Company policy blocked additional emails and Windows Live - Networking

Hi
I have a personal phone (Niki) on which i managed to get my company's OWA (outlook web access) emails onto my mobile outlook along withh all my calendar, task and so on. Quite interesting but, recently the company merged mine and all other mailboxes in the company to a different server and since then i get a message every time i need to set up another email (a private one for instance) to recieve my personal emails or even Windows Live functions like Messenger on my phone it comes up with the same error message.
The message says my company policy has blocked this program or that it does not allow me to configure any additional emails. I'm connecting via 3G or GPRS (whichever is available), so no company WIFI here or anything and the phone is my own too. Any suggestions?
PLEASE HELP!!!
Paul.

paulinhosoares said:
Hi
I have a personal phone (Niki) on which i managed to get my company's OWA (outlook web access) emails onto my mobile outlook along withh all my calendar, task and so on. Quite interesting but, recently the company merged mine and all other mailboxes in the company to a different server and since then i get a message every time i need to set up another email (a private one for instance) to recieve my personal emails or even Windows Live functions like Messenger on my phone it comes up with the same error message.
The message says my company policy has blocked this program or that it does not allow me to configure any additional emails. I'm connecting via 3G or GPRS (whichever is available), so no company WIFI here or anything and the phone is my own too. Any suggestions?
PLEASE HELP!!!
Paul.
Click to expand...
Click to collapse
This sounds like an Exchange ActiveSync policy being pushed down to the device? Are you sure you aren't using ActiveSync with your company Exchange server(s)?. The Exchange policy can be very restrictive if your company/admins want it to be - Strong alphanumeric passwords, forced password timeouts, you can also disable memory cards, cameras, WiFi, infrared, Internet Sharing, Desktop Synchronisation & Bluetooth. Plus as it looks like you have, you can disable consumer email, as well as web browsing, installation of unsigned applications and execution of unsigned applications. You can even specifically deny or allow certain applications to run.
If it is an Exchange ActiveSync policy then there are workarounds by editing the relevant registry entries that enforce the policies, however if the policy is configured to refresh at regular intervals then the workaround will only be effective until the next policy refresh. There are some tools available that will reset the policy for you instead of you manually changing the registry entries. There is also a tool (search Zenyee.com Stay Unlock.cab) that runs in the background and resets the policy each time it is enforced by the refresh. Be careful though as you could get yourself in hot water by bypassing your company security policy?
Fortunately the Exchange policy that is enforced on my device isn't as restrictive as yours and only enforces a password with an inactivity timer of an hour. This can still be a pain though when using TomTom or other applications where you physically don't touch the device for a period of time - Fumbling around whilst driving seems a much worse offence than not having a password to enter every hour
Andy

Related

Push email through wifi

I am wondering whether push email is functioning through wifi on the prophet? I have wifi coverage over my city, and would prefer it then getting billed for GPRS...
Push Email client from Microsoft will not work over WiFi, it is meant to generate business for mobile providers
But Siemens and other mail server solutions companies offer push email over WiFi for WiFi Providers - but I think no one is offering it yet.
Note: Be carefull with push email over GRPS. Depending on individual settings this can generate a lot of traffic without downloading a single email. One engineer told me about 15 megs traffic just for polling the Exchange server, without downloading a single email. Of course you can work out conservative settings, but better get a GPRS or UMTS data flat...25 euros here in Germany (www.base.de)
Are you 100% sure of this?
Microsoft's implimentation of Push e-mail uses HTTP(S) so therefore should not be limited to the transport unless the implimentation is restricted on the device in some way?
All the information I have totally contradicts your statement, can you please justify it can as I fear it is absolutely incorrect.
Dear, I don´t have to "justify" anything. Do your own research, ask Microsoft MSDN like I did, and then write about it. Enjoy.
PS: The original question was - as I understood it: Can MS push email client for Mobile 5 work over WiFi.
Why you do not use POP3/SMTP or IMAP through WiFi ?
Thanks guys
Thanks Lucas, I think that pretty much answers my question.
Cheers.
You can setup a schedule like i did in activesync to poll email over wifi every 5 min and disable push.
If you want to use gprs, then just change schedule to sync as new items arrive and enable push in comm manager
What happens when out of wifi range?
Jamichy, what happens if you go out of wifi range with your settings? Do you get an error message or something you then need to respond to each time you are out of range?
Usually, activesync will try to sync, but does not generate any notifications. If I launch activesync, it shows me the time of last sync with exchange server on top line.
If i leave push settings on, and connect to wlan, Activesync Generates an "Attention Required:To syncronise you need to have a cellular network connection" message...
So when I'm at home or work, i disable push, and on the road i keep push enabled. BTW, Direct push can work using both GPRS web and wap settings

Push Email with Exchange Server?

