When the administrator deletes or disables a DeviceID token using the Admin Console, email access from the device will not be blocked immediately as the Exchange server keeps a session for the device. There are 2 ways to block a device immediately as soon as its DeviceID token is deleted or disabled in the MFA server.
1) Manually remove the device's session from the Exchange servers
...
| Expand |
|---|
| title | Delete the device session from IIS Agent... |
|---|
|
| Include Page |
|---|
| Delete a session from IIS Agent |
|---|
| Delete a session from IIS Agent |
|---|
|
|
| Expand |
|---|
| title | Set up the device deletion alert |
|---|
|
...
expand |
| Include Page |
|---|
| Alert on DeviceID deletion |
|---|
| Alert on DeviceID deletion |
|---|
|
|
...