Configuring Device Access Control Rules Parent topic

Note
Note
Device Access Control does not prevent users from creating new objects for mailbox components, even if the mailbox component access is blocked.
For example, the administrator configures Mail as Block. Mobile users can still create and send new email messages, but cannot receive messages from Exchange.

Procedure

  1. On the left navigation pane, click Device Access Control.
    The Device Access Control screen appears.
  2. Add or edit a rule:
    • For new rules, click Add.
    • For preexisting rules, click the Owner, OS, Version, or Email Client hyperlink.
    The Device Access Control: Add/Edit Policy screen appears.
  3. Select the following device owners:
    • Anyone: Select to include all devices owners.
    • Specific owners: Select from Active Directory users, groups, or ScanMail Mobile special groups.
  4. In the Operating Systems section, select any operating system or specific operating systems and/or versions.
    Note
    Note
    • Versions automatically add a wildcard (*) character to represent all subsequent minor versions or revisions if not typed by the administrator (for example, "1" represents "1.*" and "1.0" represents "1.0.*"). ScanMail Mobile supports versioning to the revision level (for example, "1.1.1").
    • When determining the versions to include in a policy or exception, the Exclude versions value overrides the From and To values (for example, From: 1.*, To: 2.5.2, Exclude versions: 2.5.* results in all versions starting with "2.5" being excluded from the policy or exception).
    • To select a single version of an operating system, select Specific version range and type the version number in both the From and To fields.
    • Use the Exclude versions field to exclude a version from the version range.
      For example, to add all Android versions from 3.0 to 4.1.2 but not version 3.2.1:
      1. In the From field, type 3.0.
      2. In the To field, type 4.1.2.
      3. In the Exclude versions field, type 3.2.1.
  5. In the Email Client section, select:
    • Any email client
    • Specific email client:
      • Built-in client: The prepackaged email client shipped with the device
      • TouchDown: A third-party ActiveSync email client with Exchange Server support
  6. In the Mailbox Components section, select to Allow or Block access to the following:
    • Mail
    • Calendar
    • Contacts
    • Tasks
      Note
      Note
      ScanMail Mobile uses the access granted to Tasks and applies the access rights to Notes for devices that are capable of syncing Notes with the Exchange server.
  7. Click Save.