it on OS X.

Please note the following before you download TouchDown

• You require Mac OS/X Mountain Lion or above to install this product
• You can use it to connect only with the following server types
  • Microsoft Exchange (with ActiveSync enabled)
  • Zimbra (with ActiveSync enabled)
  • Office 365 (with ActiveSync enabled)
  • Personal accounts with outlook.com (@outlook.com, @msn.com, @hotmail.com, @live.com)
• Other servers are not supported
• If you have trouble, please write to macsupport@nitrodesk.com

Aug 4, 2014 9:58 AM

Nitrosync’s Touchdown is “temporarily” discontinued for Mac OS, and the company has since been bought up by Symantec, so don’t ever expect this product to return.

The only possible solution at this time is to use Outlook.com through the web browser to get all the features, or have your email via IMAP and edit your calendar on your mobile device or on the web. To see your calendars in Apple Calendar you’d need to share your Outlook.com calendars with your iCloud account.

Oct 8, 2018 1:12 PM

Csound1, you sent me an insulting email accusing me of attempting to steal software, and left me no way to respond. You don’t know me. I was not attempting to steal anything, and I resent your accusation and your tone.

I posted my message asking for a copy of Touchdown for Mac because, as of yesterday, there was no other way to sync Outlook.com mail, calendar, and tasks on the Mac, and I’m desperate to be able to do that. Before Symantec pulled it from the market, it sold for $30. I would have been willing to pay $60 for it, to you, to Symantec, or to whoever could provide me with it because (as of yesterday) there was no other product on the market that could do this. That’s desperation, not piracy, so watch who you’re calling a thief.

Today, Microsoft announced the long-awaited new version of Outlook for Mac, so I don’t need it after all. Here’s the link, for others in my predicament. Notice it’s not free. See? I’m willing to pay for software. I’m a software developer myself and I wouldn’t try to cheat a fellow developer out of their livelihood. Watch the name calling.

Источник

Exchange ActiveSync в Exchange Server

Exchange ActiveSync — это протокол синхронизации Exchange, оптимизированный для работы с сетями с высокой задержкой и низкой пропускной способностью. Протокол, основанный на HTTP и XML, позволяет мобильным телефонам получать доступ к информации организации на сервере под управлением Microsoft Exchange.

Обзор Exchange ActiveSync

Exchange ActiveSync позволяет пользователям мобильных телефонов получать доступ к электронной почте, календарю, контактам и задачам и работать с этой информацией без подключения к Интернету.

Стандартные службы шифрования повышают безопасность обмена данными между мобильным устройством и сервером. Вы можете настроить Exchange ActiveSync так, чтобы при передаче данных между сервером Exchange и клиентским мобильным устройством использовалось SSL-шифрование.

Функции Exchange ActiveSync

Exchange ActiveSync имеет следующие функции:

поддержка отметок к исполнению;

Группировка сообщений электронной почты по беседам

возможность синхронизировать или не синхронизировать всю беседу;

синхронизация SMS с почтовым ящиком пользователя Exchange;

поддержка просмотра состояния ответа на сообщения;

поддержка быстрого извлечения сообщений;

сведения об участниках собрания;

Улучшенный поиск в Exchange

усовершенствованная защита устройств с использованием политик паролей;

автообнаружение для обслуживания через беспроводную сеть;

Поддержка установки автоответов на случай отсутствия пользователя на месте, отпуска или командировки

Поддержка синхронизации задач

поддержка сведений о доступности для контактов;

Управление протоколом Exchange ActiveSync

По умолчанию протокол Exchange ActiveSync включен. Все пользователи, имеющие почтовый ящик Exchange, могут синхронизировать свое мобильное устройство с сервером Microsoft Exchange.

Можно выполнять следующие задачи Exchange ActiveSync:

включение и отключение Exchange ActiveSync для пользователей;

задание политик, например минимальной длины пароля, блокировки устройств и максимального числа попыток ввода неправильного пароля;

запуск удаленной очистки для очистки всех данных с потерянного или украденного мобильного телефона;

Запуск различных отчетов для просмотра или экспорта в разных форматах

Контроль того, какие типы мобильных устройств могут синхронизироваться с организацией, через правила доступа устройств

Управление доступом мобильных устройств в Exchange ActiveSync

Вы можете контролировать, какие мобильные устройства могут синхронизироваться с Exchange Server. Для этого отслеживаются новые мобильные устройства, которые подключаются к организации, или настраиваются правила, которые определяют разрешенные типы мобильных устройств. Независимо от выбранного способа вы в любой момент можете разрешить или запретить доступ с любого мобильного устройства.

Функции обеспечения безопасности устройств в Exchange ActiveSync

В дополнение к возможности настройки параметров безопасности связи между сервером Exchange и мобильными устройствами в Exchange ActiveSync предоставляются следующие функции, предназначенные для повышения безопасности мобильных устройств:

Удаленная вытирка. Если мобильное устройство потеряно, украдено или иным образом скомпрометировано, вы можете выдавать команду удаленной стирки с Exchange Server компьютера или из любого веб-браузера с помощью Outlook Web App. Эта команда стирает все данные с мобильного устройства.

Политики паролей устройств: Exchange ActiveSync позволяет настроить несколько вариантов паролей устройств. Предусмотрены следующие параметры паролей устройств:

Минимальная длина пароля (символов). Этот параметр указывает длину пароля для мобильного устройства. Длина пароля по умолчанию — 4 символа, максимальное число символов в пароле — 18.

Минимальное количество наборов символов. Используйте этот текстовое поле, чтобы указать сложность альфа-пароля и заставить пользователей использовать ряд различных наборов символов из числа следующих: буквы нижнего регистра, верхние буквы, символы и цифры.

Требуйте альфа-численное пароль. Этот параметр определяет силу пароля. Можно потребовать использования в пароле знака или символа в дополнение к цифрам.

Время бездействия (секунд). Этот параметр определяет, как долго мобильное устройство должно быть неактивным, прежде чем пользователю будет предложен пароль для разблокировки мобильного устройства.

Обеспечение соблюдения истории паролей. Выберите этот контрольный ящик, чтобы заставить мобильный телефон предотвратить повторное использование предыдущих паролей пользователем. Установленное число определяет количество предыдущих паролей, которое запрещается повторно использовать в мобильном телефоне.

Включить восстановление пароля. Выберите этот контрольный ящик, чтобы включить восстановление пароля для мобильного устройства. Администраторы могут использовать командлет Get-ActiveSyncDeviceStatistics, чтобы узнать пароль восстановления пользователя.

Wipe device after failed (attempts): This option lets you specify whether you want the phone’s memory to be wiped after multiple failed password attempts.

Политики шифрования устройств. Существует ряд политик шифрования мобильных устройств, которые можно применять для группы пользователей. Эти политики включают в себя следующие параметры.

Требуется шифрование на устройстве: Выберите этот контрольный ящик, чтобы потребовать шифрования на мобильном устройстве. Это позволит повысить безопасность благодаря шифрованию всех данных для устройства.

Требуется шифрование на карточках хранения: Выберите этот контрольный ящик, чтобы потребовать шифрования съемной карты хранения мобильного устройства. Это позволит повысить безопасность благодаря шифрованию всех данных на картах памяти для устройства.

Источник