We're trying to tighten security, and block users from accessing our mail server without having the proper MDM on their phones. With programs like Aqua Mail and CloudMagic, it seems like they go around ActiveSync settings and don't show up as phones, yet still pull mail.
Is there a way to find and block specific devices accessing exchange using non ActiveSync routes?
Best Answer
Came across this while searching to do the same - you can use the EWS Access policies, good article here:
http://blogs.technet.com/b/matabra/archive/2012/08/23/block-mobile-apps-that-use-exchange-web-services.aspx