[German]Small addendum that Thomas B. already pointed out to me in Sept. 2022. It is about the possibility to access Exchange mailboxes with ActiveSync by means of the app delivered in Windows 10 and Windows 11.
Thomas B. wrote me in a mail the following:
Hi Günter,
due to an evaluation of a customer on the devices that connect to EAS to synchronize the mailbox, I came across that with the latest versions of Windows 10 and 11, it is possible to access the mailbox with the MailApp using ActiveSync.
That is, from a private Windows client, the user can access his mailbox in the company, if that is not regulated. This is surely not known to some CISO.
Thanks to Thomas for the hint – got bogged down in my stack. In case the info is new, the post Windows Mail app not blocked despite ActiveSync organization settings – Exchange has some hints.