Commands › Exchange Online
New-ActiveSyncDeviceAccessRule
Define the access levels for Exchange ActiveSync devices based on the identity of the device.
Quick start script
# New-ActiveSyncDeviceAccessRule — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org
# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-ActiveSyncDeviceAccessRule
$before | Format-List
# 3. Make the change (dry run first)
New-ActiveSyncDeviceAccessRule -AccessLevel <DeviceAccessLevel> -Characteristic <DeviceAccessCharacteristic> -QueryString <String> -WhatIf
New-ActiveSyncDeviceAccessRule -AccessLevel <DeviceAccessLevel> -Characteristic <DeviceAccessCharacteristic> -QueryString <String>
# 4. Verify and diff
$after = Get-ActiveSyncDeviceAccessRule
Compare-Object ($before | Out-String) ($after | Out-String)Syntax
New-ActiveSyncDeviceAccessRule -AccessLevel <DeviceAccessLevel> -Characteristic <DeviceAccessCharacteristic> -QueryString <String>
[-Confirm]
[-DomainController <Fqdn>]
[-WhatIf]
[<CommonParameters>]Parameters (6)
| Parameter | Type | Required | What it controls |
|---|---|---|---|
| -AccessLevel | DeviceAccessLevel | yes | The AccessLevel parameter specifies the access level of devices that are defined by the rule. Valid values for this parameter are Allow, Block and Quarantine. |
| -Characteristic | DeviceAccessCharacteristic | yes | The Characteristic parameter specifies the device characteristic or category that's used by the rule. Valid values for this parameter are: |
| -QueryString | String | yes | The QueryString parameter specifies the device identifier that's used by the rule. This parameter uses a text value that's used with Characteristic parameter value to define the device. Wildcards or partial matches... |
| -Confirm | SwitchParameter | The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding. | |
| -DomainController | Fqdn | This parameter is available only in on-premises Exchange. | |
| -WhatIf | SwitchParameter | The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch. |
Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.