There has been a lot of speculation about the iPhone and its abilities to connect to Microsoft Exchange Server. For instance, Wall Street Journal columnist Walt Mossberg mentions in his June 26 All Things Digital column that, "It [the iPhone] can also handle corporate email using Microsoft's Exchange system, if your IT department cooperates by enabling a setting on the server."
Technically this is correct, as today iPhone users can connect to Microsoft Exchange using IMAP. There are, however, some significant differences in the mobile device experience and IT professional capabilities supported by IMAP on the iPhone and those enabled by Exchange ActiveSync (EAS) for compatible devices. EAS is a protocol that provides rich messaging experiences for over 200 different smartphones right out of the box. These smartphones include Windows Mobile devices as well as phones from a broad range of 3rd parties including Helio, Motorola, Nokia, Palm, Sony Ericsson and others.
Comparing IMAP and EAS at a high level: IMAP provides an adequate mobile email experience (but is subject to some important limitations), whereas EAS provides a more secure, complete companion experience to Outlook and Outlook Web Access (OWA) for the mobile device. To better understand this comparison, let's look at IMAP on the iPhone and EAS in a bit more detail from several perspectives:
IMAP enables an adequate mobile email experience; EAS enables the additional pieces that make mobile email great
Both IMAP and EAS give the mobile client the capability to read email with rich html formatting, and view their inbox as well as subfolders of their inbox and reply/reply-all/forward/compose email (technically, the iPhone uses SMTP to send email. SMTP for outbound email is configured along during IMAP/Exchange account setup on the device).
EAS also supports capabilities for:
EAS enables a rich collaboration experience beyond email
A significant part of the Exchange user experience goes beyond email. The IMAP protocol only supports email. EAS is designed to enable a great over-the-air companion experience to Outlook and OWA and supports many facets of Exchange beyond email, including:
EAS and IMAP both secure data on the network; EAS also protects data once it's on the device
From an IT department's perspective, this is a highly important distinction between IMAP and EAS.
Both IMAP and EAS allow IT to ensure data and credentials are protected on the network by encrypting them via SSL.
Many IT departments require support for additional security measures to protect data on the device as well (not just over the network) to guard against loss or theft before they are willing to let users connect to Exchange from the Internet using a given protocol. Only EAS addresses this requirement by enabling IT to implement and enforce security policies that protect the data once it's on the device. There are a number of these policies supported by EAS today and we continue to add more, some key examples are:
Because IMAP does not support these security policies, many IT departments have decided not to enable mobile device (or any Internet client) access to email via IMAP. EAS on the other hand is seeing increasingly broad adoption by IT departments.
Microsoft Exchange does have IMAP support that provides for an adequate email experience. The iPhone can access email via IMAP if the IT department has enabled IMAP connectivity for users. However, IMAP has limitations from both an IT and user standpoint with respect to security and richness of experience that prevent it from being a complete solution for mobile device access to Microsoft Exchange.
Exchange ActiveSync on the other hand provides a very rich email and collaboration experience for end-users as well as support for the important security measures needed for IT.
IMAP client for iPhone
Yes (through IDLE command)
No – pull email only
HTML email formatting
Yes (view only)
Accept/Decline meeting requests
Global Address List (GAL) lookup
Out of Office
Out-of-office (OOF) email settings
Fileshare (SMB) and/or Sharepoint Document Library Access
Enforce security policies to protect data on device
* All were tested using Exchange Server 2007