None that I am aware of, I don't really see a point though, only enable activesync for the users who need it, and have some kind of password lockout policy that will stop a device from trying to guess ...