Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Consider a deployment of Exchange 2007. OWA is deployed and working well. Users want to sync their smartphones with their Exchange account (mail, contacts, calendar mostly). The Exchange configuration details on the phones are using the public OWA address.


  • are there options for enabling/disabling sync for smartphones (iPhone specifically, but considering Blackberry also)
  • is there a way to specify whether they're able to sync or not based on their address (e.g. allow syncing on via LAN address, but not on a public address?)
share|improve this question
up vote 2 down vote accepted
  1. You can configure separate ActiveSync policies (a default of disabled and a second one for enabled) in the Exchange Management Console -> Organizationl Configuration -> Client Access. If you make the default disabled you would just need to assign the "enabled" policy to the mailbox accounts which you want to allow to sync.
  2. I'm not aware of any way to restrict this through policy and I'm not sure why you would want to. You could just block it at the firewall I suppose.
share|improve this answer
Combine my answer and yours and I think he has a solution! – ITGuy24 Oct 28 '09 at 20:56

You could probably do this by only allowing local LAN IPs access to the IIS ActiveSync folder and blocking everything else.

I block Blackberry BIS access to OWA with this method.

Also...I personally would never allow an employee to keep company email on a personal device that I couldn't at the very least enforce password policy on and wipe remotely if lost or stolen. You should look at an ActiveSync or BES solution.

share|improve this answer

Exchange 2007 cannot sync Blackberrys without the help of a 3rd party solution, typically a blackberry enterprise server.

share|improve this answer
True, but every Blackberry on BIS has the ability to sync through OWA if not on the BES – ITGuy24 Oct 28 '09 at 20:59
That's not a true sync, it's only mail. – DanBig Oct 29 '09 at 12:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.