Hi all, im kind of new to this but i just read about push email with exchange server and i was wondering how i could use it with my mda vario. I've already installed an updated rom with push email but i dont know how to use it. can any one fill me in on this? thanks for any help.
You need a Exchange 2003 server with at least SP2 installed. Also a UMTS/GPRS connection because is not working over WIFI.
Bitfrotter 8)
Go to www.mail2web.com, sign up there. Than put the settings from the website in the Exchange Server settings in Active Sync on your PPC. Set your current email address to automatically forward your email to your mail2web email address. Enable GPRS and enable push email from the Comm Manager and bingo, push email is yours.
Ok, ive already signed up with mail2web but i want to automatically retrieve hotmail emails. i don't see an option on hotmail to forward all my emails to mail2web. am i missing something here? sorry, im inexperienced and all and these are probably lame questions and all. but please help me out. after reading that article i got hyped up in doing this. thanks for any replies.
Bitfrotter said:
You need a Exchange 2003 server with at least SP2 installed. Also a UMTS/GPRS connection because is not working over WIFI.
Bitfrotter 8)
Click to expand...
Click to collapse
I've gotten DirectPush to work over WiFi... Maybe that was an earlier ROM version though... I don't recall the circumstances under which I got it to work.
MS says that Direct Push does not work over WiFi. WiFi does not allow disconnected connections (in other words, a connection that allows for the data stream to be suspended). If WiFi did it, it would require a continuous connection that would drain the batteries at a very rapid pace.
Setting up Exchange for Direct Push is pretty easy. I set up ours in about 5 minutes.
One of the coolest things you can do with a correctly configured Exchange 2003 system is with the Mobile Admin pack (free download from MS). It allows you to tell the PDA that it needs to "self-destruct" in case the phone is stolen. A remote wipe will do a hard-reset on the phone, deleting all data not stored on an external SD.
I usually get my email on the MDA faster than Outlook on my desktop.
If any Exchange admins are out there, I can post how to set it up if anyone needs help.
exchange/activesync
Yes please!
Hotmail has deleted the possibility of forwarding mail automatically a few years ago in the free version, only Hotmail Plus subscribers can use this option. With gmail however it is still free. So a basic hotmail account will not be able to use Push over Exchange. You can however sign in to MSN Messenger on your device and will then be notified as soon as an email arrives on the hotmail server. This will cost you extra data charges though, since contacts coming online will also result in data transfer to your device.
Romp said:
MS says that Direct Push does not work over WiFi. WiFi does not allow disconnected connections (in other words, a connection that allows for the data stream to be suspended). If WiFi did it, it would require a continuous connection that would drain the batteries at a very rapid pace.
Setting up Exchange for Direct Push is pretty easy. I set up ours in about 5 minutes.
One of the coolest things you can do with a correctly configured Exchange 2003 system is with the Mobile Admin pack (free download from MS). It allows you to tell the PDA that it needs to "self-destruct" in case the phone is stolen. A remote wipe will do a hard-reset on the phone, deleting all data not stored on an external SD.
I usually get my email on the MDA faster than Outlook on my desktop.
If any Exchange admins are out there, I can post how to set it up if anyone needs help.
Click to expand...
Click to collapse
that would be awesome if you know of a tutorial anywhere on this..
so by creating an exchange server as romp said, you can sync any email including hotmail? well that's really a bummer that microsoft disabled forwarding on hotmail. Its mainly my primary email which all my friends/family know. so it would be a miracle if anyone knew how to sync hotmail without subscribing to their hotmail plus.
Well, getting outside emails are a bit more complex. This is usually for a business, but there are plenty of POP-to-Exchange plug ins that would allow getting Hotmail emails. Of course, you would need the Hotmail Plus for the POP.
http://www.slipstick.com/exs/popconnect.htm
My answer was more concerning the Exchange Direct push question, not the hotmail one.
Where I work (yes, I did set up the Exchange system) we have GFI spam filtering and virus filtering (www.gfi.com) and they have a POP2Exchange bridge included. It just checks the account, downloads any POP emails, and drops it in the right mailbox.
Exchange is a complete system, not just mail. It has webmail, Windows Mobile direct push, calendar, contacts, and more. Unless you are in a company with Exchange or Small Business Server, its not a cheap thing to do for a home network.
If you DO have Exchange at your office, run to the IT guy and hurt him until he sets your phone up on it. Its all the functionality of Blackberry and more, built into Exchange.
I'll write that tutorial, g0nk.
