Skip to content
Octiga Docs
Copy as Markdown

ActiveSync Access

ScopeGroupRoleL1 Read to view · L1 Read/Write to act

Enable ActiveSync access to mailbox.

Adding a baselineAdd, configure or remove a single baseline on a tenant, a user or a group, without deploying a whole scheme.

Configure it

This baseline applies per user, through a user-level scheme or an Azure group rather than to the tenant as a whole.

  1. Add it directly to a user or an Azure group (Adding a baseline), or bundle it into a user-level scheme and deploy that to many users or groups at once (Deploying a scheme). See Groups and priority for how Octiga resolves which value a user gets when a Direct value, a scheme and a group all supply one.

  2. Leave ActiveSync access set to On. It’s the only setting on this baseline, and it controls whether the mailbox accepts Exchange ActiveSync connections: the protocol most native phone mail apps (and some third-party clients) use to sync mail, contacts and calendar to a mobile device.

  3. Save. With Auto-remediation on, Octiga switches ActiveSync back on whenever it’s disabled for a user the baseline applies to. The user’s phone then reconnects and starts syncing again on its own; nothing else changes for them.

Check it worked

Passing means ActiveSync access is enabled for the mailbox. To confirm it in the Exchange admin centre, go to Recipients → Mailboxes, select the user and open Manage email apps settings, where it appears as “Mobile (Exchange ActiveSync)”. On the user roster or a group’s member list, Passing shows as a green dot for this baseline; Deviated (red) means it’s currently off; Excluded (grey) means the user or tenant isn’t licensed for Exchange Online. A user with access off finds their phone’s native mail app stops syncing until it’s turned back on.

Doing this for every tenant?

Step through the deploy wizard to apply a scheme to a tenant, groups or users, and see what Managed and Direct do at deploy time.

Deploying a scheme