configure os x mail with exchange server

#Configure os x mail with exchange server upgrade#
#Configure os x mail with exchange server password#

The last is a critical piece of information. This data tells us more about the kind of devices used, their operating system, and when they first synchronized. PowerShell can extract data about devices known to Exchange to better understand the usage of iOS devices. To allow for perform basic mobile device management, Exchange registers mobile devices used to connect to mailboxes. To allow for perform basic mobile device Sign in data tells you who uses EAS (or other legacy protocols) to connect. We can expand the data by interrogating Exchange to discover the characteristics of the iOS devices used to connect. Sign in logs are informative about who uses EAS (or other legacy protocols) to connect. Device Partnerships and Registered Devices This is likely caused by the use of a web page to gather consent for access. It’s possible that you might see the first sign-in after changing authentication modes logged as a browser. One way of identifying problem connections is to filter the Azure AD sign in log to find records of connections made using Exchange ActiveSync (Figure 2).įigure 3: Details of an Azure AD sign-in record for an iOS device using modern authentication No one wants to be handling a bunch of calls from annoyed users who suddenly discover that they can’t get to their mailbox. However, if your organization currently allows basic authentication for EAS, it’s a good idea to identify Apple devices using EAS to understand if some action is required before Microsoft flips the switch in October 2022. If either scenario applies, you don’t need to worry because clients using EAS connections must use modern authentication. Some organizations block basic authentication using Azure AD conditional access policies and Microsoft has already blocked basic authentication for connection protocols in some tenants. Likewise, if you buy a new iOS device and restore your settings on that device from an iCloud backup of the old device, the restore preserves the mail app configuration.

#Configure os x mail with exchange server upgrade#

It’s not enough to upgrade to the latest version of iOS as this action preserves the mail app configuration. When the mail app running on iOS 12 or above adds an Exchange account, it detects that modern authentication is available and will use it. To move to modern authentication, users must remove their Exchange account from the mail app configuration and re-add Exchange to the mail app. This is logical because basic authentication was the only connection possible at the time. In a nutshell, the correct position is that if an account for Exchange was created on an iOS or iPadOS email app before Apple added support for OAuth (iOS 12), the connection uses basic authentication. Everything seems sunny, until you learn that some of the information presented in the documentation is incorrect (Apple has been informed and is apparently in the process of refreshing their content. The good thing is that Apple has done the work to make sure that the iOS mail client (and its MacOS counterpart) can use modern authentication to connect to Exchange Online. Checking Apple’s documentation, we learn that Apple has made arrangements to upgrade devices running iOS 14 and iPadOS 14 to use modern authentication automatically (Figure 1).įigure 1: Apple documentation about OAuth support in iOS for Exchange Online The Apple mail app uses EAS to connect to Exchange, and EAS is one of the protocols that won’t support basic authentication after October 2022. It’s a better mail client for Exchange Online as it supports features like delegated access, sensitivity labels, and shared mailboxes. Despite being an iPhone user, I prefer Outlook mobile. The Apple iOS mail app is a popular email client for both Exchange Server and Exchange Online.

#Configure os x mail with exchange server password#

The report also notes that “ Office 365 accounts with multifactor authentication (MFA) enabled are resilient against password sprays.” Apple iOS Mail App and Modern Authentication The continuing activities of groups using password spray attacks against Office 365 tenants such as DEV-0343 (reported by the M i crosoft Threat Intelligence Center on October 11) underline the real threat which exists for accounts when basic authentication is supported for protocols like Exchange ActiveSync. It’s a big project which will require upgrading email clients to use modern authentication to connect to mailboxes.

Ongoing Threat Underlines Need to Remove Basic Authentication from Exchange Onlineīy now, the realization that Microsoft will remove basic authentication for many email connection protocols in October 2022 should have sunk into the minds of everyone involved in running Exchange Online. A Point on the Road to Modern Authentication.Device Partnerships and Registered Devices.Apple iOS Mail App and Modern Authentication.

Ongoing Threat Underlines Need to Remove Basic Authentication from Exchange Online.