4
ActiveSync - Disable Per Domain
Problem reported by Nicolas Le Merle - 3/15/2015 at 10:24 AM
Not A Problem
Hi Guys,
 
I have found that when you have activated an Active Sync licence, ALL domain admins have the option to freely enable ActiveSync on their mailbox users. Even when you have disabled the 'ActiveSync User Management' feature, domain admins can simple click on an individual user and tick the 'Enable ActiveSync' checkbox.
 
The best way to combat this I have found is to set the 'ActiveSync Accounts' limit to 1 and that way the domain admin can only claim a maximum of 1 free ActiveSync mailbox and when you eventually find out that its been activated it you can delete from admin panel, at which point it can just be re ticked by the domain admin and we then have an infinite loop.
 
Please can this be fixed, or if i'm not understanding correctly please advise :)
 
Nic

3 Replies

Reply to Thread
0
Employee Replied
Employee Post
What version of SmarterMail are you running?
2
Employee Replied
Employee Post
Nicolas,
 
With "Enable ActiveSync User Management" unchecked under features, were you then impersonating as a domain admin?  If so, you would still be able to see the "Enable ActiveSync" checkbox.  This is because you have elevated permissions as a system admin.
 
If you log in as a domain admin, you should not be able to see that checkbox.
0
Nicolas Le Merle Replied
Ah ha ! That makes sense. Yes I was impersonating as a domain admin and I have tested by manually logging in as a domain admin and I see the option is not available. Thanks for clearing that up :) Cheers, Nic

Reply to Thread