[Index]

Model: device/exchangehybrid/MobileDeviceMailboxPolicy

Model Details

Title Description Details
AdminDisplayName
  • Field Name: AdminDisplayName
  • Type: String
UNCAccessEnabled The UNCAccessEnabled parameter specifies whether access to Microsoft Windows file shares is enabled from the mobile device. In on-premises Exchange 2013 organizations, access to specific shares is configured on the Exchange ActiveSync virtual directory.
  • Field Name: UNCAccessEnabled
  • Type: Boolean
AllowPOPIMAPEmail The AllowPOPIMAPEmail parameter specifies whether the user can configure a POP3 or IMAP4 email account on the mobile device. Valid input for this parameter is $true or $false. The default value is $true. This parameter doesn't control access by third-party email programs.
  • Field Name: AllowPOPIMAPEmail
  • Type: Boolean
AllowDesktopSync The AllowDesktopSync parameter specifies whether the mobile device can synchronize with a desktop computer through a cable. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowDesktopSync
  • Type: Boolean
PasswordHistory The PasswordHistory parameter specifies the number of unique new passwords that need to be created on the mobile device before an old password can be reused. You can enter any number from 0 through 50. The default value is 0.
  • Field Name: PasswordHistory
  • Type: Integer
AllowBrowser The AllowBrowser parameter specifies whether Microsoft Pocket Internet Explorer is allowed on the mobile device. Valid input for this parameter is $true or $false. The default value is $true. This parameter doesn't affect third-party browsers.
  • Field Name: AllowBrowser
  • Type: Boolean
RequireEncryptedSMIMEMessages The RequireEncryptedSMIMEMessages parameter specifies whether the mobile device must send encrypted S/MIME messages. Valid input for this parameter is $true or $false. The default value is $false.
  • Field Name: RequireEncryptedSMIMEMessages
  • Type: Boolean
DeviceEncryptionEnabled The DeviceEncryptionEnabled parameter specifies whether encryption is enabled on the mobile device. Valid input for this parameter is $true or $false. The default value is $false. When this parameter is set to $true, device encryption is enabled on the mobile device.
  • Field Name: DeviceEncryptionEnabled
  • Type: Boolean
AllowRemoteDesktop The AllowRemoteDesktop parameter specifies whether the mobile device can initiate a remote desktop connection. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowRemoteDesktop
  • Type: Boolean
RequireStorageCardEncryption The RequireStorageCardEncryption parameter specifies whether storage card encryption is required on the mobile device. Valid input for this parameter is $true or $false. The default value is $false. Setting this parameter to $true also sets the DeviceEncryptionEnabled parameter to $true.
  • Field Name: RequireStorageCardEncryption
  • Type: Boolean
DevicePolicyRefreshInterval The DevicePolicyRefreshInterval parameter specifies how often the policy is sent to the mobile device. To specify a value, enter it as a time span: dd.hh:mm:ss where d = days, h = hours, m = minutes, and s = seconds. The default value is Unlimited.
  • Field Name: DevicePolicyRefreshInterval
  • Type: String
Id
  • Field Name: Id
  • Type: String
AllowMicrosoftPushNotifications This parameter is available only in the cloud-based service. The AllowMicrosoftPushNotifications parameter specifies whether push notifications are enabled on the mobile device. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowMicrosoftPushNotifications
  • Type: Boolean
AllowConsumerEmail The AllowConsumerEmail parameter specifies whether the user can configure a personal email account on the mobile device. Valid input for this parameter is $true or $false. The default value is $true. This parameter doesn't control access to email accounts using third-party mobile device email programs.
  • Field Name: AllowConsumerEmail
  • Type: Boolean
AllowUnsignedApplications The AllowUnsignedApplications parameter specifies whether unsigned applications can be installed on the mobile device. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowUnsignedApplications
  • Type: Boolean
DomainController This parameter is available only in on-premises Exchange 2013. The DomainController parameter specifies the fully qualified domain name (FQDN) of the domain controller that writes this configuration change to Active Directory.
  • Field Name: DomainController
  • Type: String
WSSAccessEnabled The WSSAccessEnabled parameter specifies whether access to Microsoft Windows SharePoint Services is enabled from the mobile device. In on-premises Exchange 2013 organizations, access to specific shares is configured on the Exchange ActiveSync virtual directory.
  • Field Name: WSSAccessEnabled
  • Type: Boolean
ObjectClass
  • Field Name: ObjectClass.[n]
  • Type: Array
MobileOTAUpdateMode This parameter is reserved for internal Microsoft use.
