Configure Authentication for Exchange ActiveSync
Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
You can use the EMC or the Shell to configure Basic authentication for Microsoft Exchange ActiveSync. By default, when you install Microsoft Exchange Server 2010, Exchange ActiveSync is configured to use Basic authentication with Secure Sockets Layer (SSL) encryption. Other standard authentication methods include Digest authentication and Integrated Windows authentication. If you must return Exchange ActiveSync to Basic authentication, you can use the procedures in this topic.
If you configure Basic authentication for Exchange ActiveSync, we recommend that you require SSL for communications between mobile phones and Exchange ActiveSync. For more information about how to enable SSL, see Configure SSL for Exchange ActiveSync.
Looking for other management tasks related to Exchange ActiveSync? Check out Managing Exchange ActiveSync.
Use the EMC to configure Basic authentication for Exchange ActiveSync
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Exchange ActiveSync Security settings" entry in the Client Access Permissions topic.
In the console tree, navigate to Server Configuration > Client Access.
In the result pane, click the Exchange ActiveSync tab.
Select the Microsoft-Server-ActiveSync virtual directory.
In the action pane, under Microsoft-Server-ActiveSync, click Properties.
Click the Authentication tab.
Select the Basic authentication (password is sent in clear text) check box.
Click Apply to save your changes or click OK to save your changes and close the Microsoft-Server-ActiveSync properties dialog box.
Use the Shell to configure Basic authentication for Exchange ActiveSync
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Exchange ActiveSync server settings" entry in the Client Access Permissions topic.
This example configures the Exchange ActiveSync virtual directory for basic authentication.
Set-ActiveSyncVirtualDirectory -Identity "ExchSrvr\Microsoft-Server-ActiveSync (Default Web Site)" -BasicAuthEnabled:$true
For more information about syntax and parameters, see Set-ActiveSyncVirtualDirectory.
© 2010 Microsoft Corporation. All rights reserved.