I'd like to enable on my Exchange 2013 server the quarantine settings for activesync, because I want that my colleagues can sync with their mailbox only the company mobile phone and not their personal phone/ipad/tablet. I have two questions:
1) I will set a rule to put in quarantine all devices, so I'll need to enable each single new device. Is this rule dangerous for whatever reason? Is that the correct way to reach my goal?
2) what about the "already configured devices"? Will they continue to work without any enable needed? It will be a nice thing, despite the fact I don't know at the moment if they have other devices configured except the company phone, but it won't be a hard problem.