Exchange 2010 Activesync Quarantine message to admin missing ECP URL?

Hi folks,
I have recently enabled the Active Sync quarantine feature in Exchange 2010 (running SP3) and it is working perfectly. However, a co-worker states that during his testing roughly a year ago, the message sent to administrators advising of the device being quarantined
contained a URL that you could click, it would take you to the ECP page where you would need to click approve. I have posted the message received currently by admins below, does anyone know why the URL is not embedded or is there another step somewhere I missed?
Is it possible that SP3 or another Exchange related update removed the URL from the message?
The Exchange ActiveSync service has quarantined the mobile phone listed below. It won't be able to synchronize Exchange content until you take action.
To perform an action for this device, select the device from among the quarantined devices displayed on the ActiveSync Access tab in the Exchange Control Panel.
Information about the device that triggered this notice:
User: [email protected]
Device model: Q10 xxxxxxxx
Device type: BlackBerry
Device ID: xxxxxxxxxxx
Device OS: BlackBerry 10
Device user agent: xxxxxxxxxxxxxxxx
Device phone number: *******9502
Device IMEI: xxxxxxxxxxxxxxxxx
Exchange ActiveSync version: 14.1
Device policy applied: Default
Device policies status: AppliedInFull
Device access state: Quarantined
Device access state reason: Global
Device access control rule:
Sent at 11/19/2014 11:21:33 AM to [email protected]
I should also mention that when I run "Get-EcpVirtualDirectory -server xxxxxxx | format-list" the internal URL is correct (https://webmail.domain.com/ecp) and the external URL is blank (which is fine by me).

I should also mention that when I run "Get-EcpVirtualDirectory -server xxxxxxx | format-list" the internal URL is correct (https://webmail.domain.com/ecp) and the external URL is blank (which is fine by me).
Hi,
Good that you mentioned that, cause that is the reason why you don't get a link in the Quarantine message sent to the AdminRecipient.
Martina Miskovic

Similar Messages

Z10 with Exchange 2010 Activesync missing incoming messages

Z10 with Exchange 2010 Activesync won't download all messages, missing messages include messages sent to internal Exchange distribution groups and bulk email (I could live with this one, lol) Activesync works fine on iOS and android devices (100+ devices in my organization with no issues). Tried enabling secure IMAP on the exchange server, and with this config the messages are delivered, but the body of the same messages missing with the activesync setup have a [No body found] in the message body and are otherwise blank. Tried running the EAVT tool and it returns "Nothing was found for provided credentials" . My personal Gmail account works fine on the phone, tried loading the 10.1 Blackberry OS and had the same problem. Tried setting up the account multiple times, used both autodiscover and manual setup to no avail. Any thoughts? Thanks in advance for your help!

Hey cyberayk,
Welcome to the BlackBerry® Support Community Forums.
Do these email messages get redirected to a different folder on the Exchange Server? If yes, On the BlackBerry smartphone go to Settings > Accounts> Select the account> Edit Folder Settings, are these folders selected?
Thanks.
-HB
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

After ICS update, stock email not syncing for exchange 2010 activesync.

After ICS update, stock email not syncing for exchange 2010 activesync.
My corporate email which was flawlessly working before ICS update. Even though I tried re-creating a new account, it hangs "waiting for sync"
Has any patch been released or explicit instructions have been provided ?
First sync:
5/3/2012 7:47 PM
Last successful sync:
Not Available
Folders synced:
0
Device name:
Not Available
Device model:
MT11i
Phone number:
Not Available
Mobile network:
Not Available
Device type:
Android
Device ID:
xxxxxxxxxxxxxxxxxxx
Device IMEI:
Not Available
Device OS:
Android 4.0.3
Device language:
Not Available
User agent:
Android/4.0.3-EAS-1.3
Access state:
Access Granted
Access set by:
Global Permissions
Policy applied:
Active Sync Policy - Partially applied
Policy updated:
5/5/2012 8:11 AM
ActiveSync version:
14.1
Also at http://talk.sonymobile.com/message/184221
Whyr is this defect "assumed answered" ? I went though all the posts and didnt find any solution?

