Exchange settings

Enter brief text that identifies this group of Exchange settings.

Enter the address of the ActiveSync email server.

If you are using Standalone Sentry, do the following:

•Enter the Standalone Sentry’s address.

•If you are using Lotus Domino server 8.5.3.1 Upgrade Pack 1 for your ActiveSync server, set the server address to <Standalone Sentry’s fully qualified domain name>/traveler.

•If you are using a Lotus Domino server earlier than 8.5.3.1 Upgrade Pack 1, set the address to <Standalone Sentry fully qualified domain name>/servlet/traveler.

•If you are using load balancers, contact Ivanti Professional Services.

When using Integrated Sentry, set the server address to Microsoft Exchange Server’s address.

When using Sentry, you can do preliminary verification of your Exchange configuration choices for the ActiveSync User Name, ActiveSync User Email, and ActiveSync Password fields. To do so, first set the server address to the ActiveSync server. After you have verified that users can access their email using this Exchange configuration, change the server address to the appropriate Sentry address.

For more information about configuring Sentry, see the Ivanti Standalone Sentry Guide for EPMM.

Replaces the Use Standalone Sentry option. Use this option only under the direction of Ivanti Technical Support.

This check box only appears if you have configured a Google account with Ivanti EPMM.

When linking to Google Apps, select this option to use the Google Apps password to log in to the Google account you have configured to work with Ivanti EPMM. This password allows device users to access their Email, Contacts, and Calendar data on their managed devices.

When selected, Ivanti EPMM grays out the ActiveSync User Name and ActiveSync User Password.

This check box only appears if you have configured a Google account with Ivanti EPMM, as described in Synchronizing Google account data.

Specify the variable for the email address to be used with this Exchange configuration. You can specify any or all of the following variables $USERID$, $EMAIL$,$SAM_ACCOUNT_NAME$, $USER_CUSTOM1$, $USER_CUSTOM2$, $USER_CUSTOM3$, $USER_CUSTOM4$, $CUSTOM_DEVICE_Attributename$, CUSTOM_USER_Attributename$, or $NULL$.

$MANAGED_APPLE_ID$ can be used for Shared iPad devices and User Enrolled devices only.

You can also specify custom formats, such as $USERID$_US. Custom attribute variable substitutions are supported.

Typically, you use $EMAIL$ in this field; you cannot use $NULL$.

Select the Certificate Enrollment entry you created for supporting Exchange ActiveSync, if you are implementing certificate-based authentication.

When setting up email for devices with multi-user sign-in, the exchange profile must always use a user-based certificate. The user-based certificate will ensure secure access to email for all users. Using a device-based certificate can result in one user sending or receiving emails for another user. When configuring the user-based certificate, select the Proxy enabled and Store certificate keys on Ivanti EPMM options. This allows the user certificate and private key to be delivered each time they log in on the shared device.

This feature is not supported for iOS macOS .

Specify the maximum amount of email to synchronize each time by selecting an option from the drop-down list.

Select to enable S/MIME signing and encryption on devices running Android or iOS 9.3.3 or earlier.

You must select this option for the fields in the S/MIME Signing and S/MIME Encryption sections to apply to devices running iOS 9.3.3 or earlier.

Disabled by default. Select the check box to enable S/MIME signing. Applicable to iOS 10.3 or supported newer versions.

Applicable to iOS 12.0 or supported newer versions.

Select to allow the user to select the signing identity on the device.

S/MIME encryption applies only to iOS devices.

Select a certificate enrollment setting as an encryption identity. If you do not make a selection, then the device user will be prompted to select from the certificates that are already installed on the device. If the device has no certificate, then S/MIME encryption will not be functional on the device.

Related topics 

Certificate Enrollment settings.

iOS 12.0 or supported newer versions.

Select to allow the user to enable or disable S/MIME encryption by default in the device settings.

Not for iOSmacOS.

Select the preferred synchronization approach for peak times.

Specify whether to apply synchronization preferences while roaming.

Peak Time

Specify the beginning of the peak period for all peak days.

These features are not supported for Mac OS devices.

Specifies whether recently used email addresses can be synchronized.

This field is visible if Use OAuth for Authentication is enabled.

Enter the URL for the OAuth server.

Select a default audio service or app to be associated with the device user's accounts on the Exchange, CardDAV, LDAP, and Google servers. All calls initiated on the iOS device to contacts from contact lists stored on the server will use the selected audio service by default. This feature is supported on devices running iOS 10 or supported newer versions.

To enable communication service rules:

• Select Choose a default app to be used when calling contacts from this account. A drop-down list of apps displays.

• Select the drop-down list to select the default audio app or service.