To be A CyberMan: The Exchange Mobile Access Rules Troubleshooting - not able to see device on Quarantined Devices list

 

To be A CyberMan: The Exchange Mobile Access Rules Troubleshooting

0X00: Preview Knowlege

The company deceived only allows certain employees can have access to their email through mobile. 

we created the Device Access Rules on the Exchange admin center. We put all Andriod and iPhone Device into Quarantined that we can decide to block or allow. 

So when mobile devices try to connect to email, the user account will go to the Quarantined Devices list on the Exchange admin center, the IT department will grant access to certain employees.

0X01: Issue

Some employees were not able to log into Mobile email, got the notification from exchange says:

-------------------

Your device is temporarily blocked from synchronizing using Exchange ActiveSync until your administrator grants it access.

Your request is currently pending. Thank You,  IT Department

Your device is temporarily blocked from accessing content via Exchange ActiveSync because the device has been quarantined. You don't need to take any action. Content will automatically be downloaded as soon as access is granted by your administrator.

Information about your device:

Device model:	iPhonexxxx
Device type:	iPhone
Device ID:	xxxxxxxxxxxxxxxxxxxxxxxxxx
Device OS:	iOS xxx xxx
Device user agent:	Apple-iPhonexxxxxxxxxxx
Device IMEI:
Exchange ActiveSync version:	16.1
Device access state:	Quarantined
Device access state reason:	DeviceRul

----------------------

But we could not find these user accounts on the Quarantined Devices list.

0X02: Resolution

1. Run PowerShell as Administrator

2. Run the following commands:

    >Set-ExecutionPolicy RemoteSigned -Scope CurrentUser

    >Install-Module -Name ExchangeOnlineManagement

    >Import-Module ExchangeOnlineManagement

3. Run the following command to enter your 0365 admin credential:

    >Connect-ExchangeOnline -ShowBanner:$false

4. Run the following command to get users MobileDevice details

    >Get-MobileDevice -Mailbox "The User Account"

    E.X. >Get-MobileDevice -Mailbox "Test Test"
            >Get-MobileDevice -Mailbox "test.test"

We will see the all device details under the account. we need to find the blocked devices, copy the deviceID.

5. Run the following command to get enable the blocked device.

    >Set-CASMailbox –Identity test.test@test.com –ActiveSyncAllowedDeviceIDs {XXXXXXXXXXXXXXXXX}