Hopefully my reply to this can help.
http://talk.sonymobile.com/message/190149#190149
And please try to keep same problem in same thread.
- Community Manager Sony Xperia Support Forum
If you're new to our forums make sure that you have read our Discussion guidelines.
If you want to get in touch with the local support team for your country please visit our contact page.

ActiveSync quarantine message to distribution list of approvers suddenly stopped

Hi,
We're running Exchange 2010 SP3 RU8v2. Our ActiveSync config requires approval so all new devices are quarantined. Using the ECP, we have a specific group defined to receive notifications which has not changed since it was first set. About
a week ago it stopped. I did some testing with my mailbox by clearing my EAS devices to force it into quarantine. Prior to that I also added myself to the DL that gets the alerts. What I found is that the message that is typically sent ends
up in my Drafts folder. It is showing as from "Microsoft Outlook" to the DL in question. If I attempt to send that message it fails:
Subject: Undeliverable: A device that belongs to [email protected] has been quarantined. Exchange ActiveSync will be blocked until you take action.
Delivery has failed to these recipients or groups:
[Approver DL]
You can't send a message on behalf of this user unless you have permission to do so. Please make sure you're sending on behalf of the correct sender, or request the necessary permission. If the problem continues, please contact your helpdesk.
I found some online pages that talk about the object MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e, which has the Exchange servers group on the ACL and all hubs are a member of this group. There are no denies.
The only real change to the environment was that last week a new combination hub/CAS was added, which is on the DL above. However, after several tests, looking at the full header of the NDR messages, all of the hubs have been used at least once, so
I don't think it is related to one specific hub.
What else should I be checking?
Thanks in advance.
JC

Power that new HUB/CAS server down and retest.
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Coexistence & Upgrade Exchange 2010 SP3 Unified Messaging to Exchange 2013 SP1 UM

Hello Experts,
We're doing Exchange 2010 SP3 to Exchange 2013 SP1 upgrade.
This upgrade also include Unified Messaging component which is currently working with Exchange 2010 SP3 and Lync 2013.
We have one dial plan and its SIP URI and Secured.
Looking for high level steps to plan coexistence and upgrade of Unified Messaging from Exchange 2010 SP3 to Exchange 2013 SP1 integrated with Lync 2013. I'll also appreciate tips on what kind of certificate and its Subject name(s).
Microsoft documentation is not very clear and I found it confusing for my scenario. Since I we don't want any downtime for UM users, looking for some help.
Thanks in advance for help.
-DK

Hello Hinte,
Thanks for the information. I have been to this article which explains fresh deployment but doesn't address coexistence and migration scenario.
I'm looking for high level steps only. Can anyone validate and suggest if I'm missing something!
1) Install new CAS+MBX Server
2) Move system mailbox as per MS documentation to Exchange 2013 MBX
3) On CAS+MBX Server Enabled internal CA trusted Cert for UM Services.Internal
CA certs contain only CAS+MBX server's FQDN only.UM services Startup Mode is set to "Dual".
4) Assigned existing SIP URI Based Exchange 2010 Dial plan to New Exchange 2013 Servers.
5) Run Exchucutil.ps1
in Exchange 2013 and OcsUMUtil in Lync 2013 (Again?)
Will this be enough or Do I need to create New Auto attendant or
Haunt Group etc?
Thanks for all the help!

Exchange 2010 Mailbox truncates message

We have a process that send an email to a shared mailbox. When the mailbox was hosted on Exchange 2003, the message came out properly. We moved the mailbox to Exchange 2010 SP1 RU3 and now the email message gets truncated.
If we drag the message from Outlook to the desktop and open the .msg file, the content is complete (not truncated) but in outlook, only portion of the message is visible.
Any changes between Exchange 2003 and Exchange 2010 on how the messages may be converted?
Rene Lariviere

