ActiveSync configuration for Windows devices

Configuring Exchange ActiveSync on Windows devices sync your emails, attachments, calendar, contacts, and tasks between the device and your email account server. Hexnode UEM enables you to configure ActiveSync remotely and push it to the Windows devices over-the-air.

Configure Exchange ActiveSync for Windows devices

To configure Exchange ActiveSync settings on your Windows devices using Hexnode UEM,

1. Login to your Hexnode UEM portal. Navigate to Policies and click on New Policy to create a new one or click on any policy to edit an existing one. Enter the Policy Name and Description in the provided fields.
2. Navigate to Windows > Accounts > Exchange ActiveSync. Click on Configure.
3. Configure Exchange ActiveSync settings.

Apply the ActiveSync configuration to Devices/Groups

There are two ways by which you can associate the policy with the devices in bulk.

If you haven’t saved the policy yet,

1. Navigate to Policy Targets.
2. Click on + Add Devices, search and select the required devices to which you need to apply the policy. Click OK.
3. Click on Save to apply the policies to the devices.

To associate the policies with a device group, select Device Groups from the left pane under “Policy Targets”, and follow the above instructions. Similarly, you can associate the policy to Users, User Groups, or Domains from the same pane.

If you’ve already saved the policy and taken to the page which displays the policy list,

1. Select the required policy.
2. Click on Manage, and select Associate Targets.
3. Select Device/ User/ Device Group/ User Group/ Domain.
4. Search and select the devices/ users/ device groups/ user groups/ domains to which you need to apply the policy and click Associate.

What happens at the device end?

The Exchange ActiveSync policy synchronizes the device with the exchange ActiveSync server. Also, the account gets listed on the device’s built-in Mail and Calendar apps.

The device settings page lists this account among other accounts used by email, calendar and contacts.

Frequently Asked Questions (FAQs)

1. What occurs if the password field remains empty during policy configuration?

If the password field is left blank, the account profile will be associated with the device, but the user will be prompted to provide credentials manually upon the initial launch of the Mail application.

2. How can Exchange servers be configured when the NetBIOS name differs from the domain name?

Administrators can utilize the %netbiosname% wildcard within the Domain field. This configuration is particularly effective in complex on-premises environments where the domain name required for authentication is distinct from the email suffix.

3. Will the sync timeframe affect the attachments?

Yes. If the timeframe is set to “Three Days,” only attachments received in the last three days will be readily available for search and download.

Troubleshooting

1. Account appears but shows “Not synced yet” for a long time.

Probable Cause:

The device cannot reach the mail server due to a typo or SSL being disabled when the server requires it.

Solution:

Double-check the Server Name. Ensure Use SSL is enabled if your server uses port 443 (standard for modern Exchange).

2. Contacts and Calendar are missing, but Email works.

Probable Cause:

The device’s local settings might have “Contacts” or “Calendar” toggled off for that account.

Solution:

Go to Settings > Accounts > Your accounts on the device, click the account > Manage > Change mailbox sync settings, and ensure all toggles are On.

Best Practices

• Enable SSL by Default: Almost all modern Exchange servers (including M365 and On-Premise 2016+) require encrypted connections. Always keep the Use SSL option enabled to prevent connection failures.
• Deploy Certificates First: If your Exchange server uses a private/internal SSL certificate, ensure you deploy the required Root Certificate to the device before the ActiveSync policy to avoid “Account Error” notifications.