ok so if we go the mail2web route... i dont need to install exchange 2003 on a pc myself? does it only work on windows server 2003?
im interested in doing this at my job but i want to make sure it is not too difficult
edit.. well we have our own domain email addresses so the [email protected] is not an option..
any suggestions?
Romp said:
Exchange is a complete system, not just mail. It has webmail, Windows Mobile direct push, calendar, contacts, and more.
If you DO have Exchange at your office, run to the IT guy and hurt him until he sets your phone up on it. Its all the functionality of Blackberry and more, built into Exchange.
I'll write that tutorial, g0nk.
Click to expand...
Click to collapse
1) Agreed
2) I am the IT guy and it don't work on our server - the rootcertificate won't install to the PPC - an MS acknowledged problem............
3) Please forward ASAP !! Thanks !! :lol:
Is it a self published cert? Because you CAN get any externally issued cert to work just fine. We use a $15 GoDaddy cert with no problems.
The big screw up most people have with the cert (myself included) is that the cert is not correctly installed, even though it says it is.
Cheaper certs are called "Chained" certs. All certs need a path back to one of the big cert companies. So, companies like GoDaddy get approved to be second level cert issuers. IE on the PC will look at the cert and track it back to the main cert issuer. For example, the cert on GoDaddy goes from GoDaddy, to Starfield, to VeriCert. The VeriCert certificate is installed on all PCs.
Anyway, the problem is that the PC can follow an undefined cert path, the PPC can't. If you install the cert on the server, IE on the PC can figure out the whole path, PPC can't. So, the big thing is to make sure the MIDDLE CERTS are installed on the server. Even though everything seems fine, chances are that the middle ones are not (in this case STARFIELD)
The easiest way to find out if the cert is valid or not is try to get to your webmail on PIE. If you get a message about the cert, your server is not set up completely.
For my server, I had no luck until I found the Intermediary Cert and installed it. https://certificates.starfieldtech.com/Repository.go
Once that was done, my GoDaddy cert worked on the PPC and syncs went perfectly. Once the server has all the certs in the cert path installed, the PPC can validate each level. Until then, its clueless. Most people think you need to install the cert on the PPC. Its the server that needs it.
Does the self published cert only cause problems with direct push? I've got the "old" polling method working. I created a root CA on my server to sign the cert created for the web server and then turned that root CA into a CAB which was installed on the PPC. I should say that my phone doesn't have an AKU 2.xx rom on yet so I've not tested push mail.
This is all outlined in the following doc :
http://www.microsoft.com/technet/itsolutions/mobile/deploy/msfpdepguide.mspx
Also look at http://support.microsoft.com/kb/817379 if you are running a non sbs2003 exchange server in a configuration that doesn't have a front end/back end exchange server configuration. As there are some minor tweeks needed to the registry and to the default web server setup.
If you can do a remote Activesync, then DirectPush will work just fine.
A newbie Direct Push question:
I upgraded my 8125 ROM to the official Cingular June 19 version, and direct push SEEMS to be working great my my Hosted Exchange provider. When new email comes in to my Exchange server and/or a task / calendar / contact is changed on the desktop Outlook client, those get pushed quickly to the 8125.
Problem is, it doesn't seem to work in reverse. For example, IF I get an email pushed to me on my PDA, I read it and delete it on my PDA.....that deletion action is NOT getting syncronized back to my Exchange server. Is that by design, or is indeed something wrong?
Thanks in advance!
not sure if it helps, but you can change when pocket outlook deletes mail, there are 3 options:
on connect/disconnect
immediately
manually
I dunno if changing that will help you at all, but its in the pocket outlook options.
I'll shut up now, in case I misunderstood
jmel said:
not sure if it helps, but you can change when pocket outlook deletes mail, there are 3 options:
on connect/disconnect
immediately
manually
I dunno if changing that will help you at all, but its in the pocket outlook options.
I'll shut up now, in case I misunderstood
Click to expand...
Click to collapse
I appreciate your reply, but my question is beyond that......it centers around Driect Push.....my thinking is, regardless of that setting you referred to, once the email is deleted on the PDA, the PDA should "reverse-push" that deletion to the Exchange server, and mine does not seem to be doing that.
I hope that is a little clearer?
No, his answer was right. The reverse of the Push is not the same. You have to set the options as Jmel suggested. Its basically to save data.
This allows you to go through your mail, delete all your spam and crap, then update the server. Doing so immediately would be a waste. Recieving/sending emails is considered vital, deleting them...not so much.