  • Field Name: MobileOTAUpdateMode
  • Type: String
PasswordRecoveryEnabled The PasswordRecoveryEnabled parameter specifies whether the recovery password for the mobile device is stored in Exchange. Valid input for this parameter is $true or $false. The default value is $false. When set to $true, this parameter enables you to store the recovery password for the mobile device in Exchange. The recovery password can be viewed from Microsoft Outlook Web App or the Exchange admin center.
  • Field Name: PasswordRecoveryEnabled
  • Type: Boolean
PSComputerName
  • Field Name: PSComputerName
  • Type: String
AllowIrDA The AllowIrDA parameter specifies whether infrared connections are allowed to the mobile device. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowIrDA
  • Type: Boolean
IrmEnabled The IrmEnabled parameter specifies whether Information Rights Management (IRM) is enabled for the mobile device. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: IrmEnabled
  • Type: Boolean
AllowInternetSharing The AllowInternetSharing parameter specifies whether the mobile device can be used as a modem to connect a computer to the Internet. This process is also known as tethering. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowInternetSharing
  • Type: Boolean
AlphanumericPasswordRequired The AlphanumericPasswordRequired parameter specifies whether the password for the mobile device must be alphanumeric. Valid input for this parameter is $true or $false. The default value is $false.
  • Field Name: AlphanumericPasswordRequired
  • Type: Boolean
AllowWiFi The AllowWiFi parameter specifies whether wireless Internet access is allowed on the mobile device. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowWiFi
  • Type: Boolean
RequireSignedSMIMEAlgorithm The RequireSignedSMIMEAlgorithm parameter specifies the algorithm that's used to sign S/MIME messages on the mobile device. Valid values for this parameter are SHA1 or MD5. The default value is SHA1.
  • Field Name: RequireSignedSMIMEAlgorithm
  • Type: String
IsDefault The IsDefault parameter specifies whether this policy is the default mobile device mailbox policy. Valid input for this parameter is $true or $false. The default value for the built-in mobile device mailbox policy named Default is $true. The default value for new mobile device mailbox policies that you create is $false. There can be only one default policy. If another policy is currently set as the default, and you set this parameter to $true, this policy becomes the default policy. The value of this parameter on the other policy is automatically changed to $false, and that policy is no longer the default policy.
  • Field Name: IsDefault
  • Type: Boolean
AllowStorageCard The AllowStorageCard parameter specifies whether the mobile device can access information stored on a storage card. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowStorageCard
  • Type: Boolean
MaxEmailHTMLBodyTruncationSize The MaxEmailHTMLBodyTruncationSize parameter specifies the maximum size at which HTML-formatted email messages are truncated when synchronized to the mobile device. Valid input for this parameter is an integer between 0 and 2147483647 (Int32) or the value Unlimited. The default value is Unlimited. Unqualified values are treated as bytes. You can qualify the value with KB (kilobytes), MB (megabytes) or GB (gigabytes). For example, to set the limit to 4 kilobytes, enter the value 4KB or 4096.
  • Field Name: MaxEmailHTMLBodyTruncationSize
  • Type: String
RequireSignedSMIMEMessages The RequireSignedSMIMEMessages parameter specifies whether the mobile device must send signed S/MIME messages. Valid input for this parameter is $true or $false. The default value is $false.
  • Field Name: RequireSignedSMIMEMessages
  • Type: Boolean
RequireEncryptionSMIMEAlgorithm The RequireEncryptionSMIMEAlgorithm parameter specifies the algorithm that's required to encrypt S/MIME messages on a mobile device. The valid values for this parameter are: DES TripleDES RC240bit RC264bit RC2128bit The default value is TripleDES.
  • Field Name: RequireEncryptionSMIMEAlgorithm
  • Type: String
DistinguishedName
  • Field Name: DistinguishedName
  • Type: String
MaxPasswordFailedAttempts The MaxPasswordFailedAttempts parameter specifies the number of attempts a user can make to enter the correct password for the mobile device. You can enter any number from 4 through 16 or the value Unlimited. The default value is Unlimited.
  • Field Name: MaxPasswordFailedAttempts
  • Type: String
AllowHTMLEmail The AllowHTMLEmail parameter specifies whether HTML-formatted email is enabled on the mobile device. Valid input for this parameter is $true or $false. The default value is $true. If set to $false, all email is converted to plain text before synchronization occurs.
  • Field Name: AllowHTMLEmail
  • Type: Boolean
OriginatingServer
  • Field Name: OriginatingServer
  • Type: String
Name * The Name parameter specifies the name of the mobile device mailbox policy. You can use any value that uniquely identifies the policy. For example: Name Distinguished name (DN) GUID The name of the built-in mobile device mailbox policy is Default.
  • Field Name: Name
  • Type: String
UnapprovedInROMApplicationList The UnapprovedInROMApplicationList parameter specifies a list of applications that can't be run in ROM on the mobile device.
