Currently, ActiveSync is disabled on all Exchange mailboxes in our company (since we use older Blackberries). Since we are looking at migrating to iPhone/Android, we will need to enable ActiveSync for users. However, in our company we only want to allow company-provided devices to have email, and not allow users to have corporate email on their own personal iphones and ipads.

 

Obviously we can control Desktop Central MDM activations with one-time codes, but this wouldn't prevent a user from just activating a device directly to Exchange. Is there some way this can be controlled / brokered with Desktop Central -- for example, only allow ActiveSync connections from Desktop Central activated devices...

 

Just curious, as most other MDM providers offer this, and this is a key requirement for us...