The Exchange ActiveSync profiles enable you to configure your Windows Desktop devices to access your Exchange ActiveSync server for email and calendar use.

Strongly consider only using certificates signed by a trusted third-party certificate authority (CA). Mistakes in your certificates expose your otherwise secure connections to potential man-in-the-middle attacks. Such attacks degrade the confidentiality and integrity of data transmitted between product components, and might allow attackers to intercept or alter data in transit. See Creating a Credentials Profile for more information.

The Exchange ActiveSync profile supports the native mail client and AirWatch Inbox for Windows Desktop. The configuration changes based on which mail client you use.


Native Mail Client support is only available for Windows 10 devices.

Removing Profile or Enterprise Wiping

If the profile is removed using the remove profile command, compliance policies, or through an enterprise wipe, all email data is deleted, including:

  • User account/login information.
  • Email message data.
  • Contacts and calendar information.
  • Attachments that were saved to the internal application storage.

Username and Password

You can define the user name that is assigned for users to log in to the Workspace ONE UEM Inbox. The user name can be their actual email address or an email user name that is different from their actual email address. When configuring the Exchange ActiveSync (EAS) payload in the Workspace ONE UEM Inbox profile settings, there is a User text box under Login Information that you can set to a predefined lookup value.

If you have email user names that are different than user email addresses, you can use the {EmailUserName} text box, which corresponds to the email user names imported during directory service integration. Even if your user user names are the same as their email addresses, use the {EmailUserName} text box, because it uses email addresses imported through the directory service integration.