Use this screen to designate the domain's accounts that are authorized to use ActiveSync, and you can edit each authorized account's client settings and assign its ActiveSync policy.

Manually Authorizing Accounts Authorizing Accounts

Click Add to manually authorize one or more of the domain's accounts to use ActiveSync. This opens the Select Users dialog for finding and selecting the accounts.

Common Queries

Use the options in this section to narrow your search by specifying all or part of the user's name, email address, or the contents of the account's Description. Leave these fields blank if you want the search results to contain every user that matches the Locations specified above.

Include Disabled Accounts

Check this box if you wish to include disabled accounts in your search.

Find Now

After you have specified all of your search criteria, click Find Now to perform the search.

Search Results

After performing the search, select any desired users in the Search Results and click OK to add them to the list of authorized accounts.

Revoking Accounts

To revoke an account's authorization to use ActiveSync, select it from the list and click Revoke Selected Account. If you wish to revoke all accounts, click the Revoke All Accounts button.

If you have enabled the option to Authorize all accounts upon first access via ActiveSync protocol, revoking an account's access will remove it from the list, but the next time a device connects for the account it will be authorized again.

Assigning an ActiveSync Policy

To assign a Policy to the account:

1.Select an account from the list.

2.Click Assign Policy. This opens the Apply Policy dialog.

3.Click the Policy to Assign drop-down list and choose the desired policy.

4.Click OK.

This policy will be assigned to any new device that connects for this account.

Searching the List of Authorized Accounts

If you have a large number of accounts authorized to use ActiveSync, you can use the Find user box to search the list for a specific account. Simply type the first few letters of the account's email address to select the user.

Managing a Domain's Client Settings Settings

Select an account and click Settings to manage the Client Settings for the account. These settings will be applied to any ActiveSync clients that connect for the account.

By default all of the options on this screen are set to "Inherit from Domain," which means that each option will take its setting from the corresponding option on the domain's Client Settings screen. Any changes made to the settings on that screen will be reflected on this screen. Conversely, any changes you make to this screen will override the domain-level setting for this account.

Troubleshooting

Archive [XML | WBXML] requests and responses

Use the Archive XML... and WBXML options if you wish to save this data, which can sometimes be useful for debugging purposes. The global options are disabled by default.

Validate/correct PIM mrk file integrity

This option runs a validation and correction process on the client's PIM data to look for known issues that could prevent it from syncing correctly, such as duplicate iCal UIDs or empty required fields. The global option is disabled by default.

Log level

ActiveSync for MDaemon supports six levels of logging, from the highest to lowest amount of data logged:

Debug

This is the most extensive log level. Logs all available entries, and is typically only used when diagnosing a problem.

Info

Moderate logging. Logs general operations without details. This is the default log level.

Warning

Warnings, errors, critical errors, and startup/shutdown events are logged.

Error

Errors, critical errors, and startup/shutdown events are logged.

Critical

Critical errors and startup/shutdown event are logged.

None

Only startup and shutdown events are logged.

This setting is only available on the Global client settings screen, and for your convenience it can also be accessed from the Diagnostics screen.

Options

Create Tasks/Reminders for flagged mail items

This option makes it possible for MDaemon to remind the user about flagged items, by creating a task item for each flagged email. This is disabled by default.

Send read receipts

Enable this option if you want the server to support read confirmation requests and issue a read receipt when a message is flagged as read by a client. This is disabled by default.

Request read receipts

Enable this option if you want the server to request read confirmation for all mail sent by a client. This is disabled by default.

Enforce protocol restrictions

Enable this option if you wish to deny connections from any client that attempts to use a protocol other than the the Allowed Protocol Versions specified for the client. By default this option is disabled, which means that protocol restrictions do not prevent a client from using a different protocol; they simply tell the client which protocols to use. If a client attempts to use a restricted protocol anyway, MDaemon will still allow the connection.

Allow clients to connect that are managed by other servers

By default, when the ActiveSync server sends provisioning data/policy specifics to a client and it reports that it is also managed by another ActiveSync server, the client will still be allowed to connect to MDaemon. In this circumstance, however, there is no way to ensure that your policy specifics will be applied where they conflict with the other ActiveSync server's policy. Generally clients default to using the most restrictive option where policies conflict. Disable this option if you do not wish to allows those clients to connect.

