One of my favourite features in Exchange 2010 and 2013 is the Exchange ActiveSync Quarantine. This great feature allows you, the administrator, to act as the gatekeeper to new mobile devices as end users attempt to add them to your organization.
Traditionally though this feature can be tricky to implement into an existing organization without affecting devices that already have been configured. The last thing you want to do when you switch on this feature is block your CEO’s iPad! And if you just switch on ActiveSync Quarantine, that’s what will happen over the course of the new hour or so.
Therefore I’ve put together a great little article over on SearchExchange talking a bit more about ActiveSync Quarantine and what it can do, along with instructions on how to pre-approve existing devices before switching the features on. Problem solved..
Steve,
I tried running the script and received the following errors:
Cannot process argument transformation on parameter ‘Identity’. Cannot convert the “domain I removed/AllUsers/Staff/SMITH, Shirley” value of t
ype “Microsoft.Exchange.Data.Directory.Management.CASMailbox” to type “Microsoft.Exchange.Configuration.Tasks.MailboxIdParameter”.
+ CategoryInfo : InvalidData: (:) [Set-CASMailbox], ParameterBindin…mationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,Set-CASMailbox
{SEC2BAAB7DD87580, 6949aa6d301935b29d31220a5e6713ae}
Cannot process argument transformation on parameter ‘Identity’. Cannot convert the “Domain name removed/AllUsers/Staff/Helpdesk” value of typ
e “Microsoft.Exchange.Data.Directory.Management.CASMailbox” to type “Microsoft.Exchange.Configuration.Tasks.MailboxIdParameter”.
+ CategoryInfo : InvalidData: (:) [Set-CASMailbox], ParameterBindin…mationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,Set-CASMailbox
{SEC1325376101443, SEC2D1FF7D18621F, 04291f894c0c3205b8f26b1b9196eea4}
Steve,
I unfortunately don’t have a dev environment to test your script and reading your disclaimer makes me a bit weary. Can you give me an update un the functionality of your script? I seriously need to get a handle on our over 500 mobile devices that are synching with Exchange 2010.
Thanks much!
Dennis
Of course there is a disclaimer. These scripts work for me and other readers. I am giving them to use for free and the responsibility to test them in your environment lies with you.
If you don’t have a test environment, remember you can use tools like VMware Player to build small test environments on most hardware – even your laptop. If you patch your Exchange environment (and you should) having a test/dev environment is essential.