If you’re an Exchange admin happy about how Exchange ActiveSync just hums along with mobile devices supporting the EAS protocol, and the multitude of devices that can now access Exchange without any admin intervention (OTA device activation and all that…), but also unhappy about the multitude of devices that can now access Exchange without any admin intervention, there’s news for you.

Yes, you can enable or disable EAS per-device. Yes, you also prevent unprovisionable devices (you know the ones… ) from connecting. But how do you have some REAL control over devices trying to connect to your Exchange 2010 servers? How do you, for instance, allow device access for a specific device model or family but block others? Can you set up a default device access policy which can allow, block or quarantine new devices?

--> Please see the rest on the blog : http://exchangepedia.com/2010/11/activesync-what-is-allow-block-quarantine-list.html