Hi,
Please verify if the message will be truncated when you read it in OWA.
Please verify if the issue occur to all the users.
Please verify the size of the message.
What is the version of your outlook? What is the operation system of the client desktop?
If mail comes from Outlook Express, then please try to check the article below:
Description of the cumulative update for Outlook Express
http://support.microsoft.com/kb/887797
After you install Windows XP Service Pack 2 (SP2), the body text of HTML-based e-mail messages that are sent from Outlook Express may be truncated and may be missing
data. This problem may occur if the e-mail message contains non-ASCII characters, such as Chinese characters.
Besides, please try to post the header information here.
Xiu Zhang
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support,
contact [email protected]

Exchange 2010 SP3 - Delete messages in a folder

Hi
We have an Exchange 2010 SP3 server. One user has a folder ("Inbox\Firewall Alerts") containing about 300,000 messages.
How can I use PS to delete all messages older than 10 days in this folder?
Best regards Harald

Hi,
You can create a personal tag and apply it to this custom folder named "Firewall Alerts" under the Inbox folder. This personal tag will overwrite the DPT or RPT applied to this folder or items in it.
If these messages have the same subject or sender, you can also consider to use the Search-Mailbox -SearchQuery -DeleteContent command to delete these mails older than 10 days. But there is a limit, it's 10000 at a time if a search query is specified when
you run this command.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Exchange 2010 - ActiveSync - Error:TooManyClientOperations

Hello,
For last 4 months, our mobile workforce is using ActiveSync access to Exchange 2010 in combination with McAfee Enterprise Mobility Management 12.0 that acts as an (kind of) ActiveSync proxy. Monitoring IIS logs on our Exchange CAS/MBX
server, I’ve noticed that one of our users recently started getting a lot of following errors:
Cmd=Sync&User=domain%5Cuser.name&DeviceId=SEC2FA0AC3DE555E&DeviceType=SAMSUNGSMG900F&Log=V121_LdapC1_RpcC24_RpcL63_Pk3978727234_Error:TooManyClientOperations_As:AllowedG_Mbx:server.domain.com_Throttle0_Budget:(A)Conn%3a0%2cHangingConn%3a0%2cAD%3a%24null%2f%24null%2f0%25%2cCAS%3a%24null%2f%24null%2f3%25%2cAB%3a%24null%2f%24null%2f0%25%2cRPC%3a%24null%2f%24null%2f1%25%2cFC%3a1000%2f0%2cPolicy%3aDefaultThrottlingPolicy%5Fcfff8eee-4334-
Mobile device has all the latest updates installed.
Searching Internet, only relevant article I managed to find is on Microsoft Exchange Japan blog:
http://blogs.technet.com/b/exchangeteamjp/archive/2014/07/24/3635022.aspx
As I cannot find any other reference on MaxNumberOfClientOperations, I am reluctant to make that change easily. I would also like to know is there any way to monitor what exactly is happening (e.g. I would like to have a way to get more
info on currently active operations that IIS log is reffering to).
Thanks, MiToZ

Hello Martin,
Thanks for answering. I am aware of Exchange Throttling Policy concept, but I am uncertain what is happening with this particular user and I am looking for ways to troubleshoot it further. Using ActiveSync troubleshooting script from Exchange Team Blog
(http://blogs.technet.com/b/exchange/archive/2012/01/31/a-script-to-troubleshoot-issues-with-exchange-activesync.aspx), I can
see that this user is not anywhere near our top users based on number of ActiveSync commands sent to our Exchange server. Is there any cmdlet, log or any other way that I could use to see currently (or at some point in time) active client
operations?
Thanks, MiToZ

Exchange 2010 Activesync with the Windows 8.1 mail app limited to 10 MB attachments?

