Q: Can I block applications running on mobile devices that are managed with System Center Configuration Manager 2012 by using the Exchange Server connector?

A: System Center Configuration Manager (SCCM) 2012 can manage various types of mobile devices. Some devices it manages through agent software running on the mobile device and enrolled with Configuration Manager. Other devices, such as Android and iOS devices, are managed through Exchange ActiveSync; Configuration Manager handles the management of the policies Exchange issues to the connected device through the connector from SCCM to Exchange.

Although SCCM can be configured to block specific applications and even applications that aren’t digitally signed, this blocking applies only to devices that are enrolled with Configuration Manager directly, such as Windows Mobile devices, and doesn’t apply to devices managed via Exchange such as Android and iOS.

If you have a device that supports Configuration Manager enrollment, such as Windows Mobile, but you manage it through Exchange, then you still won't be able to use the application-blocking functionality and will be limited to the ActiveSync policy capabilities.

Read more FAQs on all kinds of sys admin issues at John Savill's FAQs for Windows!