Hello,

I am testing exchange 2013 CU7 ActiveSync. I published it via F5. After I configured mobile profile, I reset password, but (!) I am still able to send and receive emails?!

I checked OWA and Outlook- they are accessible with the old password !

What's going on here?!

Hello,

I am testing exchange 2013 CU7 ActiveSync. I published it via F5. After I configured mobile profile, I reset password, but (!) I am still able to send and receive emails?!

I checked OWA and Outlook- they are accessible with the old password !

What's going on here?!

Give it some time.  Exchange caches the password and it is not a direct lookup each time.  

https://support.microsoft.com/en-us/kb/2612821?wa=wsignin1.0

Its already 2 and a half hours after password reset.

Mobile still gets and send messages

Like the article says it could take 8-24 hours before the device receives the change.  You can force the change by recycling the AppPool or moving the user's mailbox to a different DB. Those would force a device reconnect.

After I recycled pool on client servers, mobile phone started to ask for credentials.

For production environment I will publish Active Sync via TMG 2010 with pre-authentication  mechanism - so it will solve the issue.

Thanks a lot.