We have a few executives that want to use the mail app on their 8.1 tablets to access our Exchange 2010 SP3 Ru7 servers via Activesync. They get connected and can sync mail, but when they
try to download attachments that are larger than 10 MB, they get an error (Sorry I don't have the exact wording) the error doesn't say anything about attachment size limit, but it works if the attachment is 9.5 MB and they get the error as soon
as the attachment is greater than 10 MB.<o:p></o:p>
I tested the app with the same attachments greater than 10 MB with an Outlook.com account and it works ok on the Windows 8.1 tablet.<o:p></o:p>
I also tested using an IPad against the Exchange servers and I can download attachments greater than 10 MB just fine.<o:p></o:p>
So it looks like only the combination of Exchange (2010 in my case) and the Windows 8.1 mail app has the limitation?
<o:p></o:p>

ActiveSync is limited in the same manner that OWA and web services are. See the following page to see how to increase this limit:
http://technet.microsoft.com/en-us/library/aa996835(v=exchg.141).aspx

Exchange 2010: ActiveSync Report shows large amount of hits. So what should I do?

Hello,
We currently use the ActiveSync Report to run a daily report of Hits on the Exchange 2010 SP3 RU5 CAS servers (http://blogs.technet.com/b/exchange/archive/2012/01/31/a-script-to-troubleshoot-issues-with-exchange-activesync.aspx)
The script will report a large number of hits for several users, for different reasons. The question I have is what do we do about it? It's great to know we have a large number of hits, but I'm not sure why and what to do about it.
Examples:
1) No User, DeviceID, DeviceType (the columns are blank) and it shows 19,000 hits. Almost all are from IIS_4xx (what does that mean?)
2) A user with 16,200 hits and it looks like 15,661 were from PING
3) A user with 3,493 hits and it looks like 3224 were from SYNC
Any advice on how to investigate and resolve the data that the daily script for ActiveSync hits reports?
Thanks!

WHY are there so many PINGS for some device, and so many SYNC for others. And why is one deviceID/UserID blank?
because it is how the ActiveSync Client is setup. You will need to have the users to upgrade their client. for e.g. iOS verion (dont remember the version number) has some severe issue back in the past and brought down the CAS server due to so much log generation.
If your user still have the old OS/iOS on their device then you have to have them upgrade.
Why the userid or device id is blank -- I have no idea but I can't of there may be some Android devices.
Where Technology Meets Talent

Exchange 2010 activesync, Personal archive access from Mobile devices like Iphone,IPAD and Android based Phones

Hi,
As of what i have found from different blogs is that all the activesync devices including IPhone , IPAD and Android based phones cannot access online archive/Personal archive in exchange 2010.
Is there any third party app in the market for the above devices which can support access of Online archive?
Thanks in Adavance

There must be a way! Since you can view the online archive through webmail with supported browsers on PC(IE, Firefox, Safari OSx) (so activeX is no must).
All it takes is a browser that can set a different 'agent' and that can interact with the webmail(OWA) website just like Safari on OSx.
I tried different browsers on the iPad, they all display the Online archive, but the navigation is broken. (scrolling by sliding your fingers does not work correct) The result is that you can not open(read) any mail in your online archive.
The browsers we tested and show the online archive but where the navigation doesn't work are:
On iPad:
- Kissmyagent
- Atomnic(the free AND payd version)
On android:
app: 'OWA for Android' (does not show the online Archive)
Maybe someone can come up with a browser and/or app that can show the online archive!

Exchange 2010 ActiveSync with Treo 755p

We're in the process of migrating from 2003 Exchange to 2010 and are having a problem with Treo's 755p. All other devices are able to synchronize using ActiveSync but Treo's are getting an error connecting to the server. I tried calling Palm and was told that Exchange 2010 is not supported.
We have a GoDaddy's 256-bit SSL class 2 certificate could this be a culprit?
Has anyone got it to work? How?
Post relates to: Treo 755p (Sprint)

itad wrote:
We have a GoDaddy's 256-bit SSL class 2 certificate could this be a culprit?
Did that certificate work with Exchange 2003 on the same host name? If so, then the certificate probably is not the culprit. If it's a new certificate or a new host name, you could search here for SSL threads. There may be issues with 128 vs. 256 bit certificates, and having the host name listed in the Subject Alternative Name field rather than being the main host name on the certificate.
I don't have any personal experience with 2010...

