How can I disable Activesync if I detect a rooted phone on Android?

Question

I found a few ways to detect a rooted Android phone, but I would now like to use that functionality to whitelist (or blacklist) users who root with activesync.

What are my implementation options here?

Answer 1

The ActiveSync client uses the account manager API to sync stuff, thus with the android.permission.MANAGE_ACCOUNTS you should be able to do stuff like clear the password or at least disable sync / delete the account.

(Deleting the account can lead to all information being removed. Clients usually do not appreciate this)

But.. they'd have to be running software that you've built. So whats stopping them from uninstalling that? They've already got root.