Can't add new devices to the quarantine

Андрей Михалевский 3,301 Reputation points
2024-10-29T14:46:00.6533333+00:00

Hi.

Task: Add new mobile devices to quarantine.

What is the reason why this may not work ? I have changed the global parameter and also created a rule in the ecp.

Карантин-01

I added a third app. It is quarantined. How does it work ? What could be the cache? I removed the devices via Remove-MobileDevice. IIS restarted. I even rebooted the servers.

Карантин-2

Exchange Server
Exchange Server
A family of Microsoft client/server messaging and collaboration software.
1,333 questions
Microsoft Exchange
Microsoft Exchange
Microsoft messaging and collaboration software.
560 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Vasil Michev 107.3K Reputation points MVP
    2024-10-29T17:05:52.09+00:00

    Likely it's whitelisted on some user, check the DeviceAccessStateReason value. Or filter against the DeviceID to confirm:

    Get-CASMailbox -Filter {ActiveSyncAllowedDeviceIDs -eq '111111111'}
    

  2. Jake Zhang-MSFT 6,375 Reputation points Microsoft Vendor
    2024-10-30T10:11:55.5866667+00:00

    Hi @Андрей Михалевский,

    I noticed your comment that you said this is a new user, here are some things you can check:

    1. Make sure the new account has sufficient permissions to add devices and perform related operations. Check if the account is correctly assigned the required roles and permissions.
    2. Some third-party applications may interfere with the device's isolation process. Confirm whether these applications are compatible with the current system or whether there is an updated version that can resolve the compatibility issue.
    3. Check the overall configuration of the system to ensure that no necessary settings are missed. For example, confirm that all required services and features are enabled.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.