  • Field Name: UnapprovedInROMApplicationList.[n]
  • Type: Array
MinPasswordComplexCharacters The MinPasswordComplexCharacters parameter specifies the minimum number of complex characters required in a mobile device password. A complex character isn't a letter. You can enter any number from 1 through 4. The default value is 1.
  • Field Name: MinPasswordComplexCharacters
  • Type: Integer
WhenCreatedUTC
  • Field Name: WhenCreatedUTC
  • Type: String
  • Format: date-time
MaxInactivityTimeLock The MaxInactivityTimeLock parameter specifies the length of time that the mobile device can be inactive before the password is required to reactivate it. This parameter accepts the following values: Timespan hh:mm:ss, where hh = hours, mm = minutes and ss= seconds. The valid input range is 00:01:00 to 01:00:00 (one minute to one hour). The value Unlimited. The default value is Unlimited.
  • Field Name: MaxInactivityTimeLock
  • Type: String
ApprovedApplicationList The ApprovedApplicationList parameter specifies a configured list of approved applications for the device.
  • Field Name: ApprovedApplicationList
  • Type: String
WhenCreated
  • Field Name: WhenCreated
  • Type: String
  • Format: date-time
AllowUnsignedInstallationPackages The AllowUnsignedInstallationPackages parameter specifies whether unsigned installation packages are allowed to run on the mobile device. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowUnsignedInstallationPackages
  • Type: Boolean
Organization This parameter is reserved for internal Microsoft use.
  • Field Name: Organization
  • Type: String
ExchangeVersion
  • Field Name: ExchangeVersion
  • Type: String
MaxEmailAgeFilter The MaxEmailAgeFilter parameter specifies the maximum number of days of email items to synchronize to the mobile device. Valid values for this parameter are: All OneDay ThreeDays OneWeek TwoWeeks OneMonth The default value is All.
  • Field Name: MaxEmailAgeFilter
  • Type: String
RunspaceId
  • Field Name: RunspaceId
  • Type: String
AllowNonProvisionableDevices The AllowNonProvisionableDevices parameter specifies whether all mobile devices can synchronize with Exchange. Valid input for this parameter is $true or $false. The default value is $true. When set to $true, this parameter enables all mobile devices to synchronize with Exchange, regardless of whether the device can enforce all settings that are defined by the policy. This also includes mobile devices managed by a separate device management system. When set to $false, this parameter blocks mobile devices that aren't provisioned from synchronizing with Exchange.
  • Field Name: AllowNonProvisionableDevices
  • Type: Boolean
RequireManualSyncWhenRoaming The RequireManualSyncWhenRoaming parameter specifies whether the mobile device must synchronize manually while roaming. Valid input for this parameter is $true or $false. The default value is $false.
  • Field Name: RequireManualSyncWhenRoaming
  • Type: Boolean
AttachmentsEnabled The AttachmentsEnabled parameter specifies whether attachments can be downloaded on the mobile device. Valid input for this parameter is $true or $false. The default value is $true. When set to $false, this parameter blocks the user from downloading attachments on the mobile device.
  • Field Name: AttachmentsEnabled
  • Type: Boolean
MaxEmailBodyTruncationSize The MaxEmailBodyTruncationSize parameter specifies the maximum size at which email messages are truncated when synchronized to the mobile device. Valid input for this parameter is an integer between 0 and 2147483647 (Int32) or the value Unlimited. The default value is Unlimited. Unqualified values are treated as bytes. You can qualify the value with KB (kilobytes), MB (megabytes) or GB (gigabytes). For example, to set the limit to 4 kilobytes, enter the value 4KB or 4096.
  • Field Name: MaxEmailBodyTruncationSize
  • Type: String
Guid
  • Field Name: Guid
  • Type: String
MinPasswordLength The MinPasswordLength parameter specifies the minimum number of characters in the mobile device password. You can enter any number from 1 through 16 or the value $null. The default value is blank. The maximum password length is 16 characters.
  • Field Name: MinPasswordLength
  • Type: Integer
AllowBluetooth The AllowBluetooth parameter specifies whether the Bluetooth capabilities of the mobile device are allowed. The available options are Disable, HandsfreeOnly, and Allow. The default value is Allow.
  • Field Name: AllowBluetooth
  • Type: String
PasswordExpiration The PasswordExpiration parameter specifies how long a password can be used on a mobile device before the user is forced to change the password. This parameter accepts the following values: Timespan ddd.hh:mm:ss, where ddd = days, hh = hours, mm = minutes and ss= seconds. The valid input range is 1.00:00:00 to 730.00:00:00 (one day to two years). The value Unlimited. The default value is Unlimited.
