Forum Discussion
Quarantined Mobile Devices - Powershell
The cmdlet you are using overrides the list of allowed devices, instead you should be adding to it:
Set-CASMailbox -Identity jdoe -ActiveSyncAlloweDeviceIDs @{add=$MobileDevice.DeviceId}
Have you checked the ActiveSyncOrganizationSettings for your tenant using Get-ActiveSyncOrganizationSettings?
What's the DefaultAccessLevel?
Are there any Intune policies in use?
Cheers,
ThomasDefault Access Level = Quarantine.
We moved to Exchange Online in 2016. From day 1, we have had this policy - all mobile devices get Quarantined until approved by administrator. All of the mobile devices that we have allowed have been allowed manually. When we approve a device manaually (from the Mobile page) - the device is approved and removed from that list.
I am just looking to do the same thing - but with Powershell. Should involve less clicks, pages, and waiting for things to load.
We don't currently have any intune policies in place.
The device state is stored in an Active Directory attribute which needs to be replicated across all domain controllers until the state is properly returned when queried by a Get-MobileDevice cmdlet.
Is the device shown in the list of quarantined devices still? Even after some hours after the device has been allowed?
