Click to Rate and Give Feedback
TechNet
TechNet Library
Exchange Server
 Microsoft Exchange ActiveSync Mobil...
Collapse All/Expand All Collapse All
Microsoft Exchange ActiveSync Mobile Administration Web Tool

Topic Last Modified: 2010-05-12

The Microsoft® Exchange ActiveSync® Mobile Administration Web tool enables administrators to manage remotely erasing lost, stolen, or otherwise compromised mobile devices.

By using the Exchange ActiveSync Mobile Administration Web tool, administrators can perform the following actions:

  • View a list of all devices that are being used by any enterprise user.
  • Select/de-select devices to be remotely erased.
  • View the status of pending remote erase requests for each device.
  • View a transaction log that indicates which administrators have issued remote erase commands, in addition to the devices those commands pertained to.

Install the tool on an Exchange Server 2003 with Service Pack 2 (SP2) front-end server.

Bb508837.note(en-us,EXCHG.65).gifNote:
The Exchange ActiveSync Mobile Administration Web tool works together with the device password policy enforcement logic in Exchange Server 2003 SP2. You must select the Enforce password on device option under Device Security Settings to allow the tool to function correctly. For more information, see Step 6: Configure and Manage Mobile Device Access on the Exchange Server.

To install the Exchange ActiveSync Mobile Administration Web tool, run the MobileAdmin.msi package on the front-end server.

Bb508837.note(en-us,EXCHG.65).gifNote:
When installed as described, the tool will be available from any remote computer that has a browser that can access the virtual directory associated with the tool. However, to access the tool from the same computer on which it is installed, you must use one of the following approaches:
•   Add the server name to the Local intranet list for Internet Explorer (In Internet Explorer, click Tools, click Internet Options, click Security, click Local intranet, and then click Sites).
•   Use "localhost" as the server name when you specify the mobileAdmin URL in the browser.

By default, access to the Exchange ActiveSync Mobile Administration Web tool is restricted to Exchange administrators and local administrators. A user from either of these groups can enable additional users to access the tool by modifying the security settings on the MobileAdmin tool installation folder. You do this by right-clicking the folder, and then selecting sharing & security, which displays the Insert Folder Security properties dialog box.

By using this user interface, an administrator can add a user or group by clicking Add and then entering the name of the user or group to which they want to grant access.

Similarly, a user or group can be removed by selecting that user or group, and then clicking Remove.

The Welcome Screen presents an administrator with a list of administrative options. Select one of these options to start the associated Web page. The options displayed on the Welcome Screen are as follows:

  • Remote Wipe   Run a remote wipe command for a lost or stolen mobile device.
  • Transaction Log   View a log of administrative actions, noting time/action/user.

The Remote Device Wipe administrator console provides the following functions:

  • Issue a remote wipe command for a lost or stolen mobile device.
  • View the status on a pending remote wipe command.
  • Undo (cancel) a remote wipe command if a lost or stolen mobile device is recovered.
  • Delete a device partnership.

To issue a remote wipe command, search for a user’s mobile devices by specifying the user’s name, locate the device that you want based on device type and time of last synchronization, and then click Wipe.

You can search for a user by specifying either their e-mail name or full SMTP address, for example, "user1" or "user1@contoso.com."

The status is indicated under Status for each mobile device and may contain one or more of the following values:

  • OK   device can synchronize.
  • Wipe Initiated   Administrator has chosen the wipe action but the directive has not yet been sent to the mobile device.
  • Sent To Device   The remote wipe directive has been sent to the mobile device and we are waiting for confirmation.
  • Device Acknowledged   The device has acknowledged receipt of the remote device wipe directive and its intent to run the wipe.
  • Wipe operation completed successfully   All bookkeeping and so on has been completed and the remote wipe has been performed.

When a Wipe action is specified for a mobile device, it remains active until the administrator specifies otherwise. This means that after the initial remote wipe has been completed, the server continues to send a remote wipe directive if the same mobile device ever tries to reconnect. If a lost device is recovered, the administrator will have to cancel this directive so that the mobile device can successfully connect again. You do this by locating the mobile device that has the remote wipe action set, and then clicking Cancel Wipe.

Finally, the administrator can use the remote wipe console to delete a device partnership from the server. This has the effect of cleaning up all state information associated with a specified mobile device on the server and is primarily useful for housekeeping purposes. If a mobile device tries to connect after its partnership has been deleted, it will be forced to reestablish that partnership with the server through a recovery process that is transparent to both the IT administrator and the end-user.

To delete a partnership, locate the device that you want in the device list, and then click Delete.

The Transaction Log displays the following information for all critical administrative actions that are performed with the Exchange ActiveSync Mobile Administration Web tool:

  • Date Time   Date and time when the action was executed.
  • User   The user who executed the action.
  • Mailbox   The mailbox that the action pertained to.
  • Device Id   The device that the action pertained to.
  • Type   The type of device that the action pertained to.
  • Action   The action taken by the administrator.

There are also Refresh and Clear buttons for administrative actions. When the administrator clicks Clear, a prompt is issued verifying that this action is to be performed. Click OK or Cancel. When a "clear" action has been performed, an event is logged that indicates this.

Tags What's this?: Add a tag
Community Content   What is Community Content?
Add new content RSS  Annotations
Error trying to install.      Steve Fedan   |   Edit   |   Show History
Anyone else experiencing this error on installing this on the front end mail server?

'The Exchange ActiveSync Administration tool must be installed on the default IIS virtual server, setup has detected that the virtual server has been deleted. Setup will be aborted.'

There's no mention of this error in any of the documentation. 'Explanations' that I have seen covering it from various INET posts are vague and offer no resolution.
Tags What's this?: Add a tag
Flag as ContentBug
MS docs are fine.      btenney   |   Edit   |   Show History
I find MS documentation to be better then most. Most their KB's are dumbed down for the masses but yet you will always have complainers.

Funny, people run out and buy Macs since it "just works". Yet, they are the ones over in the IT dept everyday with some problem.
Tags What's this?: Add a tag
Flag as ContentBug
This is doing my head in      SevIT ECA   |   Edit   |   Show History
Even after seeing these notes I still cannot get this to work. https://localhost/MobileAdmin just shows a 404 error. This is stupid!
Tags What's this?: Add a tag
Flag as ContentBug
Lack of a URL      SGSmith   |   Edit   |   Show History
While I agree that the URL should have been included with the documentation, having administered Windows Server and Exchange for several years now, it didn't take me long to just check IIS Manager and see that a new sub site had been added under the name MobileAdmin.
Tags What's this?: Add a tag
Flag as ContentBug
Pretty Helpful      Abhijeet Nigam   |   Edit   |   Show History
I found the document good although it would help if screen shots were placed. Also I found that everything was mentioned pretty neatly for accessing the website.
Tags What's this?: Add a tag
Flag as ContentBug
EXACTLY!!!      millwardrm   |   Edit   |   Show History
Almost wasted 30 minutes until I found your comments on how to access it!!!! Was it to hard to put the info in the article in plain english???
Tags What's this?: Add a tag
Flag as ContentBug
LMAO @ Typical Microsoft Documentation...      deckhopper   |   Edit   |   Show History
I soooooooooooo totally agree with the above! This is why I finally stopped using Windows as my main machine and went over to the "DARK SIDE" (iMac). I use VMWare Fusion to run Microsoft products right where they belong... in a sandbox, trapped and constrained! If XP starts acting up (since it does so often), I just shut down the Virtual Machine and smile with glee knowing I can continue computing. Meanwhile, XP is quickly beaten and forced to sit in the "time-out" corner. When I'm ready, I allow XP to come back from the "naughty-boy" chair. I wipe his toddler tears and forgive him... he's only a child. I've never smiled so much sitting at a computer until I got an iMac. :D
Tags What's this?: Add a tag
Flag as ContentBug
How about the URL that you use to login!!!      David Follis ... Thomas Lee   |   Edit   |   Show History
I get so tired of computer documentation that tells me what to do but does not demonstrate HOW TO DO IT!!! Tell me what a setting is for. What effects it has on the operation of the system if it is enabled or disabled. Show some screen shots. Simply saying this is button A, this is button B, this is setting C, doesn't help anyone. The above documentation tells me to install but give no information as to how to login or use the tool. What URL?? Why isn't there a shortcut dropped on the desktop after the install? Sorry for the complaints but this is the straw that broke the camel's back. I'm fairly convinced that 90% of the people writing technical documentation today aren't even familar with the software they are documenting. I finally realized that it was https://localhost/MobileAdmin but I had to waste 30 minutes doing so.
Processing
© 2012 Microsoft. All rights reserved. Terms of Use | Trademarks | Privacy Statement
Page view tracker