How to Enable and Disable Exchange ActiveSync Features in Exchange

Activesync is often confused for OMA which is Outlook Mobile Access.  Outlook Mobile Acces is similar to Outlook Web Access, but with a more simplistic, non-graphical interface designed for Mobile Browsers on all devices. Activesync is the service that syncs PIM information with Windows Mobile Devices.

To Enable and Disable Exchange ActiveSync features at the user level

  1. On the Exchange server with the user's mailbox, log on with the Exchange administrator account, and then start Active Directory Users and Computers.

  2. Expand the domain, and then open the location for the users that you want to manage.

  3. Right-click the user or users whose Exchange ActiveSync settings you want to modify, and then select Exchange Tasks.

  4. In the Exchange Task Wizard, on the Available Tasks page, select Configure Exchange Features, and then click Next.

  5. On the Configure Exchange Features page, select User initiated synchronization, and then select one of the following:

    • To permit users to use Exchange ActiveSync to synchronize their Exchange mailbox with their mobile devices, select Enable.
    • To prevent users from using Exchange ActiveSync, select Disable.
    • To prevent the users' settings from being modified when you have selected more than one user, select Do not modify.
  6. Click Next to apply your changes.

  7. Click Finish.

You can perform these tasks using Active Directory User and Computers, with or without the Exchange Task Wizard. The advantage to performing it with the Exchange Task Wizard is that you can modify the settings for multiple objects at one time.
Refrenced from:
https://technet.microsoft.com/en-us/library/53a6ac96-c12b-4284-a026-aa558f23ada8.aspx

Setup a New Users in Active Directory with Exchange ActiveSync features Disabled by Default

This can be Accomplished by creating a user template, you can make a copy of it when you need to create an account for a new user. Many of the attributes of the user template, such as group membership and Exchange ActiveSync Attrubutes will be copied to the new user account. This eliminates the need for you to configure all the account properties each time you have to create a new user account.

More info on User Templates can be found here:
https://www.lockergnome.com/nexus/it/2005/03/14/user-templates-for-creating-user-accounts/

To Enable and Disable Exchange ActiveSync Features at the Organizational Level

  1. Start IIS on the Exchange Front End Server.

  2. Expand The Default Website, right-click Microsoft-Server-ActiveSync, virtual server and then click Disable.

This will Disable the Activesync Service for the entire ORG as long as you Disable the Virtual Server on all Exchange Front End Servers

To Programmatically Disable/Enable Microsoft Exchange Active Sync For All Of My Mobile Users

Please take a look at Michael Jimenez Blog as he's got a great script that covers this.
https://blogs.technet.com/mjimenez/archive/2007/07/30/how-do-i-programmatically-disable-enable-microsoft-exchange-active-sync-for-all-of-my-mobile-users.aspx