Skip to content

Exchange Payload

This payload can be used to configure a mobile device so it can connect to the company Exchange server.

Please note that an exchange payload can be made “general” and that there is no need for creating a payload for each individual employee.

MANDATORY CONFIGURATION DESCRIPTION EXAMPLE
Yes Account Name Name for the Exchange ActiveSync/Web Services Account. this is used for the name of the payload. Mail
Yes Domain and User name This string specifies the user name for this Exchange account. If missing, the devices prompt for it during profile installation.     Format is <domain>\<username> e.g. mydomain.com$LoginName$ capasystems$LoginName$
Password Optional. The password of the account. Use only with encrypted profiles
Yes Email Address Specifies the full email address for the account. The owners (primary user) email address must be injected upon delivery to the device. If not present in the payload, the device prompts for this string during profile installation. In OS X, this key is required. $Email$
Yes Exchange ActiveSync Host Specifies the Exchange server hostname (or IP address). In OS X, this key is required. mail.capasystems.com
Use SSL Specifies whether the Exchange server uses SSL for authentication.
Past days of Mail to Sync The number of past days of mail to synchronize. (set I days) No limit = 0. (Not documented in Profile Reference) 1 Month
ONLY FOR IOS 5 OR NEWER
Allow Move Optional. Default false. If set to true, messages may not be moved out of this email account into another account. Also prevents forwarding or replying from a different account than the message was originated from.
Use Only in Mail Optional. Default false. If set to true, this account will not be available for sending mail in third party applications..
Use S/MIME Optional. Default false. If set to true, this account supports S/MIME.
ONLY FOR IOS 6 OR NEWER
Disallow Recent Address Syncing If true, this account is excluded from address Recents syncing. This defaults to false.
WINDOWS PHONE
Sync internal How often the device will sync with the Exchange server
Sync Email Whether to synchronize email between the device and the server
Sync Calendar Whether to synchronize the calendar between the device and the server
Sync Contacts Whether to synchronize contacts between the device and the server
Sync Tasks Whether to synchronize tasks between the device and the server
ONLY FOR IOS 12 OR NEWER, OR macOS 10,14 OR NEWER
Use OAuth Specifies whether the connection should use OAuth for authentication. If enabled, a password should not be specified.
USE CERTIFICATE AUTHENTICATION
Use certificate/SCEP authentication Specifies whether the connection should use certificate authentication for Exchange.

As a normal bulk deployment doesn’t know the end-users password, it will be empty. On the mobile device, the user will normally be prompted for the password, when the mail client is opened or after the profile is installed. Then the End-user can enter the correct password.

Samsung Knox device Native Android device
Native Android devices do not allow Exchange Account profiles.