Dues to a security issue with older version of Apple IOS I wanted to block certain versions that my users had installed. specifically I wanted to block version “iOS 8.4 12H143”.
So in the exchange Management Shell I entered
New-ActiveSyncDeviceAccessRule -QueryString "iOS 8.4 12H143" -Characteristic DeviceOS -AccessLevel Block
You can check in the ECP and it should like like the clip below.
Resources: http://exchangeserverpro.com/block-ios-61-exchange-2010/ The link is for exchange 2010 but works on 2013 as well.