Email on authorized devices only

I am curious to know if there are any solutions out there (opensource or otherwise) that will permit an organization to strictly prevent the use of BYOD (bring your own device) for the use of email.

Access to e-mail has to be done through company phones, where IT should apply password policies on the device.  If a user were to access email through a personal phone (imap. activesync), it would be difficult to control phones getting lost/stolen, and information with it.  Since it's a personal device that would not get reported as lost,  an employee could just purchase another one.

I know blackberries do this through BES servers, but we have users with iPhones, and android phones.

Any help would be appreciated.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Where I work, users are allowed BYOD, but it must conform to company policy:
-The device MUST have a PIN (this is enforced when the Exchange email account is set up. No PIN, no email).
-The user must sign a document stating that if the device is lost or stolen, IT can send a code to wipe the device.
Stelian StanNetwork AdministratorCommented:
You can block ActiveSync on each mailbox and enable it only on those mailboxes you want to allow access.
Vijaya Babu SekarAssociate Ops ManagerCommented:
Better you can use new feature in Exchange 2010, ABQ (allow\Block\Quarantine) features.
Please refer the below article, it would be helpful for you

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

We use a product from Fiberlink call Maas360:

It does more than just control which devices can have company email. It's also a way to wipe a phone if it's stolen, among other features. So the product doesn't keep someone from attempting to add company email to a person device, but once someone does, the product, since it integrates with Exchange reports this and then that device can be blocked. On legitimate devices the user has to install the app and if they don't, you can lock their company device out of email as well.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
metazendAuthor Commented:
Ok, I am looking at all these options, thank you guys. :)   I'll update with result of what we've decided to use.

@jhyiesla how's pricing on this?   (Maas360)  It doesn't state explicitly on their site, so I get worried that it's a very expensive solution.
I don't think it's the most inexpensive thing going, but  I wasn't involved in the purchasing of it. When my partner gets in I'll ask her as she would have that information and I'll report back to you here.
It looks like for our set up, and yours might be different, we paid about $7000 up front. Then it's a subscription fee of $3/month/device.
metazendAuthor Commented:
Thank you jhyiesla :)
metazendAuthor Commented:
We've evaluated this product, and are going with MaaS360.  Thanks :)
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.