Disabled User, Mobile-Device (Active Sync) still has Access 24h after disabling Account

Hello,
i encountered following issue:
I disabled an User in AD, but the mobile devices of the corresponding User still had access even 24h after disabling the account (iphone 5s, Blackberry Q10). My predecessor was known to abuse some access rights (suspicious gpos, phantom users with way to
many rights, private folder access...).
Our System: Windows 2008 R2 + Exchange 2010 SP3
Are there any hidden settings (in Exchange powershell, ADSI-Settings etc...) to extend the access-validity of mobile devices?
Or is this a normal behaviour?
Thank you and best regards,
Georg

The best way to stop a user from accessing their email via a mobile device when the account is going to be disabled is to go to their account and remove Active Sync from their mailbox. To do so, go to Recipient Configuration, Mailboxes, properties
of the user, Mailbox Features and disable Exchange ActiveSync. then disable the user. Force Active Directory replication as well. Then the disabled user should no longer have access. You can even remove device partnerships or wipe their
device as well.
http://www.techrepublic.com/blog/smartphones/control-smartphone-usage-with-exchange-2010-activesync/#.
http://technet.microsoft.com/en-us/library/aa997929(v=exchg.150).aspx
http://technet.microsoft.com/en-us/library/aa998591(v=exchg.141).aspx
Let us know if that helps.
JAUCG - Please remeber to mark replies as helpful if they were or as answered if I provided a solution.

Similar Messages

TS1567 Suddenly my I phone 4 will not connect message mobile device service could not be started (nothing has changed on my PC). I have tried following the troubleshooting and have restarted the mobile device) but it still won't connect. Also all my disap

Suddenly my I phone 4 will not connect message mobile device service could not be started (nothing has changed on my PC). I have tried following the troubleshooting and have restarted the mobile device) but it still won't connect. Also all bookmarks have disappeared!

Okay ... it's a better bet with a 1067 error message when trying to start the Apple Mobile Device Service, but we'd better check for a LSP issue, as per the following document:
Apple software on Windows: May see performance issues and blank iTunes Store

When trying to uninstall Apple Mobile Device Support: The Installer has insufficient privileges to modify this file: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\com.apple.MobileSync.client.resources\ClientDescription50.plist.

When trying to uninstall Apple Mobile Device Support: The Installer has insufficient privileges to modify this file: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\com.apple.MobileSync.client.resources\ClientDescription50.plist.

That one's consistent with disk/file damage. The first thing I'd try with that is running a disk check (chkdsk) over your C drive.
XP instructions in the following document: How to perform disk error checking in Windows XP
Vista instructions in the following document: Check your hard disk for errors
Windows 7 instructions in the following document: How to use CHKDSK (Check Disk)
Select both Automatically fix file system errors and Scan for and attempt recovery of bad sectors, or use chkdsk /r (depending on which way you decide to go about doing this). You'll almost certainly have to schedule the chkdsk to run on startup. The scan should take quite a while ... if it quits after a few minutes or seconds, something's interfering with the scan.
Does the chkdsk find/repair any damage? If so, can you get an install to go through properly afterwards?

There is no menu button on Firefox soon my android mobile device. How do I access options to set a home page without menu access?

I am trying to setup a home page on my Android mobile device. All changes require access through the menu. This works fine on my desktop computer but there is no menu button in the mobile version.

Hi rcbeeman39:
# Some Android devices have a menu button built directly into the device. In these cases, Firefox for Android hides its own menu icon . You can still access the Firefox menu by tapping on the device's menu button OR
# The hardware menu button is typically located at the bottom of the device, next to the home, search and navigation buttons.
# Full info including screenshots https://support.mozilla.org/en-US/kb/firefox-menu-icon-missing-android-how-access-menu
# If the above doesn't help please let us know your Android phone or tablet model number (S4? HTC One? etc), Android Operating System version (jellybean 4.1, 4.2, 4.3, kitkat 4.4, lollipop 5.0,e tc) and exactly what you did, what happened and what you expected
# Finally there is no supported way to " setup a home page" on Firefox for Android. The unsupported 3rd party add-on Home Changer may work for you: https://addons.mozilla.org/en-US/android/addon/home-changer/?src=search Also you may find that customizing the start screen may be good enough: https://support.mozilla.org/en-US/kb/use-awesome-screen-search-web-bookmarks-and-more
Fingers crossed the above helps a wee bit!
...Roland

Exchange active sync cannot connect to server after migration mailbox user from exchange 2007 to exchange 2013 coexistence

