Database Users

How to bypass Device Policy Enforcement (Exchange SP2 MFSP)?

Since my last ROM update with AKU2 my Exchange provider (1&1/United Internet) enforces me to use a password, which I definitely do not need.
Is there a way to bypass this policy, maybe a hack?

This has to be set at the exchange administrator level.
You can specify users/devices to ignore policy for but you'd need to get 1&1 to do this.

I know. But 1&1 won't do this, I'm afraid. So I'm looking for a cheat on my side.

You might find that trying to bypass their policy setting might be a breach of their usage conditions.
I know it must be a pain but I think we need to remember the background of why Push email was set up - for corporations wanting to allow employees to access mail on the go and also to secure their environments for mobile access at the same time.

Disable password for Microsoft exchange

Anyone know how to disable the password for receiving corporate mail via microsoft exchange? It is v irritiating to key in password every 30 mins which is permanently set for microsoft exchange under my company policy. I can't turn off the password input once I installed the certificate cab given by my company.

madster said:
Anyone know how to disable the password for receiving corporate mail via microsoft exchange? It is v irritiating to key in password every 30 mins which is permanently set for microsoft exchange under my company policy. I can't turn off the password input once I installed the certificate cab given by my company.
Click to expand...
Click to collapse
Are you referring to the device lock password? In other words if the phone is idle or in standby (just not being used) for 30 min or an hour, you need to enter a password to get back to the Today Screen? Or do you mean the password used by your Exchange server to connect and sync your email (the password that goes with your User ID and Domain)?

If the password is set by the EAS policy, you can only disable it temporarily - have a read of this post and this post for a couple of suggestions....
Hopefully one or both will prove helpful to you
Mark.

Mark Crouch said:
If the password is set by the EAS policy, you can only disable it temporarily - have a read of this post and this post for a couple of suggestions....
Hopefully one or both will prove helpful to you
Mark.
Click to expand...
Click to collapse
This is not entirely true. You can the prevent / disable the EAS password enforcement permanently if you prevent a registry key from being re-written. Or just "watch" it and overwrite it automatically every time it changes.
The link you referenced in the other thread, here, will only work until the next Exchange Server policy is pushed to the device. That can be several times per day. Here's a utility that will run in the background and PREVENT the policy from being applied indefinitely. I've used it for a couple of years with no issues.
Of course, if this isn't the "password" that madster is referring to then this won't help. But if it is then here's your solution. May your IT Dept have mercy on your soul....

Dear both thanks for the advise. Let hope it'll work before the next security updated.

hotmail said:
Here's a utility that will run in the background and PREVENT the policy from being applied indefinitely. I've used it for a couple of years with no issues.
Click to expand...
Click to collapse
Now, that's a neat utility - thanks for sharing @hotmail
Cheers,
Mark.

Company policy blocked additional emails and Windows Live

Hi
I have a personal phone (Niki) on which i managed to get my company's OWA (outlook web access) emails onto my mobile outlook along withh all my calendar, task and so on. Quite interesting but, recently the company merged mine and all other mailboxes in the company to a different server and since then i get a message every time i need to set up another email (a private one for instance) to recieve my personal emails or even Windows Live functions like Messenger on my phone it comes up with the same error message.
The message says my company policy has blocked this program or that it does not allow me to configure any additional emails. I'm connecting via 3G or GPRS (whichever is available), so no company WIFI here or anything and the phone is my own too. Any suggestions?
PLEASE HELP!!!
Paul.

paulinhosoares said:
Hi
I have a personal phone (Niki) on which i managed to get my company's OWA (outlook web access) emails onto my mobile outlook along withh all my calendar, task and so on. Quite interesting but, recently the company merged mine and all other mailboxes in the company to a different server and since then i get a message every time i need to set up another email (a private one for instance) to recieve my personal emails or even Windows Live functions like Messenger on my phone it comes up with the same error message.
The message says my company policy has blocked this program or that it does not allow me to configure any additional emails. I'm connecting via 3G or GPRS (whichever is available), so no company WIFI here or anything and the phone is my own too. Any suggestions?
PLEASE HELP!!!
Paul.
Click to expand...
Click to collapse
This sounds like an Exchange ActiveSync policy being pushed down to the device? Are you sure you aren't using ActiveSync with your company Exchange server(s)?. The Exchange policy can be very restrictive if your company/admins want it to be - Strong alphanumeric passwords, forced password timeouts, you can also disable memory cards, cameras, WiFi, infrared, Internet Sharing, Desktop Synchronisation & Bluetooth. Plus as it looks like you have, you can disable consumer email, as well as web browsing, installation of unsigned applications and execution of unsigned applications. You can even specifically deny or allow certain applications to run.
If it is an Exchange ActiveSync policy then there are workarounds by editing the relevant registry entries that enforce the policies, however if the policy is configured to refresh at regular intervals then the workaround will only be effective until the next policy refresh. There are some tools available that will reset the policy for you instead of you manually changing the registry entries. There is also a tool (search Zenyee.com Stay Unlock.cab) that runs in the background and resets the policy each time it is enforced by the refresh. Be careful though as you could get yourself in hot water by bypassing your company security policy?
Fortunately the Exchange policy that is enforced on my device isn't as restrictive as yours and only enforces a password with an inactivity timer of an hour. This can still be a pain though when using TomTom or other applications where you physically don't touch the device for a period of time - Fumbling around whilst driving seems a much worse offence than not having a password to enter every hour
Andy

Hacking to clear security settings created by lotus traveller

My company which uses lotus traveler to enable access to corporate mail and calendar on WM devices. I installed this on my HTC HD running WM6.5 (Dutty Leo ROM). The installation has forcing us to use strong alphanumeric passwords and also greyed out the "prompt if unused for" radio button where you would typically turn off the phone password locking. This has rendering the phone virtually unusable as it takes 3 mins to enter a strong alpha password each time you use the phone...brilliant!
Is there a hack/registry edit that I can use to un-grey this button so I can turn it off and start using my phone normally again.
Any suggestions would be appreciated...

