Hi,
I tried to block the wp8 user-agent via the Exchange cmdlet New-ActiveSyncDeviceAccessRule with Characteristic as UserAgent and Query String as the wp8 device useragent MSFT-WP/8.0.10328.
I see that the device registered correctly on the exchange server with all the device details (user-agent, DeviceOS) etc.
When I execute the "New-ActiveSyncDeviceAccessRule" to block this useragent, the device is shown with Access State as "Access Denied" and Access set by "Device Grouping Permissions - MSFT-WP/8.0.10328". However the device is able to send and receive mails. I have taken the logs and found that the device does not share the "User-Agent" String the request headers of the ActiveSync protocol.
Request Headers:-
POST /Microsoft-Server-ActiveSync/default.eas?Cmd=FolderSync&DeviceId=xxxxxxxxxxxx&DeviceType=WP8 HTTP/1.1
Cache-Control: no-cache
Connection: Keep-Alive
Pragma: no-cache
Content-Length: 13
Content-Type: application/vnd.ms-sync.wbxml
Accept-Language: en-us
Authorization: ********
Host: xxxxxx
MS-ASProtocolVersion: 14.1
Is this a known issue or could it be fixed ?
Checked with other devices belonging to other platforms and they share this User-Agent string. Not sure if this should matter.