ActiveSync associations
To display the users and the devices that connect to your ActiveSync server through Standalone, in Ivanti EPMM Admin Portal, go to Devices & Users > ActiveSync. Information displayed on this page is updated when Sentry syncs with Ivanti EPMM.
Each ActiveSync user (email account) on the device displays as a separate record in the ActiveSync page.
•If there are multiple email accounts on the device, then each User and Device association is listed in the ActiveSync Association view, but only the User registered on Ivanti EPMM for the device is listed in the All Devices view
•Typically, devices register with an Ivanti EPMM, which provides them with their email profile information. Once a device’s email profile is set up, it can access the ActiveSync server.
When a device accesses the ActiveSync server, Sentry tries to match the device to a registered device on Ivanti EPMM. Typically, a successful match is made between the record on the ActiveSync page to the corresponding registered device on Ivanti EPMM. However, for some devices, no match is made, sometimes because MDM and ActiveSync do not report the same device information. In these cases, the status for the record in the ActiveSync and AppTunnel pages shows as Unregistered (Unlinked).
When the record is matched to the corresponding device on Ivanti EPMM, the status for the record shows as Registered(Linked).
•When an ActiveSync device registers with Ivanti EPMM, you can manage it using Ivanti EPMM. For example, you can apply security policies to a registered device.
However, using the ActiveSync view, you can take some actions on ActiveSync devices regardless of whether they are registered.
Notably, you can allow or block access to the ActiveSync server, assign an ActiveSync policy, or wipe the device.
We recommend applying ActiveSync actions (Wipe, Assign Policy, and Revert Policy in the ActiveSync page) to devices other than iOS, Android, and Windows Phone 8 devices.
Actions applied on a record in the ActiveSync page only impact the user associated with the device in that record. If the user is also available on another device, the user on that device is not impacted.
The wipe behavior differs depending on the platform. For example, for any Android device, the Email+ client does not support ActiveSync Wipe.
The Apply Policy and Revert Policy actions are applied to the device, not to the user.
Additional users on the Samsung native client display as unregistered in the ActiveSync page. To register the user, select the record, then click Link To to link to the corresponding device.
•ActiveSync devices that are registered, or are pending registration, automatically appear on the Devices view.
A device in the Users & Devices > Devices view is not necessarily shown in the ActiveSync view. For example, with Standalone Sentry, a registered device that has not accessed the ActiveSync server appears only in the Devices view, but not in the ActiveSync view.
If an ActiveSync device on the Devices view has an Active status, you can take all the actions on the device that the Devices view provides.
Sync interval with Ivanti EPMM
The default sync interval for Standalone Sentry is 12 hours.
For Integrated Sentry, the information displayed on this page is updated after a successful periodic differential sync. The default interval for a periodic differential sync is 4 hours. You can configure the periodic differential sync in the Ivanti EPMM Admin Portal, Services > Sentry > Preferences. However, changes to the Last Sync Time for a record is not picked up in a periodic differential sync if it is the only field that was changed. For Integrated Sentry, the Last Sync Time, if it is not updated in a periodic differential sync, is updated after a full batched-sync. The default interval for a full batched-sync is one week.
Information displayed for ActiveSync associations
The following table describes the information displayed for ActiveSync associations in the Admin Portal in Devices & Users > ActiveSync.
|
Column |
Description |
|
DeviceID |
The DeviceID for the device. |
|
User |
The device user. |
|
Number |
The device number. |
|
Phone |
The device model. |
|
OS |
The device platform. |
|
Status |
Indicates whether the device is registered with Ivanti. •When a record is associated with a registered device on Ivanti EPMM, the status displays as Registered(Linked). •When a record is not associated with a registered device on Ivanti EPMM, the status displays as Unregistered (Unlinked). Use the Link To feature to link the record to the corresponding registered device. |
|
Sync Status |
Indicates whether ActiveSync access for the device is Allowed or Blocked. |
|
First Sync Time |
For Integrated Sentry, the First Sync Time displays the time stamp for the first successful synchronization of data from the Exchange server. For Ivanti Standalone Sentry, the First Sync Time displays the time stamp when the device is first reported by Sentry to Ivanti EPMM as a new device. |
|
Last Sync Time |
Indicates the last time the device tried to access the ActiveSync server. The Last Sync Time does not indicate whether access to the ActiveSync server was successful or not. Therefore, the last sync time on the ActiveSync server may be different than what is recorded by Standalone Sentry. For Standalone Sentry, the Last Sync Time is updated only if Standalone Sentry detects traffic between the device and the ActiveSync server. For Integrated Sentry, the Last Sync Time is updated only after a full batched sync. |
|
Mailbox ID |
Displays the ID for the synchronized mailbox as defined in ActiveSync. |
|
Domain |
Indicates whether the device connects via Integrated Sentry or Standalone Sentry. |
For iOS 8, when a device is wiped, the device gets a new device ID. When the same device re-registers with Ivanti EPMM and syncs with Exchange a new entry is created for the device in the ActiveSync page. The old entry for the device, which has old device ID, is blocked. The old entry in the ActiveSync page is not associated to the device when it re-registers.
Additional users on the Samsung native client display as unregistered in the ActiveSync page. To register the user, select the record, then click Link To to link to the corresponding device.
Filter options for the ActiveSync associations list
To filter the devices displayed in the ActiveSync page in the Admin Portal (Devices & Users > ActiveSync), select one of the criteria in the drop-down list for Show.
Figure 1. Filter options for the ActiveSync Associations list
|
Item |
Description |
|
Registered(linked) |
Displays records that are associated with a registered device on Ivanti EPMM. |
|
Unregistered(unlinked) |
Displays records that are not associated with a registered device on Ivanti EPMM. |
|
ActiveSync Policy Assigned |
Displays associations with device to which an ActiveSync policy is manually assigned. |
|
ActiveSync Action Applied in CY |
Displays associations with device on which an ActiveSync action is applied in the calendar year. |
Displaying more information for an ActiveSync association
To display more information for an ActiveSync association:
| 1. | In the ActiveSync page, select an ActiveSync record. |
The ActiveSync Details pane on the right displays additional information about the record.
| 2. | Click the arrow for a category to display additional details. |
Information available in the ActiveSync Details pane
The following table describes the information available in the ActiveSync details pane in the Admin Portal.
|
Label |
Description |
|
User |
The user (email account) accessing the ActiveSync server. |
|
Phone |
The device number and model. |
|
Device Details |
Additional details received from the device. |
|
Mailbox Details |
The ActiveSync policy applied to the mailbox. Redirect URL, if there is a redirect URL, to which the device is redirected. |
|
Comment |
Comments you may have added to this record. |