Add endpoint for outdated ActiveSync devices (EAS < 16.1)

[Copilot]

Microsoft will block ActiveSync versions < 16.1 from Exchange Online starting March 1, 2026. This adds a report endpoint to identify affected devices.

Implementation

• Server-side filtering: Uses -ActiveSync switch parameter to filter Exchange ActiveSync devices on the server
• Version comparison: Client-side filtering with safe version parsing (version comparison not supported server-side)
• Error handling: Try-catch around version parsing to handle malformed version strings

Endpoint

Invoke-ListOutdatedActiveSyncDevices.ps1 in Email-Exchange/Reports

Returns devices with fields: userDisplayName, userPrincipalName, deviceId, deviceModel, clientType, clientVersion, deviceOS, deviceFriendlyName, firstSyncTime, lastSuccessSync

Role: Exchange.Mailbox.Read

Example Usage

# The endpoint replicates this logic with server-side optimization:
Get-MobileDevice -ActiveSync |
  Where-Object { $_.ClientVersion -and ([version]$_.ClientVersion -lt [version]'16.1') } |
  Sort-Object UserDisplayName

Original prompt

Problem Statement
Referring to this: https://www.bleepingcomputer.com/news/microsoft/microsoft-to-block-exchange-online-access-for-outdated-mobile-devices/

"Starting March 1, 2026, devices running ActiveSync versions lower than 16.1 will no longer be able to connect to our services. EAS 16.1 was released as a part of Exchange Server and Exchange Online in June 2016."

Currently no way to pull this out of CIPP, this powershell reports on the devices:

Get-MobileDevice | Where-Object {($.ClientType -eq 'EAS' -or $.ClientType -match 'ActiveSync') -and $.ClientVersion -and ([version]$.ClientVersion -lt [version]'16.1')} | Sort-Object UserDisplayName | Select-Object UserDisplayName, UserPrincipalName, DeviceId, DeviceModel

can you please make a HTTP endpoint in the same format as other existing ones using the same methoods to achive this

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[Zacgoose]

@copilot even better:
Parameters
-ActiveSync
Applicable: Exchange Server 2013, Exchange Server 2016, Exchange Server 2019, Exchange Server SE, Exchange Online

The ActiveSync switch filters the results by Exchange ActiveSync devices. You don't need to specify a value with this switch.

[Copilot]

@copilot even better:
Parameters
-ActiveSync...

Updated to use the -ActiveSync switch parameter instead of the custom OPATH filter. This is simpler and cleaner. Changes in commit 627cff5.