Exchange ActiveSync uses DeviceID as the second factor. The session of the DeviceID is controlled by the session policy. If you want to change the default session settings, then you need to create a custom session policy for Exchange ActiveSync.
Overview
Content Tools