Devices reporting under multiple categories (A/S managed and Intune)
Why are devices managed by Intune also showing up in the managed by ActiveSync section? This doesn't really help separate the devices at all since any device with an email profile pushed out to it is now considered managed by ActiveSync.
Devices managed only by ActiveSync should be devices that are not managed by Intune as well. There also shouldn't be multiple listings for a single device if they have the profile pushed out to the device using Intune as well as using the Outlook app. If someone manually adds an email address and the device isn't managed by Intune, they should go into the ActiveSync only group. That really should be the only way a device should be classified as AtiveSync only.
Kaj Niemi commented
I have the same thing - devices using outlook for ios and then the ios mail/calendar app are classified in two categories and sometimes policies conflict because of just that.
obviously the workaround is to not have activesync at all but we're a it team that lets users use the tools they want to be productive instead of locking down everything and forcing everyone to use Only One Mail Application.
Where this is affecting us the most is in reporting. I cannot get an accurate account of devices as the same device is listed multiple times and there is no way to consolidate the devices.
This also causes an issue with applying policies. If I set a policy to not allow Android devices, will this now block any user who is using the Outlook app on their iOS device and inform them that they are out of compliance?