Does anyone know if an ActiveSync Access policy can be defined for a single user? I understand how to create an allow/block/quarantine policy for a device but now I want to apply that ABQ access policy (setting) to only a single user and not everyone.
Am I missing a simple way to do this? We want to prevent a single user from being able to ActiveSync with their iPhone but let them use an iPad, while leaving all other iPhone users alone.
I've been Googling and exploring the ActiveSync Access control panel while asking this question... but I don't seem to be able to find a definitive answer without experimenting - and I don't want to accidentally block all iPhone users.
It is important to understand that the ABQ list is not meant to displace policy controls implemented using Exchange ActiveSync policies. Policy controls allow you to control and manage device features (such as remote wipe, PIN passwords, encryption, camera blocking, etc.) whereas the ABQ list is about controlling which devices are allowed to connect (for example, there may be a lot of devices that support EAS PIN policies, but some IT departments only want to allow certain devices to connect to limit support or testing costs).
So in short: Exchange ABQ is an Organizational setting which is applied to the complete organization and not to specific people, such as ActiveSync Policies can.
We want to be able to disable this one device in a user's account, but not ActiveSync as a whole incase they have another device like a Tablet that the policy...