Hello, everyone, my name is rafl
I have a problem with exchange 2013 active sync.
I have installed exchange 2013 coexistence with legacy exchange 2007, I have to migrate user mailboxes: [email protected] from exchange 2007 to exchange 2013.
but any problem with active sync connection on the mobile device after moving mailbox user. I reconfigure the exchange ActiveSync external connection domain (latest.domain.com) on mobile device replacing legacy exchange ActiveSync external connection domain
(legacy.domain.com)
the process of moving mailboxes successfully without error.
Access OWA for exchange 2007 and exchange 2013 is running normally
access mail from Outlook running normally
Certificate request has been installed and has no problem with it
The OWA virtual directory is configured for internal and external connections and different from the legacy exchange
The autodiscover virtual directory is configured for internal and external connections and different from the legacy exchange
ActiveSync virtual directory is configured for internal and external connections and different from the legacy exchange
user mailboxes are still on exchange 2007 is not problematic.
only problem with Exchange Active Sync on mobile devices, where I set up an email with android, iphone, windows phone. the error message: cannot connect to the server.
but, if I create a new user and create user mailboxes directly in exchange server 2013, ActiveSync can run without error on mobile device, access through OWA, MsOutlook, Outlook Anywhere also run normally.
only the results of user migration from exchange 2007 to exchange 2013 which is troubled with exchange ActiveSync connection.
any ideas for this problem, and what should I check on the exchange server ..?

i have run the activesync test connectivity and get some error :
Testing TCP port 443 on host domain.co.id to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
A network error occurred while communicating with the remote host.
Elapsed Time: 3091 ms.
Testing TCP port 443 on host autodiscover.domain.co.id to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
A network error occurred while communicating with the remote host.
Elapsed Time: 21072 ms.
Testing TCP port 80 on host autodiscover.domain.co.id to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
A network error occurred while communicating with the remote host.
Elapsed Time: 21049 ms.
I have allowed access to port 443 (https) and 80 (http) on the firewall and re-run testconnectivity, but still with the same results. if I enable active sync for users who created directly in Exch 2013 there is no problem with the ActiveSync, just a problem
for users who moved from Exch 2007 to Exch 2013. @Android, iPhone, and Blackberry the error message "cannot connect to the server"

Is it possible to link a shared calender to multiple users mobile devices?

We are trying to use an outlook shared calendar to schedule day to day activities in a remote location where desktop access is limited. Is it possible to view a shared calendar thru mobile devices that have an outlook account> So far the only participant
that can view the calendar on his phone is who ever created it.

They cannot access it via the shared mailbox or as a shared calendar in their mailbox. If you use the Share calendar feature to generate an ics link, or publish the calendar, users should be able to subscribe to the calendar by adding the ics link to their
calendar app. (I know it works in iOS devices, have not tried on Android or WinPhone.)
Diane Poremsky [MVP - Outlook]
Outlook & Exchange Solutions Center
Outlook Tips
Subscribe to Exchange Messaging Outlook weekly newsletter

How do I re-install the apple USB mobile device driver once it has been deleted?

Hi,
I was having issues getting my Itunes to recognize my Iphone 4s so I followed the apple support instructions here: iOS: Device not recognized in iTunes for Windows and it said to delete the driver software (Step 2 of Reinstall the Apple Mobile Device Driver). After I did that I have been unable to get any of the steps that follow to work. Is there any place that I can download the Apple mobile device USB Driver software? I have tried numerous things including re-installing Itunes multiple times but this does not appear to reinstall the driver software. Any help is greatly appreciated.
Thanks,
Brian

Try these steps:
In the Device Manager window, right-click "Universal Serial Bus controllers" and choose "Scan for hardware changes" from the shortcut menu.
Locate the Apple Mobile Device USB Driver in this list. If the Apple Mobile Device USB Driver is not listed, continue to step 3.
Expand all the sections labeled below (not all sections may be listed):
Imaging Devices
Other Devices
Portable Devices
Universal Serial Bus Controllers
Look for the entry that recognizes the device as a camera. This entry should be called Apple iPhone, Apple iPad, Apple iPod, or Unknown Device. (Verify the Unknown Device is the Apple Device by unplugging the device and scan for hardware changes again [Step 1] to see if it disappears.)
Right-click the Apple iPhone, Apple iPad, Apple iPod, or Unknown Device entry in Device Manager and choose Update Driver from the shortcut menu. (Verify the Unknown Device is the Apple Device by unplugging the device and scan for hardware changes again to see if it disappears.)
Click "Browse my computer for driver software."
Click "Let me pick from a list of device drivers on my computer."
Click the Have Disk button. (If the Have Disk option is not present, choose a device category such as Mobile Phone or Storage Device if listed, and click next. The Have Disk button should then appear.)
In the "Install from Disk" dialog, click the Browse button.
Use this window to navigate to the following folder:
C:\Program Files\Common Files\Apple\Mobile Device Support\Drivers.
Double-click the "usbaapl" file. (This file will be called "usbaapl64" if you have a 64-bit version of Windows. If you don't see "usbaapl64" here, or if there is no Drivers folder, look in C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\Drivers. instead).
Click OK in the "Install from Disk" dialog.
Click Next and finish the driver-installation steps. Open iTunes to verify that the device is recognized properly.

