IT Infrastructure blog

July 16, 2009

Disable ActiveSync WSS/UNC Access In Exchange 2007 Server

How can we secure Exchange 2007 server?  This settings we can consider for Exchange 2007 baseline security.

Here is the one option.

WSS and UNC provided file share access for mobile devices. If the functionality is not needed by mobile users then it should be disabled to reduced Exchanges attack surface and exposure to internal file shares.

How to implement

Open the Exchange Management Console, perform the following steps:

–   Microsoft Exchange  Organization Configuration –> Client Access –>Exchange ActiveSync Mailbox Policies

–   Right Click on <name> Policy, Select Properties

–   General Tab WSS/UNC Access Windows File Shares: Unchecked

Windows SharePoint Services : Unchecked



  • Open the Exchange Management Shell, perform the following:

Set-ActiveSyncMailboxPolicy –identity <name> -WSSAccessEnabled $false -UNCAccessEnabled $false




Leave a Comment »

No comments yet.

RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

Blog at

%d bloggers like this: