ActiveSync devices still sync after disabling account or changing password

What:

Windows 2008 R2 with Exchange 2010

Problem:

In case when employee is "walked out the door", access to account and emails has to be terminated immediately, but ActiveSync can work up to 24h after disabling Active Directory account.

Solution:

Disable ActiveSync and OWA for user Jack Rambo

1. Open up "Exchange Management Console"
2. Right click on Jack's mailbox and select Properties
3. Select "Mailbox Features" tab
4. Disable "Exchange ActiveSync" & "Outlook Web App"

or

Start "Exchange Management Shell" and run the following commands

Set-CASMailbox -Identity "Jack Rambo" -ActiveSyncEnabled:$False
Set-CASMailbox -Identity "Jack Rambo" -OWAEnabled:$False

Microsoft KB