Active Sync - Password Message Not Prompting - After AD pwd expired or new password reset

We have multiple CAS 2010 SP3 server in cas array servicing Active Sync Requests for Blackberrys and Samsung handhelds.
When a user password is reset on AD …. The users BB/Samsung works fine for approx. 24 hours.
After 20/24 hours they will are prompted regarding their password change on the their handheld devices.
Where is the setting… I want this to be right away …. As soon the password is changed on the AD or may be in 15 minutes.
Are there any pros and cons here ….. or what’s the best practice/recommendation???
Thank u

Hi Wildpacket,
As said by m0j0m1k once
active sync establishes continuous sync (direct push) it takes 8 to 24 hours to recognize the changed
password.
Any update on this ?
Sathish

TS2446 changed password, but i still cannot access items from old accounts what do I do?

changed password, but i still cannot access items from old account

Contact iTunes store support and ask for assistance: https://ssl.apple.com/emea/support/itunes/contact.html.

How to set MacBook air up as mobile device to sync a portion of music from iTunes?

In itunes, I would like to set my MacBook air up as if it was a portable device. I have lots of music on a desktop pc and would like my MacBook to sync a portion of it. That way, when I'm out and about, I have my latest music with me. Does anyone know how I could do this? I apologise if this is the wrong forum.

Also I've tried restoring 2 time but to no avail please help

I get an error message when installing itunes with windows 8, error message is error occured while attempting to create the directory C:\program file(x86)\common files\apple\mobile device support\sync services\schemas\outlook.syncschema

I keep getting an error message when installing iTunes with windows 8

See the second box in Troubleshooting issues with iTunes for Windows updates.
tt2

UNDOTBS still has same size after reboot

Dear all,
Please advice.
the undotbs has 5Gb. it's been used at 95% . after a database rebooted . should
the undotbs goes down to 0% or to a lower number.instead when the database was up.
the percentage was still 95% there was no jobs running at that time.
Is it normal or something else was wrong.
Regards,

Thanks Anantha,
it's a good link.
hpux: SYS@ABC2 >show parameter undo
NAME TYPE VALUE
undo_management string AUTO
undo_retention integer 900
undo_tablespace string UNDOTBS2
sql>select tuned_undoretention from v$undostat
TUNED_UNDORETENTION-------------------
15886
19364
12672
Please if someone could explain as the retention was set to 900(15Mins) but the tuned_undoretention was upto 264Mins . was that because undo_management=AUTO
Regards

My iTunes Match still has not finished after 3 1/2 days and step 3's total number keeps changing, Why?

So I finally broke down and subscribled to iTunes Match just to see how it is and if it would be worth it to me. well right now im about to wig out because its been 4 days and i still have not gotten past step 3 on the proccesing...now to itunes match's defense, or iMatch as ive seen it called, i do have an emense itunes library of movies, tv shows, podcas, ringtones, and music (somewhere around 15,000 total) so I knew it would take a while, but 3 days?! And thats not even the problem, thats just a little grip I have cuz now I can't access my music on my iphone almost everything is greyed out.... i gould a back door to it where if i shuffle the album and skip to the song i want then that will work BUT! thats too much of a hassl!
Ok enough ******** cuz ima sit here just to see how long it takes and report back. Now for the real question.... I want to know that in all this waiting why does step 3 where it uploads artwork and remaining songs total number keep changing, i.e. :
this is the screen ive seen for the last 3 full days, and the total items uploaded keeps changing yesturday it said 1500 of 7000
so is it updating the number as it uploads them or what? It's confusing but im trying to give it a chance.

*Update*
ok so day 4-5 and im still not finished with the inital iMatch process.... BUT i found out that nothing was wrong its just taking for freakin ever. oh well at least i only got 1000 more to go....

HT1414 still has white screen after restore

I still have a white screen after restart and restore

If you restored to factory settings/new iPod via iTunes (Not via Settings>General>Reset>Erase all Content and Setting) and still have the problem that indicates a hardware problem.
Make an appointment at the Genius Bar of an Apple store..
Apple Retail Store - Genius Bar

IMac Still Has Video Problems after Upgrade

I did the firmware and software upgrade to my iMac, which was supposed to fix the video problem, however the problem continues. I am using OS 10.4.11. My computer never "froze" however the screen went haywire. I would have to do a soft restart (if I could find the restart dropdown window) or I would have to do a hard restart. Now I can do a screen refresh to do a soft restart.
Is Apple aware the these Intel iMacs are a POS? I use it for 3D design and I can't work more than 10 minutes before my screen starts going wacko. I've used Macs since 1985 and this is the first POS Mac i've owned. I don't want to have to get another computer, I can't afford it.
Any others out there with the same problem? Any solutions?
Thanks

I like AppleCare, as you get three years of that unlimited phone support. I know many consider it just another extended warranty, but note it can be legitimately purchased at a discount.
Amazon, retail computer stores, also a number of sellers abound online and on eBay, and a price mentioned by someone else on here two years ago that hasn't changed since then - check out L. A. Computer Company, online - you might be surprised!
(I have no affiliation with them.)

Disabled User, Mobile-Device (Active Sync) still has Access 24h after disabling Account

Similar Messages

Maybe you are looking for