Finding Windows Phones in Active Directory
I’ve been messing with ADSIEdit a little and found a strange looking container as a subcontainer of my AD user account in my home’s AD. Since I’m running Exchange here and my personal phone is connected to it, it turns out that Exchange creates this account for “Active Sync” devices. In my case, Exchange stores information about my Windows Phone:

Information stored include last four digits of the telephone number, carrier, build number of the OS, it’s name and the user agent. Ha.
The objects are of objectClass msExchActiveSyncDevice as you can see in the CMD. I specifically asked for it in ADFind. Note that the objects have special security applied to them, so “normal” users can’t read them.
In the case of Windows Phone, you could check who in the company has already updated to Mango (msExchDeviceUserAgent=*.7720) and so on. Funny and scary that info is around at the same time.