Demystifying Certificate Based Authentication with ActiveSync in Exchange 2013 and 2016 (On-Premises)

Some of the more complicated support calls we see are related to Certificate Based Authentication (CBA) with ActiveSync. This post is intended to provide some clarifications of this topic and give you troubleshooting tips.What is Certificate Based Authentication (CBA)? Instead of using Basic or WIA (Windows Integrated Authentication), the device will have a client (user)…


Certificate-Based Authentication (CBA) for Exchange Online

Update 6/6/2017: We updated this post to reflect availability for China plans. On-premises Exchange environments support the ability for certain mobile apps to utilize certificate-based authentication (CBA). Today, we are pleased to announce that CBA is available for customers using Office 365 Enterprise, Business, Education, Government, and China plans. This does not include Office 365…


Exchange ActiveSync on-boarding to Office 365

Introduction Exchange Server 2013 Cumulative Update 8 (CU8) and Exchange Server 2010 SP3 Rollup Update 9 (RU9) introduced a new feature to provide a more seamless experience for ActiveSync-enabled users who move from on-premises Exchange servers to Office 365. This blog post explains the current situation with on-boarding Exchange ActiveSync (EAS) users as well as…


Exchange ActiveSync Guided Walkthrough

Many users rely on their smartphones and other mobile devices to access their email and calendar using Exchange ActiveSync (EAS). Any issues with mobile device access and EAS are noticed and reported immediately and a solution is expected just as quickly. To assist you in troubleshooting EAS issues in your organization, we just released the…


Under The Hood: Exchange ActiveSync Mailbox Log Analysis – Part 2

The previous post for Exchange ActiveSync mailbox log analysis gave an overview of the various commands a device may send. Now we want to dig just a little bit deeper and provide a way to link items within an EAS mailbox log to the items inside the mailbox. Unless verbose logging is enabled you do…


Supporting Windows Mail 8.1 in your organization

Windows 8.1 and Windows RT include a built-in email app named Windows Mail. Mail includes support for IMAP and Exchange ActiveSync (EAS) accounts. This article includes some key technical details of Windows Mail in Windows 8.1. (See Supporting Windows 8 Mail in your organization for Windows 8.0.) Use the information to help you support the…


Life in a Post TMG World – Is It As Scary As You Think?

Let’s start this post about Exchange with a common question: Now that Microsoft has stopped selling TMG, should I rip it out and find something else to publish Exchange with? I have occasionally tried to answer this question with an analogy. Let’s try it. My car (let’s call it Threat Management Gateway, or TMG for…


OWA for iPhone and OWA for iPad are now available!

Today, we are excited to announce the availability of OWA for iPhone and OWA for iPad, which provides even more value to organizations on any Office 365 subscription that includes Exchange Online. OWA for iPhone and OWA for iPad are mobile apps that offer the same email, calendar, and contact functionality you get in Outlook…


Log Parser Studio 2.0 is now available

Download Since the initial release of Log Parser Studio (LPS) there have been over 30,000 downloads and thousands of customers use the tool on a daily basis. In Exchange support many of our engineers use the tool to solve real world issues every day and in turn share with our customers, empowering them to solve…


Configure certificate-based authentication for Exchange ActiveSync

Update: Exchange Server 2013 Cumulative Update 5 and later supports certificate-based authentication with ActiveSync. Note: For official documentation on this subject, please go to this page on TechNet. In previous posts, we have discussed certificate based authentication (CBA) for Outlook Web App, and Greg Taylor has covered publishing Outlook Web App and Exchange ActiveSync (EAS)…