Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-08-27

This topic explains how to use the Exchange Management Console or the Exchange Management Shell to manage the list of Windows SharePoint Services sites and Windows file shares that Microsoft Exchange ActiveSync users can access from their mobile devices.

Note:
The lists of Windows SharePoint Services sites and Windows file shares that are allowed and blocked apply to the whole Exchange ActiveSync virtual directory. You cannot configure these lists for individual users. However, you can disable Windows SharePoint Services sites and Windows file share access for individual users by using Exchange ActiveSync policies.

Before You Begin

To perform this procedure, the account you use must be delegated the Exchange Recipient Administrator role.

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

Procedure

To use the Exchange Management Console to configure access to Windows SharePoint Services sites and Windows file shares

  1. Open the Exchange Management Console.

  2. Under Server Configuration, select Client Access.

  3. Select Exchange ActiveSync.

  4. In the action pane, under Microsoft-Server-ActiveSync, click Properties.

  5. Click the Remote File Servers tab.

  6. Click the Block button to add host names of sites that clients are prohibited from accessing.

  7. Click the Allow button to add host names of sites that clients are permitted to access.

  8. Use the list in the Unknown Servers section to specify the default action that should be taken when a client tries to access a file from a server that is not entered in either the Allow List or Block List.

  9. Click the Configure button to enter the domain suffixes that should be treated as internal.

    Note:
    If you specify that a domain suffix should be treated as internal, the Exchange ActiveSync client will use the intranet connection to access the content instead of an Internet connection.

To use the Exchange Management Shell to configure access to Windows SharePoint Services sites and Windows file shares

  1. Run the following command to add two sites to the Block list and one to the Allow list, specify an internal domain suffix, and configure the default action to take when a client tries to access a file from a server that is not entered in the Allow or Block lists:

    Copy Code 
    Set-ActiveSyncVirtualDirectory -Identity:"ServerName\Microsoft-Server-ActiveSync (Default Web Site)" -RemoteDocumentsBlockedServers:"ServerName1,ServerName2" -RemoteDocumentsAllowedServers:"ServerName3" - RemoteDocumentsInternalDomainSuffixList:"DomainSuffix" -RemoteDocumentsActionForUnknownServers:"Block"

For more information about syntax and parameters, see Set-ActiveSyncVirtualDirectory.

For More Information

For more information about how to manage the Exchange ActiveSync virtual directory, see Managing the Exchange ActiveSync Virtual Directory.