We're starting to implement ActiveSync for managing our companys mobile devices and have run into a bit of a snag.

ActiveSync works fairly well with iOS, Android, Windows Phone and Backberry 10. I'm going to assume Windows 8 RT will be fine as well. The problem is with the Windows 8 Pro support and the native Mail App.

I need a way to exclude Windows 8 from having an ActiveSync policy applied on it. Right now if I user fires up their personal laptop, connects to Exchange with Mail it will tell them to enable Bitlocker. This is a bit of a leap for our users and we intend to deal with PC mail security later. Right now our focus with ActiveSync policy is mobile devices only.

Does anyone know how to or if you canexclude devices from a ActiveSync policy?

Use the ABQ (allow/block/quarantine) rules in the Device Access rule.

You can get to a subset of the functions in the ECP.

I did look at using ABQ but that will only allow me to block Windows 8 and Mail clients. I can't actually use it to apply a specific ActiveSync Policy to that type of device which is what I need.

Ideally I want to be able to make a generic ActiveSync policy for Android, iOS, WP7-8 and Blackberry 10 and then a seperate policy that only applies to Windows 8 and Mail.