It's probably not related to the Lotus Traveller itself, but with the company enforced policies included in the CAB file - I presume You got the CAB from the company, not the Lotus/IBM website. At least that was the case in our company, that they forced to use the simple PIN lock with Exchange sync - I was already bothered by the simple PIN, so I dropped the whole idea. But I suggest You take a look in the CAB file, if You can still get it and see what changes does it make in the registry. Or You can also ask from Your company IT guys about the WM policies they have to enforce, they should know.
Anyway, hope You have some directions to go now.

Thanks for the suggestions....
1) I tried removing the lotus traveler application - this had the effect of removing the security enforcement. I reinstalled it and it was enforced again.
2) The traveler application launches automatically when the phone boots up. So I removed it from the startup sequence. Unfortunately this did not solve the problem. So I think there must be a registry setting somewhere that is set and monitored by the application.
3) I also looked in the setup.xml file that was in the traveler.cab installation file. I could not find any registry mods that were related to security.
4) The traveler release notes say the following: Customizable device password strength enforcement rules!
Traveler provides a built-in set of default device preferences and security settings that an administrator can modify for use when a device initially registers with Lotus Notes Traveler. The default device settings for users come from the Traveler administration database default device settings document. Users can change their device preference settings from their devices, but only an Traveler administrator can change device security settings.
Suggestions?

In the last few days I have browsed the registry quite thoroughly and there doesn't appear to be key that controls whether radio buttons are active or not (greyed out). I was hoping to make the "prompt if unused for" radio button active again so I could manually switch it off.
I'm out of ideas....any suggestions pls

i have lotus traveler installed on my tp 2 i have flashed my phone many times and reinstalled lotus and have had no problems. can you post a screen shot.

Security Policy
Hi
I am a Notes admin and can confirm this is a polcy that has been set to secure company data on mobile devices. Most companies have a policy that requires company information/access be secured especially on things like mobile devices.
Think about it, your company email system would be available to anyone stealing or finding your phone. While this may not worry you, it could be a cause for concern for your company executives or auditors - and could be a compliance issue in many industries.
The policy is set on the email server itself and pushed down and enforced on the device so it cannot be bypassed.
To remove it or get a less secure PIN you will need to speak to your company Lotus Notes admin.
This is an issue I have seen before and can cause conflicts between employees who use their own phones and resent the way they use them being changed and those concerned with securing and protecting their company.
Hope that helps but the long and short is speak to your email admins. The security policy is not default so someone must have set it up that way for a reason.

MIUI used to have an option to disable the password option even when it is enabled/enforced by Notes Traveler. However the new versions of miui do not have this.
Check this link
http://miuiandroid.com/community/th...en-security-has-been-removed-fro-1-7-29.8941/

why not have the security measures focus on the app?
paulbenwell said:
Hi
I am a Notes admin and can confirm this is a polcy that has been set to secure company data on mobile devices. Most companies have a policy that requires company information/access be secured especially on things like mobile devices.
Think about it, your company email system would be available to anyone stealing or finding your phone. While this may not worry you, it could be a cause for concern for your company executives or auditors - and could be a compliance issue in many industries.
The policy is set on the email server itself and pushed down and enforced on the device so it cannot be bypassed.
To remove it or get a less secure PIN you will need to speak to your company Lotus Notes admin.
This is an issue I have seen before and can cause conflicts between employees who use their own phones and resent the way they use them being changed and those concerned with securing and protecting their company.
Hope that helps but the long and short is speak to your email admins. The security policy is not default so someone must have set it up that way for a reason.
Click to expand...
Click to collapse
so why not have the security measures focus on securing the app and the app data? personally, I don't mind the 24/7 emails...but making me lock my phone so the company can blow up my phone at 7pm on a sunday...LAME.

Are there any news? I would like to remove the LockScreen security and want to use ibm verse.

[Q] Avoid PIN for activesync

Hi all,
Just started using activesync towards Exchange server and had to enable the phone lock to get it working (due to Exchange server security policy).
Activesync works great but overall phone usability has decreased considerably when I have to type a 6 digit PIN code everytime I want to use the phone for calls, check calender, run appl etc.
Is there any way to
1) Limit need for password input to only reading mails using Outlook
2) Make sure I only have to type PIN if I havent used the phone for an extended period? Right now I need to type PIN everytime the phone has been in standby..(despite 15 min timeout setting in security lock settings)
3) Cheat phone to accept 3 or 4 PIN code instead of the default 6 PIN.
4) Bypass exchange server policy and remove need for PIN completely (keeping activesync working of course)
Any advice will be highly appreciated!
Best regards
Jens