ActiveSync associations

To display the users and the devices that connect to your ActiveSync server through Standalone, in Core Admin Portal, go to Devices & Users > ActiveSync. Information displayed on this page is updated when Sentry syncs with Core.

Each ActiveSync user (email account) on the device displays as a separate record in the ActiveSync page.

If there are multiple email accounts on the device, then each User and Device association is listed in the ActiveSync Association view, but only the User registered on Core for the device is listed in the All Devices view

Typically, devices register with a Core, which provides them with their email profile information. Once a device’s email profile is set up, it can access the ActiveSync server.

When a device accesses the ActiveSync server, Sentry tries to match the device to a registered device on Core. Typically, a successful match is made between the record on the ActiveSync page to the corresponding registered device on Core. However, for some devices, no match is made, sometimes because MDM and ActiveSync do not report the same device information. In these cases, the status for the record in the ActiveSync and AppTunnel pages shows as Unregistered (Unlinked).

When the record is matched to the corresponding device on Core, the status for the record shows as Registered(Linked).

When an ActiveSync device registers with Core, you can manage it using Core. For example, you can apply security policies to a registered device.

However, using the ActiveSync view, you can take some actions on ActiveSync devices regardless of whether they are registered.

Notably, you can allow or block access to the ActiveSync server, assign an ActiveSync policy, or wipe the device.

We recommend applying ActiveSync actions (Wipe, Assign Policy, and Revert Policy in the ActiveSync page) to devices other than iOS, Android, and Windows Phone 8 devices.

Actions applied on a record in the ActiveSync page only impact the user associated with the device in that record. If the user is also available on another device, the user on that device is not impacted.

The wipe behavior differs depending on the platform. For example, for any Android device, the Email+ client does not support ActiveSync Wipe.

The Apply Policy and Revert Policy actions are applied to the device, not to the user.

Additional users on the Samsung native client display as unregistered in the ActiveSync page. To register the user, select the record, then click Link To to link to the corresponding device.

ActiveSync devices that are registered, or are pending registration, automatically appear on the Devices view.

A device in the Users & Devices > Devices view is not necessarily shown in the ActiveSync view. For example, with Standalone Sentry, a registered device that has not accessed the ActiveSync server appears only in the Devices view, but not in the ActiveSync view.

If an ActiveSync device on the Devices view has an Active status, you can take all the actions on the device that the Devices view provides.

Sync interval with Core

The default sync interval for Standalone Sentry is 12 hours.

For Integrated Sentry, the information displayed on this page is updated after a successful periodic differential sync. The default interval for a periodic differential sync is 4 hours. You can configure the periodic differential sync in the Core Admin Portal, Services > Sentry > Preferences. However, changes to the Last Sync Time for a record is not picked up in a periodic differential sync if it is the only field that was changed. For Integrated Sentry, the Last Sync Time, if it is not updated in a periodic differential sync, is updated after a full batched-sync. The default interval for a full batched-sync is one week.

Information displayed for ActiveSync associations

The following table describes the information displayed for ActiveSync associations in the Admin Portal in Devices & Users > ActiveSync.

Table 28.   Information displayed for ActiveSync associations

Column

Description

DeviceID

The DeviceID for the device.

User

The device user.

Number

The device number.

Phone

The device model.

OS

The device platform.

Status

Indicates whether the device is registered with Ivanti, Inc.

When a record is associated with a registered device on Core, the status displays as Registered(Linked).

When a record is not associated with a registered device on Core, the status displays as Unregistered (Unlinked).

Use the Link To feature to link the record to the corresponding registered device.

Sync Status

Indicates whether ActiveSync access for the device is Allowed or Blocked.

First Sync Time

For Integrated Sentry, the First Sync Time displays the time stamp for the first successful synchronization of data from the Exchange server.

For Standalone Sentry, the First Sync Time displays the time stamp when the device is first reported by Sentry to Core as a new device.

Last Sync Time

Indicates the last time the device tried to access the ActiveSync server.

The Last Sync Time does not indicate whether access to the ActiveSync server was successful or not. Therefore, the last sync time on the ActiveSync server may be different than what is recorded by Standalone Sentry.

For Standalone Sentry, the Last Sync Time is updated only if Standalone Sentry detects traffic between the device and the ActiveSync server. For Integrated Sentry, the Last Sync Time is updated only after a full batched sync.

Mailbox ID

Displays the ID for the synchronized mailbox as defined in ActiveSync.

Domain

Indicates whether the device connects via Integrated Sentry or Standalone Sentry.

For iOS 8, when a device is wiped, the device gets a new device ID. When the same device re-registers with Core and syncs with Exchange a new entry is created for the device in the ActiveSync page. The old entry for the device, which has old device ID, is blocked. The old entry in the ActiveSync page is not associated to the device when it re-registers.

Additional users on the Samsung native client display as unregistered in the ActiveSync page. To register the user, select the record, then click Link To to link to the corresponding device.

Filter options for the ActiveSync associations list

To filter the devices displayed in the ActiveSync page in the Admin Portal (Devices & Users > ActiveSync), select one of the criteria in the drop-down list for Show.

Figure 1. Filter options for the ActiveSync Associations list

Table 29.   Filter options for the ActiveSync Association list

Item

Description

Registered(linked)

Displays records that are associated with a registered device on Core.

Unregistered(unlinked)

Displays records that are not associated with a registered device on Core.

ActiveSync Policy Assigned

Displays associations with device to which an ActiveSync policy is manually assigned.

ActiveSync Action Applied in CY

Displays associations with device on which an ActiveSync action is applied in the calendar year.

Displaying more information for an ActiveSync association

To display more information for an ActiveSync association:

1. In the ActiveSync page, select an ActiveSync record.

The ActiveSync Details pane on the right displays additional information about the record.

2. Click the arrow for a category to display additional details.

Information available in the ActiveSync Details pane

The following table describes the information available in the ActiveSync details pane in the Admin Portal.

Table 30.   Information in the ActiveSync details pane

Label

Description

User

The user (email account) accessing the ActiveSync server.

Phone

The device number and model.

Device Details

Additional details received from the device.

Mailbox Details

The ActiveSync policy applied to the mailbox.

Redirect URL, if there is a redirect URL, to which the device is redirected.

Comment

Comments you may have added to this record.