I used to use the -ActiveSyncAllowedDeviceIDs mailbox property to whitelist mobile devices for ActiveSync.
Ever since we upgraded to Exchange 2013, any mobile device has been able to use ActiveSync, ignoring this property.
My colleague found the device quarantine options in the Exchange Control Panel, but setting quarantine as the default behaviour cuts all my existing users off from ActiveSync (we found this out the hard way). Before I go ahead and start using the quarantine feature, is there any other way to get the -ActiveSyncAllowedDeviceIDs property working again?
Edit: We upgraded from Exchange 2007.