Comments on The EXPTA {blog}: How to Securely Deploy iPhones with Exchange Activ...

If you need to access EAS over the ASA VPN, they w...

2011-12-12T15:36:29.080-08:00

If you need to access EAS over the ASA VPN, they will still need to do that. The solution presented would still not change.

Thanks Jeff for the insightful step-by-step guide....

2011-12-12T11:49:18.032-08:00

Thanks Jeff for the insightful step-by-step guide. Was wondering if you had any thoughts on how this might change if we used Cisco ASA SSL VPN with two factor authenication?

EAS does not offer any mechanism for users to chan...

2011-10-12T08:16:23.716-07:00

EAS does not offer any mechanism for users to change their expired password or unlock their account. The user will need to change their expired password using normal channels (logging in from a domain joined workstation or using OWA, assuming it's configured to do so).

Excellent Stuff. My Q. How do you deal with 90 d...

2011-10-12T06:47:51.046-07:00

Excellent Stuff. My Q.

How do you deal with 90 day password changes in AD and the iphone user is locked out. Is there a technical solve for this?

Your document is very clear and detailed, however ...

2011-06-23T11:18:02.284-07:00

Your document is very clear and detailed, however we cant get auth to work. I think we are missing something in the exchange server setup or maybe ad. Whenever we turn on the "require cert auth" in exchange, our phones get error that cant connect to mail server. The cert generation part is different too, i dont see an option to put in the company name and most of that other stuff. any ideas?

Loved the article but was wondering there is a way...

2011-04-04T13:14:55.712-07:00

Loved the article but was wondering there is a way to provide the web page via isa server?

Now when iPhone 4.0 has been released I tested all...

2010-06-30T14:15:59.568-07:00

Now when iPhone 4.0 has been released I tested all the ActiveSync policies to see which ones that worked. Here's a summary: http://www.sysadminlab.net/activesync/iphone-os-4-and-exchange-activesync-policies-what-really-works

Highly interesting topic Jeff - and you're rig...

2010-02-17T03:57:54.153-08:00

Highly interesting topic Jeff - and you're right; Apple isn't anywhere near providing actual documentation. (Their guide should almost be labeled foilware...)
I covered parts of SCEP (for device certificates) and the over-the-air provisioning process over at my blog (http://mobilitydojo.net/2010/01/20/sinking-our-teeth-into-scep/), but I didn't cover the entire scenario like how to setup the CA, and configuring ISA and/or Exchange. From your description it looks like you might be looking at cradling the iPhones and using iPhone Configuration Utility, or accessing the certsrv site via WiFi, am I right?
Anyways, looking forward to proper documentation of how this should be done :)

Hi Jeff This sounds good, as it is similar to a re...

2010-02-14T13:57:37.933-08:00

Hi Jeff
This sounds good, as it is similar to a requirement I have. My exchange server is on a Windows 2003 SBS, but access is via a Cyberguard firewall. What must I do to enable my iPhone to get past the firewall to the server? I sit just port forwarding, and if so, which port? 445?
Rod Rocket