Active Sync access question

We are in the process of upgrading users from 07 to 13.  We have an active-sync policy that blocks all devices until we approve them.  Can someone please tell me why it takes 1 - 6 days (it's very inconsistent) for some devices to get blocked?  Is there a process that runs?  Is there a way to make this happen sooner?

thanks