Allow By Device ID

 Exchange Server 2007

This feature allows the IT Professional to restrict access by Device ID to a particular user.  This feature would prevent devices to be transferred to another user if that device was not specifically added to that new user's allowable device ID list.

To configure this feature you use the Exchange Management Shell and run the Set-CASMailbox task.  See example below.

Set-CASMailbox -identity:<user> -ActiveSyncAllowedDeviceIDs:"<deviceID_1>", "<deviceID_2>"

Retrieving the Device ID

There is currently no built in functionality for retrieving the device ID in advance before the user syncs with Exchange.  You will need to use System Management Server or other solution to get the device ID.  For testing purposes, you can quickly retrieve the device ID by running this command.

Get-ActiveSyncDeviceStatistics –mailbox:<username> |fl DeviceID

NOTE: For Exchange Server 2007 Beta 2 or earlier the task name is Get-MObileDeviceStatistics.