Exchange 2010 - How to get info on Mobile devices connected via ActiveSync, quarantine any new device and remote Wipe them.

During these days, for customer with Exchange 201x, I got request to create all active mobile devices report and verify last time they connected to Exchange.

To got these result I used following powershell command:

Get-ActiveSyncDevice | select-object UserDisplayName,DeviceModel,DeviceOS,DeviceType,DeviceMobileOperator,FirstSyncTime,DeviceAccessState,DeviceImei,LastSuccessSync,IsValid | sort-object UserDisplayName | Ft -autosize -wrap | Out-File c:\mobiledevices_1_00.txt -width 600

If you like you can add more fields.

After that I found that LastSyncDate field was empty.

To override this problem I found following command that create a relationship between DeviceID (that you can find in first query too) and LastSucceSync field

Get-ActiveSyncDevice | Get-ActiveSyncDeviceStatistics | select-object DeviceID,LastSuccessSync,Identity |export-csv c:\mobiledevices_1_00_last_sync.csv 

For security reason you can proceed to disable any user that has enable OWA/ActiveSync feature, but for user that we want enable only company devices you can use this woraround.

To block any further device you can put all new devices (by default) in Quarantine.

About that you can follow this article:



Only IT could accept ActiveSync activation users requests.

Another  key point is that, Exchange 2010, give you the ability to remotely wipe any devices ActiveSync connected in case if you lost it or someone stole it.

Here is interesting article that easily explain you this procedure.

 http://technet.microsoft.com/it-it/library/aa998614%28v=exchg.150%29.aspx

<-------->

You could be interested to these similar article too:

Exchange 201X- How get all users who have a forwarding email, redirect rule and delegate permission on them mailboxes or Outlook folders

Exchange 2013 - How to monitor it with powershell command

Exchange - Microsoft Exchange Server User Monitor

Exchange 2010 - Poster dell'architettura

Exchange 2010 - How to monitor Exchange Health

Exchange 2010 - How export to pst single mailbox or all mailboxes with single command or powershell command

Exchange 2013 - How to monitor it with powershell command

Exchange 2010 - How to get info on Mobile devices connected via ActiveSync, quarantine any new device and remote Wipe them.

Exchange 2003/2010 - Add a photo to user contact