Thanks. What I think I've confirmed via the forums and from testing is that if I enable quarantine, then try and partner a device it quarantines it as expected.
If I enable quarantine, then run "Set-CASMailbox -Identity "Test" -ActiveSyncAllowedDeviceIDs "xxxxx"" then partner that specific device, it doesn't quarantine it - this seems to work around the question of how to continue as normal for existing partnerships, just in case it benefits anyone else. Paul From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 17 January 2012 14:54 To: MS-Exchange Admin Issues Subject: RE: ActiveSync - block rule not working? It probably is one specific app pool, but I don't know which one. I just recycle all of those that have "Exchange" in their name. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]<mailto:[mailto:paul.hutchi...@mira.co.uk]> Sent: Tuesday, January 17, 2012 9:28 AM To: MS-Exchange Admin Issues Subject: RE: ActiveSync - block rule not working? Looks like that was the problem, iisreset fixed it. When you say "recycle the app pools" you mean all of them or just a particular one? Paul From: Michael B. Smith [mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]> Sent: 17 January 2012 14:07 To: MS-Exchange Admin Issues Subject: RE: ActiveSync - block rule not working? IIS has a cache of stuff like this. Just recycle the app pools after making changes for immediate effect. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]<mailto:[mailto:paul.hutchi...@mira.co.uk]> Sent: Tuesday, January 17, 2012 8:55 AM To: MS-Exchange Admin Issues Subject: RE: ActiveSync - block rule not working? The phone might have, not sure on a TCP/IP level quite how it works. To test some more I just created a brand new AD/mailbox and setup a partnership on the phone - worked first time and again, in ECP the "access state" says "access denied" despite it sending and receiving mail. We just power cycled it and it works perfectly post-reboot as well. Paul From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]<mailto:[mailto:kennedy...@elyriaschools.org]> Sent: 17 January 2012 13:41 To: MS-Exchange Admin Issues Subject: RE: ActiveSync - block rule not working? Did it have a connection prior to this? Odd things happen with smart phones when you disable them after the fact. Usually it takes a recycle of IIS to make it stick. From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]<mailto:[mailto:paul.hutchi...@mira.co.uk]> Sent: Tuesday, January 17, 2012 8:33 AM To: MS-Exchange Admin Issues Subject: ActiveSync - block rule not working? I wanted to test ActiveSync block/quarantine rules. So, I setup a device access rule that blocks all "htc legend" devices, then I got an HTC Legend and setup ActiveSync expecting the connection to be block. It isn't, it works, despite the fact that when I look at the partnership in ECP it shows the access state as "Access Denied", which is totally confusing me. Why is it syncing? Link to screen grab: http://dl.dropbox.com/u/51984348/ActiveSync1.PNG Thanks, Paul ________________________________ MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist