How to Modify Exchange ActiveSync Mailbox Policy Settings

Exchange 2007

Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.


Applies to: Exchange Server 2007, Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3

Topic Last Modified: 2007-08-30

This topic explains how to use the Exchange Management Console and the Exchange Management Shell to modify the properties of an Exchange ActiveSync mailbox policy. After you have created an Exchange ActiveSync mailbox policy, you can modify several settings. These include password requirements, number of failed password attempts allowed, attachment settings, and device requirements.

To perform this procedure, the account you use must be delegated the Exchange Organization Administrator role.

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

Also before you perform these procedures, confirm that an Exchange ActiveSync mailbox policy has been created.

  1. In the console root of the Exchange Management Console, expand the Organization Configuration node.

  2. In the result pane, click Client Access.

  3. In the work pane, click the Exchange ActiveSync mailbox policy that you want to change.

  4. In the action pane, click Properties.

  5. In the Exchange ActiveSync mailbox policy properties window, configure the settings for the Exchange ActiveSync mailbox policy, and then click OK to accept your changes.

  • Run the following command:

    Set-ActiveSyncMailboxPolicy -Identity MyPolicy -AllowNonProvisionableDevices $true -AllowSimpleDevicePassword $true -AlphanumericDevicePasswordRequired $true -AttachmentsEnabled $true -DeviceEncryptionEnabled $false -DevicePasswordEnabled $true -DevicePasswordExpiration 12 -DevicePasswordHistory 20 -DevicePolicyRefreshInterval 00:60:00 -MaxAttachmentSize 4 -MaxDevicePasswordFailedAttempts 5 -MaxInactivityTimeDeviceLock 00:15:00 -MinDevicePasswordLength 4 -PasswordRecoveryEnabled $true -UNCAccessEnabled $false -WSSAccessEnabled $false

For more information about syntax and parameters, see Set-ActiveSyncMailboxPolicy.


Community Additions