We had an auditor come in and asked us to get a report on users that currently have ActiveSync and OWA enabled. And here is a powershell that allows you to get those information and save it to a file.
get-casmailbox -resultsize unlimited | ft DisplayName,ActiveSyncEnabled,OWAEnabled | Out-File c:\result.txt
I am still trying to find a way to set both ActiveSync and OWA to disabled for any new users. Please feel free to comment if you have anything in mind. I have seen a couple of examples for Powershell which work, but I am not necessarily the only one creating new users and they may have not access to powershell.