What's New for Exchange ActiveSync Mailbox Policies in Exchange Server 2007 SP1?
Exchange 2007 Service Pack 1 is coming soon to a server near you. As you've read here before, there are a lot of new mobility features coming in Service Pack 1 and I hope I can provide you with some of the juicy details you've been waiting for.
Note As wonderful as these new features are, currently we do not know of any mobile phones that currently support them. We're pretty sure that eventually, you'll be able to get a device that supports them, but for now, just keep watching this blog for updates.
Here's some of what you can look forward to.
Default Exchange ActiveSync Mailbox Policies
Exchange 2007 shipped with a wide variety of Exchange ActiveSync mailbox policy settings. You could enforce a password, require that password be a certain length, prohibit the downloading of attachments, prevent users from reusing past passwords, and specify whether users could access information stored in Windows SharePoint Services document libraries. However, all of these policy settings don't do much good unless you assign your users to a policy. In Exchange 2007 RTM, all users had to be explicitly assigned to a policy. You could do this one at a time, or use an Exchange PowerShell one-liner to do it for you. In case you were wondering, here's the PowerShell cmdlet to assign all existing users to a policy.
Get-Mailbox | Set-CASMailbox -ActiveSyncMailboxPolicy (Get-ActiveSyncMailboxPolicy "Sales Policy").Identity
That's really pretty simple, but wouldn't you like it to be even easier? Well, now it is. Exchange 2007 Service Pack 1 allows Administrators to designate an existing policy as the default policy. When a policy is marked as default, all new users will automatically be assigned the policy. You can switch the default policy at any time through the Exchange Management Console or the Exchange Management Shell.
New and Enhanced Policy Settings
In addition to the default policy, there are a significant number of new policy settings available in Exchange 2007 Service Pack 1. Now for a little bit of legal text: the ability to use many of the new policy settings is a premium feature of Exchange ActiveSync and requires an Exchange Enterprise Client Access License for each mailbox on which the policies are implemented. As I mentioned previously, the new policy features are available in Exchange ActiveSync Protocol version 12.1 (Exchange 2007 RTM ships with Exchange ActiveSync protocol version 12.0). Windows Mobile 6.0 is compatible with Exchange ActiveSync Protocol version 12.0. It's a reasonably safe bet that a future device operating system will support Exchange ActiveSync version 12.1, but I can't make any guarantees.
Read more at source: http://msexchangeteam.com/archive/2007/11/19/447551.aspx