How can I control which users have access to Exchange ActiveSync?
By default, all users are enabled for Exchange ActiveSync. An Exchange Server administrator can globally disable Exchange ActiveSync for all users by using the Exchange Management Console or the Exchange Management Shell. The Exchange Administrator can also disable Exchange ActiveSync for individual users by using the Exchange Management Console or the Exchange Management Shell.