Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-07-23

You can use the EMC or the Shell to manage the list of Microsoft Windows SharePoint Services sites and Windows file shares that Microsoft Exchange ActiveSync users can access from their mobile phones.

Note:
The lists of Windows SharePoint Services sites and Windows file shares that are allowed and blocked apply to the whole Exchange ActiveSync virtual directory. You can't configure these lists for individual users. But you can disable Windows SharePoint Services sites and Windows file share access for individual users by using Exchange ActiveSync policies.

Looking for other management tasks related to Exchange ActiveSync? Check out Managing Exchange ActiveSync.

Use the EMC to configure access to Windows SharePoint Services sites and Windows file shares

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Exchange ActiveSync user settings" entry in the Client Access Permissions topic.

  1. Open the EMC.

  2. In the console tree, navigate to Server Configuration > Client Access.

  3. Select Exchange ActiveSync.

  4. In the action pane, under Microsoft-Server-ActiveSync, click Properties.

  5. Click the Remote File Servers tab.

  6. Click Block to add host names of sites that clients are prohibited from accessing.

  7. Click Allow to add host names of sites that clients are permitted to access.

  8. Use the list in the Unknown Servers section to specify the default action that should be taken when a client tries to access a file from a server that's not entered in either the Allow List or Block List.

  9. Click Configure to enter the domain suffixes that should be treated as internal.

    Note:
    If you specify that a domain suffix should be treated as internal, the Exchange ActiveSync client will access the content through an intranet connection instead of an Internet connection.

Use the Shell to configure access to Windows SharePoint Services sites and Windows file shares

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the " Exchange ActiveSync user settings" entry in the Client Access Permissions topic.

This example adds two sites to the Block list and one to the Allow list, specifies an internal domain suffix, and configures the default action to take when a client tries to access a file from a server that's not entered in the Allow or Block lists.

Copy Code 
Set-ActiveSyncVirtualDirectory -Identity:"ServerName\Microsoft-Server-ActiveSync (Default Web Site)" -RemoteDocumentsBlockedServers:"ServerName1,ServerName2" -RemoteDocumentsAllowedServers:"ServerName3" - RemoteDocumentsInternalDomainSuffixList:"DomainSuffix" -RemoteDocumentsActionForUnknownServers:"Block"

For more information about syntax and parameters, see Set-ActiveSyncVirtualDirectory.