With OAuth, new syncing setups would involve creating a new authentication token so first and subsequent syncs would be quite different.

But this is Exchange we're talking about, it sure as hell doesn't use OAuth, and I doubt Microsoft have bothered to create such a scheme themselves.