Cingular Email in a nutshell

nooblet here ...I did a search but did not find a comprehensize guide to telling me all of the types of email options I have So I Was hoping some one would be so kind enough to explain to this me.
Xpress mail from cingular ...umm you just add in all your email accounts to it and it send it out ?
Direct Push ( new from Microsoft ...have to have exchange server up)
Data ( some reason I like this ... I have the unlimited media works package and I get unlimited data ...so I have my email IMAP'ed and set to check ever 10 minutes) it uses data connection ..but I have unlimited so I dont care...
I really dont see why people would want the direct push as apposed to the data ...any way some one can explain all the options a person has with some pro's and cons of each ?
Thanks
Data is just a data plan that you purchase for Cingula, similar to purchasing minutes for your voice calls. It has nothing to do with email. Without the unlimited data plan though you'd get hit with a whopping big bill.
IMAP4 is an email protocol that leaves a copy of your messages on your server and downloads the headers, making it faster than POP3 and easier to manage IMO.
Direct Push requires an Exchange 2003 or later server and is what makes this device a true Crackberry Killer. IMAP4 and POP3 are polling email clients that one configures to check their mailbox on a periodic basis. Direct Push enables our emails to be pushed out to the device whenever the server receives a new email. In addition our Calendar, Tasks and of course Contacts are also synced in realtime.
Hope I was of some help.
geekserver said:
nooblet here ...I did a search but did not find a comprehensize guide to telling me all of the types of email options I have So I Was hoping some one would be so kind enough to explain to this me.
Xpress mail from cingular ...umm you just add in all your email accounts to it and it send it out ?
Direct Push ( new from Microsoft ...have to have exchange server up)
Data ( some reason I like this ... I have the unlimited media works package and I get unlimited data ...so I have my email IMAP'ed and set to check ever 10 minutes) it uses data connection ..but I have unlimited so I dont care...
I really dont see why people would want the direct push as apposed to the data ...any way some one can explain all the options a person has with some pro's and cons of each ?
Thanks
Click to expand...
Click to collapse
Direct Push is great for people who are running Exchange, as new messages are queued up and copied over to your device automatically, as opposed to POP3 or IMAP where your device polls the mail server periodically for new E-mail.
Its whatever you prefer... direct push is mainly intended for companies who want to ensure employees get internal E-mail. Also, with the Microsoft Messaging and Security Feature Pack which comes on some new Windows Mobile 5 devices, companies can push out policies to the devices, for example requiring a password of x character length, 15 min timeout, hard reset device if wrong password typed in more than x amount of times, and other items, which makes IT and auditors able to sleep at night.
I personally use POP3 over SSL. It doesn't "guarentee" that E-mail winds up on the phone, but since I'm not doing anything business-critical, that is OK for my needs. Your needs/wants may be different, though. If you absolutely have to have mail on your phone due to clients and mission critical information, you might see about an Exchange hosted provider.
Pros of Direct push: Syncing of contact info (like the above poster stated), "Guarenteed" E-mail on your phone, security policies enforced, ability to remotely wipe your device should it get lost or stolen (assuming the thief hasn't yanked your SIM card and swapped his in.)
Cons of Direct Push: Need Exchange Server 2003 SP2 to access the features of it, so you need to run Exchange on a machine that is on the Internet, or use an Exchange hosted provider. HP offers this service for around $15-$20 a month.
Pros of POP3/IMAP: Internet standards, straightforward.
Cons of POP3/IMAP: Insecure unless your ISP allows for the use of SSL, no "guarentee" that E-mail winds up onto your phone.
wow cool
so I guess for me I will stick to my data plan. I just wish Cingular had a faster data serivce and better coverage .
THANKS a bunch !
Cingular is actually rolling out 3G service and they claim it will fully be implemented by the end of the year (hopefully!)
I've been using the Push Mail function since it was released ... which is really a good alternative to a CrackBerry though it still need more development say at least 2 more years before if could be considered a real competition to the CrackBerry. ... (i hate these ugly so called devices - blackberry)
you can actually get an exchange service for 10 bucks a month for a mailbox which isn't bad. The advantage of getting an exchange mailbox is the just mere fact you can have a "synchronized" mailbox on your mail application (on your laptop or desktop ... even on a Mac which i have set up), on the webmail and obviously on your pocket pc. i like the functionality of using this over POP because the synchronization is real time and there is not dependancy on locally sync-ing your device on your laptop/desktop just to update your contacts and your calendar.
POP3 doesn't give you that synchronization and if you like to have ALL FOLDERs synchronized ... getting the 10 Bucks a month exchange service is well worth it.
Obviously push mail services are designed for the business user and powerusers ....if you don't need this then don't even think the higher end pocket pc's available ....
US Carriers are so slow on selling higher end PDAs and phones ... the selections on T-Mobile and Cingular suck ... how can you accept that they just released their versions of the HTC Wizard while several flavors of the HTC Hermes are now available ... Cingular and T-Mobile USA should also think about adding BlackBerry Connect on their devices just like everybody else in the non-american world ....
Note that IMAP can also be used (in most cases) in a "Push" form. The "IMAP IDLE" function establishes a connection and waits for new messages to arrive, at which time they are immediately announced to the device. Extremely handy when properly implemented. You need a compatible client, of course. Apparently the latest test builds of FlexMail will handle this, though I have not tried them yet.
Our company is paying Cingular $5 per month per user for the Push Mail service over and above the unlimited data plan. We have been told not to use it while roaming (even in Canada) as it will cost us a fortune. But, the push mail seems to be very robust and per IT, it was very easy to setup and ofcourse the phone needs to be upgraded to the latest ROM available on the cingular site.
Cingular's charging for Push Mail? ... That would only happen if Cingular is also maintaining your exchange server. If you have your own Exchange server it should be fine.
I've never paid above my unlimited internet access feature.
How come no one has mentioned mail2web.com Live. This is exchange push email that is free. You just forward your email to their server and set your mail settings in Active Sync from the mail2web site.
I have been using it for six weeks and it is great. Sometimes I get the email before I can get it on outlook.
mail2web.com looks good but i just talked to them and if you have your personal domain name (like i do), it would cost you the same price as the other exchange services out there ... the free version and the personal exchange options do not support personal domains.
sorry i'm a geek through and through ... he he he
C

