Home > Enterprise Mobility Management > Profiles and Settings > Configuring an Exchange ActiveSync Profile

Configuring an Exchange ActiveSync Profile

You can provision Exchange ActiveSync e-mail accounts on iOS and Android (Samsung Knox compatible only) devices enrolled in a Systems Manager network. Other Android devices will need to be configured through managed app settings with Gmail. Deploying email configurations can greatly simplify the end device user's experience to receive corporate emails. Additionally, account settings can be configured in order to ensure corporate emails are securely accessed. 

To configure an Exchange ActiveSync Profile for an iOS or Knox device:

1. Assign device owner

2. Configure Exchange ActiveSync payload

3. Deploy profile to device(s)

Android devices enrolled through Android Enterprise (Android for Work) will need email configured through managed app settings.

Assign Device Owner

Enrolled devices should be assigned to a device user whose email account will be accessed from the device. The device owner can be assigned from two different places:

Option 1 (single device)

Notes:

  • The username field should be the full email account address.
  • A domain can be added to the username field (e.g., DOMAIN\user)
  1. Navigate to Monitor > Clients.
  2. Select a client to assign a device owner and go to the client's details page.
  3. Under the 'client details' section, select 'Set an owner.'

 

 

  1. Assign a device owner.

4140ed9e-7a93-47fd-90ca-b427eae9c36d

Option 2 (multiple devices)

  1. Navigate to the Configure > Owners page.
  2. Select 'Add new' or Import > 'CSV import'
  3. Configure owner(s) and assign one or more devices.

Create Exchange ActiveSync Profile

It is important to note that updating a profile with an ActiveSync payload will reset all local email account settings on the devices. Device users will then have to manually re-configure the settings for the email account (e.g., password, default mail account, mail badge notifications).

Therefore, it is highly recommended to create a separate profile to host only the Exchange ActiveSync payload. This method will ensure that non-related changes to a configuration profile will not impact the Exchange ActiveSync account settings and reset account settings.

  1. Navigate to the MDM > Settings page.
  2. Create a new configuration profile (for more information on creating profiles for managed devices, please go here). 
  3. Select '+ Add settings' and select the ActiveSync payload.
  4. Configure the Exchange ActiveSync settings as described below.
  5. Save changes.

Configure ActiveSync Settings

  • Account name: Description of the email account that will be displayed on the device.
  • Exchange host: Address of the exchange email server.
  • Prevent move: Prevent email data from being opened in other applications.
  • Past days to sync mail: Determines the email archive available on the device.
  • Use only in Mail: Prohibits sending messages from other applications, such as Safari or Photos. If checked, configured exchange account cannot be selected as default mail account on device.
  • Use SSL: Mail is sent to exchange server using an encrypted SSL connection.
  • Enable S/MIME: A client certificate is used to sign and encrypt outgoing mail. Certificate must be imported onto device.
  • User: Use the device owner, if devices' have been assigned as in the firs step of this article. An individual User can also be configured. If specify a user is selected, each device receiving the specified configuration profile will receive the same shared email account settings.

Client Certificate Authentication

Cert-based email authentication helps ensure that users only sign into their corporate mail on approved devices that are managed through Systems Manager, by allowing you to distribute identity certs through Dashboard. To enable client certificate auth, check the box in the ActiveSync payload, and make sure to upload your client identity certificates to your users under Systems manager > Configure > Owners. Certificates can be uploaded individually by selecting each user, or in bulk through the Import certs option, found under Import on the Owners page. See the Owners article for more info.

Deploy Profile to Device(s)

  1. After saving changes, devices within the scope of the configured profile will receive the Exchange ActiveSync settings the next time it is able to check-in with the Meraki Cloud. 
  2. Unless a password is inputted from the specify a user option, the device user will be prompted for their email account password before accessing the account's emails. 
  3. For more information on creating profiles for different devices, please consult this Knowledge Base article.

Common Troubleshooting Tips

  • If an Exchange ActiveSync account already exists on the iOS device that is identical to the ActiveSync payload set to deploy via Systems Manager, the entire configuration profile will fail to install. This is because Apple/iOS prohibits multiple identical email accounts on an iOS device. When an identical Exchange ActiveSync is deployed to a device, an 'Error - Profile Installation Failed' error will log in the client's Activity Log at bottom of its details page.
    • To resolve the error, either manually remove the existing email account from the device itself, or remove the ActiveSync payload from the configuration profile in Systems Manager.

 

ee8d946e-816c-47f5-8a2d-589d3a9f482b

0534f3c3-2138-47d4-bca4-a8cf2ee7d48e

You must to post a comment.
Last modified
11:05, 6 Oct 2017

Tags

Classifications

This page has no classifications.

Explore Meraki

You can find out more about Cisco Meraki on our main site, including information on products, contacting sales and finding a vendor.

Explore Meraki

Contact Support

Most questions can be answered by reviewing our documentation, but if you need more help, Cisco Meraki Support is ready to work with you.

Open a Case

Ask the Community

In the Meraki Community, you can keep track of the latest announcements, find answers provided by fellow Meraki users and ask questions of your own.

Visit the Community