How to Configure Exchange ActiveSync to Access SharePoint Services Sites and Windows File Shares
Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.
Applies to: Exchange Server 2007, Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3
This topic explains how to use the Exchange Management Console or the Exchange Management Shell to manage the list of Windows SharePoint Services sites and Windows file shares that Microsoft Exchange ActiveSync users can access from their mobile devices.
Note
The lists of Windows SharePoint Services sites and Windows file shares that are allowed and blocked apply to the whole Exchange ActiveSync virtual directory. You cannot configure these lists for individual users. However, you can disable Windows SharePoint Services sites and Windows file share access for individual users by using Exchange ActiveSync policies.
Before You Begin
To perform this procedure, the account you use must be delegated the Exchange Recipient Administrator role.
For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.
Procedure
To use the Exchange Management Console to configure access to Windows SharePoint Services sites and Windows file shares
Open the Exchange Management Console.
Under Server Configuration, select Client Access.
Select Exchange ActiveSync.
In the action pane, under Microsoft-Server-ActiveSync, click Properties.
Click the Remote File Servers tab.
Click the Block button to add host names of sites that clients are prohibited from accessing.
Click the Allow button to add host names of sites that clients are permitted to access.
Use the list in the Unknown Servers section to specify the default action that should be taken when a client tries to access a file from a server that is not entered in either the Allow List or Block List.
Click the Configure button to enter the domain suffixes that should be treated as internal.
Note
If you specify that a domain suffix should be treated as internal, the Exchange ActiveSync client will use the intranet connection to access the content instead of an Internet connection.
To use the Exchange Management Shell to configure access to Windows SharePoint Services sites and Windows file shares
Run the following command to add two sites to the Block list and one to the Allow list, specify an internal domain suffix, and configure the default action to take when a client tries to access a file from a server that is not entered in the Allow or Block lists:
Set-ActiveSyncVirtualDirectory -Identity:"ServerName\Microsoft-Server-ActiveSync (Default Web Site)" -RemoteDocumentsBlockedServers:"ServerName1,ServerName2" -RemoteDocumentsAllowedServers:"ServerName3" - RemoteDocumentsInternalDomainSuffixList:"DomainSuffix" -RemoteDocumentsActionForUnknownServers:"Block"
For more information about syntax and parameters, see Set-ActiveSyncVirtualDirectory.
For More Information
For more information about how to manage the Exchange ActiveSync virtual directory, see Managing the Exchange ActiveSync Virtual Directory.