Q10, Exchange 2010 ActiveSync - Email will not be deleted on server

Hey Everyone,
If you have a Q10 with Exchange ActiveSync, can you remove emails on the server using "Delete from Hub and server" option??
I am testing this function both with an ipad and Q10. Emails removed from Ipad are removed from Exchange Server whereas emails removed from Q10 with "Delete from Hub and server" option selected are only removed from Q10 but not on the server.
Is this a broken functionality or are there incorrect settings on the phone?
Any help is greatly appreciated!
-T

the deletes can take a few on my Z30 or Z10
I know a quick delete would be prefered but maybe the OS deems them as not fast needed
Click here to Backup the data on your BlackBerry Device! It's important, and FREE!
Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals
BESAdmin's, please make a signature with your BES environment info.
SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope
Want to thank me? Buy my KnottyRope App here
BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V

Exchange 2010 ActiveSync Calendar Issues

We use Exchange 2010, SP1, RU6 in our enterprise. We are having many problems with calendar synchronization between Exchange and iOS 5.0.1 devices (iPad and iPhone). Is anyone else having the same problem? Anyone have answers. We opened a case with Apple and they told us that these are known issues with iOS 5 and they would be addressed in a future release. Anyone know when this will be addressed? Thanks.

48 hrs now since talking with Microsoft.
I agree it is an iOS issue but Microsoft can typically find a fix around the situation regardless of the root offender. The hope is that the events may still be tagged such that Microsoft may still be able to correct the events. Regardless, Microsoft has elevated the case two levels to correct the issue. This is much more than Apple has been willing to do. Their response thus far has literally been "let us know what Microsoft says". I am not necessarily working with Microsoft but more not working with Apple (for their dis-interest in the situation). Microsoft has been on the phone with us taking traces of email calendar activity to see what the underlying problem is.
I work in education and I have since halted all further deployments of iOS devices since the majority are administrative personnel and they would definitely be hooking into the Exchange environment. My recommendation has been to my student base is to also halt deployments if they are putting students into their Exchange environments.
Not that I am an Apple basher but I don't think Apple is ready for the enterprise. Now that I have moved to a Galaxy S II, I feel safer that I will not miss my meetings. i live by my calendar. My 4s in in my drawer for now.

ActiveSync Quarantine Administrator Email Changed - No ECP Link

For some reason the emails generated by the Exchange 2010 servers when a mobile device is quarantined have changed. We now no longer have the clickable link to open the device within the ECP.
Old Email
The Exchange ActiveSync service has quarantined the mobile phone listed below. It won't be able to synchronize Exchange content until you take action.
To perform an action for this device, go to the following page in the Exchange Control Panel:https://xxxxxxx.xxxxxxxx.xxxxxxxx/ecp/UsersGroups/EditEASMailbox.aspx?id=xxxxxxxx-xxx-xxxxx-xxxx-xxxxxxxxxxx
Information about the device that triggered this notice:
New Email
The Exchange ActiveSync service has quarantined the mobile phone listed below. It won't be able to synchronize Exchange content until you take action.
To perform an action for this device, select the device from among the quarantined devices displayed on the ActiveSync Access tab in the Exchange Control
Panel.
Information about the device that triggered this notice:
Does anyone have any ideas as to what might have caused this ? Is there a way to undo the change ?
I have searched on Google and there appears to be no-one else with this problem ???????
Regards,
Phil

Hi Phil,
You actually don't need any special link to manage a quarantine mobile device. Administrator's ECP "Manage My Organization" displays a list of quarantined devices and allows its status change:
The device will stay in quarantine until an administrator decides to allow or block the device in quarantine. This can be done by selecting the device and then clicking on the Allow or Block buttons in Quarantined Devices (#1 in the screenshot below). This
creates a personal exemption (the "one off case" mentioned earlier). If you wish to create an access rule that is to apply to all devices of the same family or model, you can select Create a rule for similar devices. (#2 in the image below) to open
a new, prepopulated, rule.
▲ Vote if Helpful / Mark if Answer
MCSE: Messaging 2013 Charter / Private Cloud / Server Infrastructure
MaximumExchange.ru

Exchange 2010 Activesync Quarantine message to admin missing ECP URL?

Similar Messages

Maybe you are looking for