Retrieve a list of stale Active-Sync devices

We allow users who have signed the proper policy to access their Exchange mailbox via Active Sync devices.

Users being users, though, we quite often have active sync devices that are registered to a mailbox, but are no longer in use. Users always have a clever excuse like “Oh, i lost that last year”, or “Gee, did I forget to mention it was stolen from me?”

So, I wrote the following script that will retrieve a list of users who have an active sync device that has not synchronized in the last month.

001 002 003 004 005 006 007 008 009 010 011 012 013 014 015 016 017 018 019 020 021 022 023 024 025 026 027 028 029 030 031 032 033 034 035 036 037 038 039 040 041 042 043 044 045 046 047 048 049 050 051 052 053 054 055 056 057 058 059 060 061 062 063 064 065 066 067 068 069 070 071 072 073 074 075 076 077 078 079 080 081 082 083 084 085 086 087 088 089 090 091 092 093 094 095 096 097 098 099 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136

###################################### # Script to show who has used active sync devices, but not # in the last 30 days # # Karl Mitschke 3/3/2009 ###################################### #First, find out if Exchange Management Shell is loaded: $snapins = Get-PSSnapin |select name $snapincount=0; $found = $false do  { $founDName = $snapins[$snapincount].name if ($founDName -eq "Microsoft.Exchange.Management.PowerShell.Admin") #Exchange Shell already loaded { $found = $True break } $snapincount++} while ($snapincount -lt $snapins.Count) if ($found -ne $True) { Add-PSSnapin "Microsoft.Exchange.Management.PowerShell.Admin" } #Now, get all mailboxes that have an active sync partnership: $Mailboxes = Get-CASMailbox ` -Filter{(HasActiveSyncDevicePartnership -eq $true)-AND (name -notlike "cas*")}` | select name, servername, DistinguisheDName, ActiveSyncMailboxPolicy $Mailboxes = $Mailboxes |Sort-Object "Name" $date = ( get-date ).ToString(‘yyyyMMdd’) $SearchDate = ( get-date ).AddDays(-29).Date $NumberWiped = 0 $NumberSent = 0 $TotalCount = 0 $NewDevices =@() $prebody = "<font color=blue>Executive Summary:<br /><br />" $bodydetail = $bodydetail + "<br /><br />Device Information:"  Foreach ($mailbox in $Mailboxes) { $Name = $mailbox.Name $DName= $mailbox.distinguisheDName $Stats = Get-ActiveSyncDeviceStatistics -mailbox $DName if($Stats.count -lt 2 -and $Stats -ne $null) { if ($stats.LastSuccessSync -lt $SearchDate) { if ($stats.LastSuccessSync -eq $null) { $bodydetail = $bodydetail +"<br /><br />User " + $mailbox.Name + " has deviceID " +  $Stats.DeviceID +", which does not appear to have ever synced.<br />" } else { $bodydetail = $bodydetail +"<br /><br />User " + $mailbox.Name + " has deviceID " +  $Stats.DeviceID +", which has not had a succesful sync since "+$Stats.LastSuccessSync+"<br />" } $bodydetail = $bodydetail + $Stats.count $TotalCount ++ } } if ($Stats.count -lt 2 -and $Stats -ne $null) { if ($Stats.DeviceWipeRequestTime -ne $null) { if ($Stats.DeviceWipeAckTime -ne $null) { $NumberWiped ++ $bodydetail = $bodydetail +"<br /><br />This device was wiped on " + $Stats.DeviceWipeAckTime.ToString() $bodydetail = $bodydetail +"<br />Click here to remove this active sync partnership:<a href= https://webmail.contoso.com/ExchActiveSync/RemoveActiveSyncConfirm.aspx?strIdentity=&quot; + $Stats.Identity +"Remove Partnership>" } else { $NumberSent ++ $bodydetail = $bodydetail +"><br /><font color=red><strong>This device was sent the wipe command on " + $Stats.DeviceWipeRequestTime.ToString() +"</strong></font color>" $bodydetail = $bodydetail +"<br />Click here to remove this active sync partnership:<a href= https://webmail.contoso.com/ExchActiveSync/RemoveActiveSyncConfirm.aspx?strIdentity=&quot; + $Stats.Identity +">Remove Partnership" } } $today = Get-Date } elseif ($Stats.Count -gt 1) { foreach ($Stat in $Stats) { if ($stat.LastSuccessSync -lt $SearchDate) { if ($stat.LastSuccessSync -eq $null) { $bodydetail = $bodydetail +"<br /><br />User " + $mailbox.Name + " has deviceID " +  $Stat.DeviceID +", which does not appear to have ever synced.<br />" } else { $bodydetail = $bodydetail +"<br /><br />User " + $mailbox.Name + " has deviceID " +  $Stat.DeviceID +", which has not had a succesful sync since "+$Stat.LastSuccessSync+"<br />" } $bodydetail = $bodydetail + $Stat.count $TotalCount ++ } if ($Stat.DeviceWipeRequestTime -ne $null) { if ($Stat.DeviceWipeAckTime -ne $null) { $Wiped= "" $NumberWiped ++ $bodydetail = $bodydetail +"<br /><br />This device was wiped on " + $Stat.DeviceWipeAckTime.ToString() } else { $NumberSent ++ $bodydetail = $bodydetail +"<br /><STRONG><font color=red>This device was sent the wipe command on " + $Stat.DeviceWipeRequestTime.ToString()+"</STRONG></font color>" $bodydetail = $bodydetail +"<br />Click here to remove this active sync partnership:<a href= https://webmail.contoso.com/ExchActiveSync/RemoveActiveSyncConfirm.aspx?strIdentity=&quot; + $Stats.Identity +">Remove Partnership" } } } } } function sendmail([string] $body) { $SmtpClient = new-object system.net.mail.smtpClient  $MailMessage = New-Object system.net.mail.mailmessage  $SmtpClient.Host = "mail.contoso.com"  $mailmessage.from = "ActiveSyncDevices@donotreply.com"  $mailmessage.To.add("karlmitschke@contoso.com")  $mailmessage.To.add("exchadmin@contoso.com")  $mailmessage.Subject = "Stale Active Sync Devices"  $mailmessage.Body = $body $MailMessage.IsBodyHtml = $TRUE $smtpclient.Send($mailmessage)  } $body = "There are " + $TotalCount +" Devices that have not synced since before" + $SearchDate.ToShortDateString() +".<br />" $body = $body + "<br /><br />There are $NumberWiped devices that have been wiped." $body = $body + "<br />There are $NumberSent devices that have a pending wipe command.</font color>" $mail = $prebody + $Body + $BodyDetail sendmail($mail) $bodydetail = "" $Name = "" $bodySummary = "" $prebody = ""

Advertisement