  • Field Name: PasswordExpiration
  • Type: String
ObjectCategory
  • Field Name: ObjectCategory
  • Type: String
IsValid
  • Field Name: IsValid
  • Type: Boolean
OrganizationId
  • Field Name: OrganizationId
  • Type: String
RequireDeviceEncryption The RequireDeviceEncryption parameter specifies whether encryption is required on the mobile device. Valid input for this parameter is $true or $false. The default value is $false.
  • Field Name: RequireDeviceEncryption
  • Type: Boolean
AllowSMIMESoftCerts The AllowSMIMESoftCerts parameter specifies whether S/MIME software certificates are allowed on the mobile device. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowSMIMESoftCerts
  • Type: Boolean
AllowSimplePassword The AllowSimplePassword parameter specifies whether a simple password is allowed on the mobile device. A simple password is a password that has a specific pattern, such as 1111 or 1234. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowSimplePassword
  • Type: Boolean
PasswordEnabled The PasswordEnabled parameter specifies whether a password is required on the mobile device. Valid input for this parameter is $true or $false. The default value is $false. When set to $true, this parameter requires the user to set a password on the mobile device.
  • Field Name: PasswordEnabled
  • Type: Boolean
WhenChanged
  • Field Name: WhenChanged
  • Type: String
  • Format: date-time
WhenChangedUTC
  • Field Name: WhenChangedUTC
  • Type: String
  • Format: date-time
AllowApplePushNotifications This parameter is available only in the cloud-based service. The AllowApplePushNotifications parameter specifies whether push notifications are allowed for Apple mobile devices. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowApplePushNotifications
  • Type: Boolean
MaxCalendarAgeFilter The MaxCalendarAgeFilter parameter specifies the maximum range of calendar days that can be synchronized to the mobile device. Valid values for this parameter are: All TwoWeeks OneMonth ThreeMonths SixMonths The default value is All.
  • Field Name: MaxCalendarAgeFilter
  • Type: String
AllowTextMessaging The AllowTextMessaging parameter specifies whether text messaging is allowed from the mobile device. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowTextMessaging
  • Type: Boolean
Identity The Identity parameter specifies the policy name.
  • Field Name: Identity
  • Type: String
AllowGooglePushNotifications This parameter is available only in the cloud-based service. The AllowGooglePushNotifications parameter controls whether the user can receive push notifications from Google for OWA for Devices. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowGooglePushNotifications
  • Type: Boolean
AllowExternalDeviceManagement The AllowExternalDeviceManagement parameter specifies whether an external device management program is allowed to manage the mobile device. Valid input for this parameter is $true or $false. The default value is $false.
  • Field Name: AllowExternalDeviceManagement
  • Type: Boolean
AllowMobileOTAUpdate The AllowMobileOTAUpdate parameter specifies whether the policy can be sent to the mobile device over a cellular data connection. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowMobileOTAUpdate
  • Type: Boolean
AllowSMIMEEncryptionAlgorithmNegotiation The AllowSMIMEEncryptionAlgorithmNegotiation parameter specifies whether the messaging application on the mobile device can negotiate the encryption algorithm if a recipient's certificate doesn't support the specified encryption algorithm. Valid values for this parameter are: AllowAnyAlgorithmNegotiation BlockNegotiation OnlyStrongAlgorithmNegotiation The default value is AllowAnyAlgorithmNegotiation.
  • Field Name: AllowSMIMEEncryptionAlgorithmNegotiation
  • Type: String
ObjectState
  • Field Name: ObjectState
  • Type: String
AllowCamera The AllowCamera parameter specifies whether the mobile device's camera is allowed. Valid input for this parameter is $true or $false. The default value is $true.
  • Field Name: AllowCamera
  • Type: Boolean
PSShowComputerName
  • Field Name: PSShowComputerName
  • Type: Boolean
MaxAttachmentSize The MaxAttachmentSize parameter specifies the maximum size of attachments that can be downloaded to the mobile device. Valid input for this parameter is a size value between 0 and 2147482624 bytes (approximately 2 GB), or the value Unlimited. The default value is Unlimited. Unqualified values are treated as bytes. You can qualify the value with KB (kilobytes), MB (megabytes) or GB (gigabytes). For example, to set the limit to 4 kilobytes, enter the value 4096 or 4KB. The maximum value is 1024 bytes (one kilobyte) less than two gigabytes (2*1024^3), so these are the maximum qualified values you can use with this parameter. 2097151KB 2047.999024MB 1.999999047GB
  • Field Name: MaxAttachmentSize
  • Type: String
API reference for device/exchangehybrid/MobileDeviceMailboxPolicy