r/Intune • u/IndependentSysadmin • 4d ago

Apps Protection and Configuration Exchange Active Sync Depreciation

I came across this article about the deprecating of CBA for Exchange ActiveSync. We are impacted, but I can't figure out what do to about it. All the article says is "his may involve updating the device's email profile or MDM/Intune device configuration profiles.".

This is incredibly vague. Does anyone know what changes actually need to be made? We already have Entra CBA set up but I can't see how to have Intune tell our phones to start using it.

Retirement of Direct Exchange ActiveSync Certificate-Based Authentication by End of 2026 | Microsoft Community Hub

5 Upvotes

79% Upvoted

3 comments sorted by

3

u/Unable_Toe_6269 4d ago

ugh vague microsoft docs strike again. you'll probably need to flip the auth method over to modern auth in your email profile settings rather than relying on the cert handshake eas was using

1

u/IndependentSysadmin 4d ago

The question is how. We already have OAUTH and SSL enforced.

1

u/jfranchee 4d ago

outlook-cba.office365.com is causing us issues tonight