Respond with logon alias as 'PrimarySmtpAddress' in Get/UserInformation

This allows the service to return an alias/secondary address as the primary address in response to a Settings/Get/UserInformation request. This works around an issue caused by a post iOS9.x update that resulted in clients not being able to send mail using an alias. Using this option results in a non-specification compliant response to Settings/Get/UserInformation.

New clients must be authorized by administrator prior to synchronizing

Enable this option if you wish to require that new clients must first be authorized by an administrator before they can begin synchronizing with an account. The Clients list indicates any clients awaiting authorization, and the administrator can authorize them from the same screen. This option is only available on the Global and Account client settings screens, and it is Off by default.

Maximum number of clients per user

If you wish to limit the number of ActiveSync clients or devices that can be associated with an MDaemon account, specify the desired number in this option. The global option is set to "unlimited" by default. This option is available on the Global, Domain, and Account client settings screens, not the individual Clients screens.

Exempt from Location Screen

Enable this option on an ActiveSync client's settings screen if you want the device to be able to bypass Location Screening. This makes it possible for a valid user to continue to access his or her account via ActiveSync when, for example, traveling to a location that is otherwise blocked from authentication attempts. In order to exempt the device it must have connected and authenticated using ActiveSync within the time-frame configured in the Remove inactive clients after this many days setting located on the Tuning screen.

Whitelist Remote Address

When exempting a device from Location Screening, enable this option if you also wish to whitelist the remote IP address from which it is connecting. This can be useful for allowing other clients that might be connecting from the same IP address.

Day of month to reset bandwidth statistics

Use this option if you wish to reset the bandwidth usage statistics for ActiveSync devices on a specific day of each month. The reset event takes place as part of the normal nightly maintenance process and is logged to the System log like other maintenance routines. The global option is set to "0 (Never)" by default, meaning the usage stats will never be reset. Set the child options to a different day if, for example, you want the reset day to coincide with a user or client's wireless carrier billing reset date.

Folder Options

Exclude

User's [whitelist/blacklist] folder

By default the user's whitelist and blacklist contact folders are not synced with devices. They are generally only used by MDaemon to help with automatic spam prevention. For that reason they do not need to be displayed on devices as contacts.

Non-default mail folders

By default all user-created and default mail folders can be synced with the device. Enable this option if you wish to allow only the default mail folders to be synced, i.e. the Inbox, Sent Items, Deleted Items, Drafts, and so on. No user-created folders will be included. This option is disabled by default.

Non-default PIM folders

By default all of the user's PIM folders (i.e. contacts, calendar, notes, tasks, etc.) will be synced with the device. Enable this option if you wish to allow only the default PIM folders to be synced. For example, if this option is enabled and a user has multiple calendar folders, only the default calendar will be synced. This option is disabled by default.

Include Public Folder hierarchy

Check this box if you want the public folders to which a user has access to be included in the user's folder list on ActiveSync devices. This is enabled by default.

Allow searching

Allows the client to search the Public Folders to which it has access. This is allowed by default.

Allow Public Folder traversal (exposes secured folder names)

By default, in order for a client to sync/access a public subfolder, the account must have Lookup permission for both the subfolder (i.e. child folder) and all parent public folders above it. If the account does not have permission to see the parent folders then it cannot see the child folder either, even if the account has permission to do so. Enable this option if you wish to allow the client to access these child folders. Note: enabling this option must necessarily reveal the names of the parent folders to the client, which could be deemed a security risk. This option is disabled by default.

Maximum number of Public Folders allowed

Use this option if you wish to limit the number of Public Folders allowed on the device. When a limit is set, the server iterates through the list of folders until the limit is reached, and then no more are sent to the device. There is no way to ensure the order in which folders will be processed. By default there is no global limit set.

Virtually merge public contacts into default contacts

Enable this option if you wish to merge the public contacts with the user's default contacts on the device. This is only a virtual merge, that is they are not actually copied to the user's contacts folder. This can be useful on clients that do not support Global Address List (GAL) searches. This is disabled by default.

Include shared folders

Check this box if you want the shared folders to which a user has access to be included in the user's folder list on ActiveSync devices. This is enabled by default.

Allow searching

Allows the client to search the Shared Folders to which it has access. This is allowed by default.

Preview Effective Settings

This button is available on all of the child Client Settings screens (i.e. domains, accounts, and clients). Since by default the options on those screens are set to inherit their settings from a parent screen, use this feature to see what settings are currently being applied to the displayed screen.

See:

ActiveSync » Client Settings

ActiveSync » Domains

ActiveSync » Clients