When Exchange Gatekeeping is enabled, devices are denied access to the email server a

When upgrading from BES12.5 or UEM 12.6 to UEM 12.7 and later, the Gatekeeping configuration settings are broken out of the Email profile as a new Gatekeeping profile. This new profile is then assigned to all users who had the Email profile assigned to their user account. During the time that the Email profile is assigned but the new Gatekeeping profile has not yet been pushed down to users, all users will be unable to access email.

More...