Description

This payload can be used to configure a mobile device so it can connect to the company Exchange server.

Please note that an exchange payload can be made "general" and that there is no need for creating a payload for each individual employee.

'

Configuration

MANDATORY	CONFIGURATION	DESCRIPTION	EXAMPLE
Yes	Account Name	Name for the Exchange ActiveSync/Web Services Account. this is used for the name of the payload.	Mail
Yes	Domain and User name	This string specifies the user name for this Exchange account. If missing, the devices prompt for it during profile installation. Format is <domain>\<username> e.g. mydomain.com\$LoginName$	capasystems\$LoginName$
	Password	Optional. The password of the account. Use only with encrypted profiles
Yes	Email Address	Specifies the full email address for the account. The owners (primary user) email address must be injected upon delivery to the device. If not present in the payload, the device prompts for this string during profile installation. In OS X, this key is required.	$Email$
Yes	Exchange ActiveSync Host	Specifies the Exchange server hostname (or IP address). In OS X, this key is required.	mail.capasystems.com
	Use SSL	Specifies whether the Exchange server uses SSL for authentication.
	Past days of Mail to Sync	The number of past days of mail to synchronize. (set I days) No limit = 0. (Not documented in Profile Reference)	1 Month
		ONLY FOR IOS 5 OR NEWER
	Allow Move	Optional. Default false. If set to true, messages may not be moved out of this email account into another account. Also prevents forwarding or replying from a different account than the message was originated from.
	Use Only in Mail	Optional. Default false. If set to true, this account will not be available for sending mail in third party applications..
	Use S/MIME	Optional. Default false. If set to true, this account supports S/MIME.
		ONLY FOR IOS 6 OR NEWER
	Disallow Recent Address Syncing	If true, this account is excluded from address Recents syncing. This defaults to false.
		WINDOWS PHONE
	Sync internal	How often the device will sync with the Exchange server
	Sync Email	Whether to synchronize email between the device and the server
	Sync Calendar	Whether to synchronize the calendar between the device and the server
	Sync Contacts	Whether to synchronize contacts between the device and the server
	Sync Tasks	Whether to synchronize tasks between the device and the server
		ONLY FOR IOS 12 OR NEWER, OR macOS 10,14 OR NEWER
	Use OAuth	Specifies whether the connection should use OAuth for authentication. If enabled, a password should not be specified.
		USE CERTIFICATE AUTHENTICATION
	Use certificate/SCEP authentication	Specifies whether the connection should use certificate authentication for Exchange.

End-user action:

As a normal bulk deployment doesn't know the end-users password, it will be empty. On the mobile device, the user will normally be prompted for the password, when the mail client is opened or after the profile is installed. Then the End-user can enter the correct password.

iOS example:

Android example:

Samsung Knox device

Native Android device

Native Android devices do not allow Exchange Account profiles.

Browser not supported