Connect a mail client
Pick your app. Settings are filled in for [email protected]; Autodiscover and the HIPAA device policy are on for this practice.
Autodiscover is on for lakesidedental.com, so Outlook needs only your address.
- Settings → Accounts → Add account
Type [email protected] and Continue. - Sign in
Your PXCMail password, then the 6-digit code from your authenticator. - Accept the device policy
Outlook asks once; it only applies to PXCMail data. - Done — Inbox, Calendar and Contacts sync in about a minute
Shared mailbox frontdesk@ appears automatically.
| Account type | Exchange (EWS) via Autodiscover |
|---|---|
[email protected] | |
| Server (incoming) | ews.pxcmail.com (automatic) |
| Server (outgoing) | n/a (EWS) |
| Sign-in | Password + MFA (modern auth) |
| Device policy | Passcode + encryption required (HIPAA) · remote wipe of PXCMail data only |
Outlook 2016–2021 and Microsoft 365 Apps use Autodiscover too; if the wizard stalls, check the Autodiscover record below.
- File → Add Account
Enter the address; do not choose “advanced options” unless asked. - Sign in with password + MFA code
- If asked for IMAP/SMTP instead
Autodiscover failed — see “Outlook can’t connect” below.
| Account type | Exchange (EWS) |
|---|---|
[email protected] | |
| Server (incoming) | ews.pxcmail.com |
| Server (outgoing) | n/a |
| Sign-in | Password + MFA |
| Device policy | Passcode + encryption required (HIPAA) · remote wipe of PXCMail data only |
Apple Mail on macOS uses Exchange (EWS) — calendar and contacts included.
- System Settings → Internet Accounts → Add Account → Microsoft Exchange
Name, email, password. - Choose “Sign in” (not “Configure manually”)
Autodiscover fills the server. - Enter the MFA code when asked
- Pick Mail, Contacts, Calendars
| Account type | Exchange |
|---|---|
[email protected] | |
| Server (incoming) | ews.pxcmail.com |
| Server (outgoing) | n/a |
| Sign-in | Password + MFA |
| Device policy | Passcode + encryption required (HIPAA) · remote wipe of PXCMail data only |
iPhone and iPad use Exchange ActiveSync; the device policy (passcode, encryption) is required by HIPAA.
- Settings → Mail → Accounts → Add Account → Microsoft Exchange
Email + description “Lakeside”. - Sign in
Password + MFA code. - Accept “Lakeside Family Dental may need to remotely manage this device”
Only PXCMail mail/contacts/calendar can be wiped; photos and apps are untouched. - Choose what to sync
Mail, Contacts, Calendars, Notes off.
| Account type | Exchange ActiveSync |
|---|---|
[email protected] | |
| Server (incoming) | eas.pxcmail.com |
| Server (outgoing) | n/a |
| Sign-in | Password + MFA |
| Device policy | Passcode + encryption required (HIPAA) · remote wipe of PXCMail data only |
Gmail app: choose “Exchange and Office 365”; Samsung Email: “Microsoft Exchange ActiveSync”.
- Gmail → Add account → Exchange and Office 365
Not “Other”/IMAP — that disables calendar and device policy. - Email, password, MFA code
- Accept the device administrator / work profile prompt
Required for the HIPAA device policy. - Wait for the first sync (1–2 min)
| Account type | Exchange ActiveSync |
|---|---|
[email protected] | |
| Server (incoming) | eas.pxcmail.com |
| Server (outgoing) | n/a |
| Sign-in | Password + MFA |
| Device policy | Passcode + encryption required (HIPAA) · remote wipe of PXCMail data only |
Thunderbird uses IMAP/SMTP with an app password (no MFA prompt in the app). Calendar via CalDAV.
- Create an app password
Settings → App passwords → Create (shown once). - Account Settings → Add Mail Account
Email + the app password; Thunderbird finds the servers. - Confirm ports
IMAP 993 SSL/TLS · SMTP 465 SSL/TLS (or 587 STARTTLS). - Calendar: add network calendar (CalDAV)
https://dav.pxcmail.com/calendars/[email protected]/
| Account type | IMAP + SMTP |
|---|---|
[email protected] | |
| Server (incoming) | imap.pxcmail.com:993 (SSL/TLS) |
| Server (outgoing) | smtp.pxcmail.com:465 (SSL/TLS) or 587 (STARTTLS) |
| Sign-in | App password (your normal password will not work) |
| Device policy | Passcode + encryption required (HIPAA) · remote wipe of PXCMail data only |
Something not working?
Pick the message you see. Each fix is checked against your account’s real settings.
“Password rejected” in Thunderbird / older apps
Cause: apps that use IMAP/SMTP cannot show the MFA prompt, so your normal password is refused. Create an app password and use it in the app.
- Found
535 5.7.8 Authentication failed (IMAP, 09:42)- Expected
App password accepted
Guided fix · 2 steps
- Create an app password
Settings → App passwords → Create. Copy it now — shown once.
- Paste it in the app’s password field
Keep your email address as the username.
Outlook: “The connection to Microsoft Exchange is unavailable”
Cause: the Autodiscover record for lakesidedental.com is missing, so Outlook cannot find the server. Phones work because they were set up manually.
- Found
autodiscover.lakesidedental.com: NXDOMAIN- Expected
autodiscover.lakesidedental.com CNAME autodiscover.pxcmail.com
Guided fix · 2 steps
- Admin: add the CNAME at your registrar
Host
autodiscover→autodiscover.pxcmail.com. - Wait up to 1 hour, then re-add the account
Apple Mail: “Cannot verify server identity”
Cause: the account was configured manually with mail.lakesidedental.com as the server. Our certificate is for *.pxcmail.com, so Apple Mail warns. Use the PXCMail host names.
- Found
Server: mail.lakesidedental.com- Expected
Server: ews.pxcmail.com (Exchange) · imap.pxcmail.com (IMAP)
Guided fix · 2 steps
- Remove the account and add it again with “Sign in” (automatic)
Or edit the server field to ews.pxcmail.com.
- Do not tap “Continue” on certificate warnings
A warning you did not expect can mean a fake network.
iPhone: “Lakeside Family Dental may need to remotely manage this device”
Cause: this is the HIPAA device policy: passcode, encryption and the ability to wipe PXCMail data only if the phone is lost. It is required to sync mail to a phone.
Guided fix · 2 steps
- Tap Allow / Accept
Set a passcode if asked (6 digits or Face ID).
- Prefer not to? Use webmail in Safari
No policy is applied to browser use.
IMAP is turned off by your admin — use Outlook, Apple Mail (Exchange) or a phone
Cause: policy “Devices: Exchange/EAS only” blocks IMAP so every client enforces the device policy.
- Found
IMAP: disabled by policy- Expected
Exchange / ActiveSync clients
Guided fix · 2 steps
- Use an Exchange-capable client
Outlook, Apple Mail, iPhone/Android built-in mail.
- Need IMAP for a specific tool?
Ask your admin for an exception (logged).
This device was removed by your admin on Oct 15
Cause: an Owner/Admin wiped PXCMail data from “iPad · D. Ortiz” (reported lost). Signing in from this device is blocked until an admin re-enables it.
Guided fix · 2 steps
- Contact your admin
Console → Users → Devices → Allow.
- Sign in again
Authenticator push didn’t arrive
Cause: notifications are off for the authenticator app, or the phone is offline.
Guided fix · 2 steps
- Open the authenticator app and use the 6-digit code instead
Codes work offline.
- Turn notifications back on for next time
Prototype states: password-rejected · autodiscover · cert · policy · imap-disabled · wiped · push · ticket