Device authorization is not supported by ActiveSync clients. ActiveSync clients will not be able to connect on zones that have Device authorization enabled.
The profiles only work with an ActiveSync stream because that is the only way to obtain the device value.
Only ActiveSync for Exchange is supported in this release.