Device enrollments, assignment of email profiles to devices, and change in the device compliance status impacts. MEM configurations are assigned to devices based on the EAS profiles present on the devices. The Managed and Require ActiveSync Profile compliance policies ensures that unmanaged and manual configurations remain unpermitted.
Devices with Exchange Active Sync (EAS) profile
When a device with an EAS profile associates to a particular MEM configuration, Workspace ONE UEM sends policy updates to that MEM configuration. This feature facilitates migrations and multiple MEM configurations where one or more email environments are managed.
Regardless of the email client, all Google MEM models require an EAS profile. For new installs, associating an EAS profile to a MEM configuration is mandatory. For upgrades, an admin has to associate an EAS profile to the MEM configuration upon completion of the upgrade process.
SEG Proxy IntegratedWorkspace ONE UEM sends a broadcast message to all the MEM configurations of the organization group to which the device has enrolled. This message states the compliance status of the device. When compliance changes, an updated message is sent. When the device connects to a particular SEG server, the SEG recognizes the device from the broadcast message sent earlier. The SEG Proxy then reports the device as discovered to VMware AirWatch. Workspace ONE UEM then associates the device with the MEM Configuration for SEG and displays it on the Email Dashboard.
If multiple SEG servers are load balanced, single policy broadcast messages apply to only one SEG. This includes the messages sent from the Workspace ONE UEM console to SEG upon enrollment, compliance violation, or correction. Use Delta Sync with a refresh interval of ten minutes to facilitate newly enrolled or compliant devices. These devices experience a waiting period of maximum ten minutes before email begins to sync.
Benefits:
- Updated policies from the same API source for all SEG servers.
- Smaller performance impact on API server.
- Reduced implementation or maintenance complexity compared to the SEG clustering model.
- Fewer failure points as each SEG is responsible for its own policy sets.
- Improved user experience.
PowerShell MEM configurations behave the same as SEG in terms of policy updates. For migrations to PowerShell, it is important that new profiles are associated to the PowerShell MEM configuration. Associating a new profile reduces unnecessary communication with the previous MEM configuration.
Gmail IntegratedProfiles are required for this type of deployment except when integrating with Google Directory APIs. Unless the devices are provisioned with the profiles, the configured Gmail deployment does not identify or manage the device.
Synchronize Devices
Use MEM to synchronize devices associated with an organization group.
Once you configure a Mobile Email Management (MEM) deployment, the devices of the associated organization group syncs up with MEM. You can view the status of the devices and other details on the Email Dashboard page of the Workspace ONE UEM console.
- SEG Proxy - Devices managed with the SEG Proxy appear on the dashboard when the SEG Proxy reports the device as connected and managed.
- PowerShell - Devices managed with PowerShell appear on the dashboard when Workspace ONE UEM sends a PowerShell cmdlet, allowing the device to connect to email.
- Gmail - Devices managed with Gmail appear on the Dashboard when the Workspace ONE UEM EAS profile is queued up for the device.
The Email Dashboard shows one of the following statuses:
- Managed Assigned - Enrolled devices with identified memconfigID.
- Managed Unassigned - Enrolled devices for which the memConfigID has not yet been identified through profile assignment or auto discovery.
- Unmanaged Discovered - Devices that are not yet enrolled in Workspace ONE UEM and a specific MEM configuration at the organization group that has discovered them.