Microsoft Exchange Server

I am trying to configure Microsoft exchange server to get my work emails on my universal.however even though i have my setting all ok,and pda is connecting to internet,no emails are being downloading.
I am getting message that folders have been synchronized but email are neither being sent and received.
tried to speak to my works IT guys who are insisting all settings are OK.
funnily enough i configured my pals pda ,who happens to have a universal like me but using a different phone company ,and all worked beautifully.
when i contacted my phone company they said that all is ok from their side,but I still am not succeeding.
any idea guys?
I think they should enable a certain service. With me all worked fine untill a partly HD crash, now I can still get e-mail into Outlook, but not to my PDA any more. I believe it has to to with Public Directories. At least that's the part what's wrecked in my server.
Good luck!
Bas
OP, I'm assuming you are referring to DirectPush, I would double check with IT that you have your account enabled for User Initated Sync, and that you have all options configured identically to what IT gave you. Specifically, it could be that your company is using SSL and you have yet to export the certificates that are needed to your phone, rendering it unable to sync.
Urthwhyte is right about the ssl, installing it is a simple as accessing the certificate file though your file manager. You might also be experiencing the same problem I am, where your service provider doesn't accept your businesses certificates (doesn't apply to wifi connects).
If you really want it to work and you don't care if ppl pull the data off the air, you could disable ssl if it's not required.

Exchange security policy

I've read a few threads after searchign on Android and Exchange but can't really find what I'm after.
I need to enforce a security policy if users want to sync their exchange account. There's a few people in the office who want Android devices (we provide them with a device) but until there's somethign which enforces something along the lines fo a PIN after 20 mins ala WinMo then we can't do it.
Anyone have any ideas if it's coming or if there's an app to do it? I've tried Touchdown but just seems the same as the Hero Exchange app to me.
I've not tried Touchdown, but they say they support PIN enforcement.
http://www.nitrodesk.com/dk_touchdownFeatures.aspx
Regards,
Dave
Yes, Touchdown and Roadsync both support the PIN function (they ignore it somehow, as android doesn't have a PIN function!)
although i do believe that it is technically possible to exclude individual accounts from the policy on the server (although not exactly the best idea in terms of security).
Alternatively, just do what we did at work and say 'No, you cannot have an Android Phone for your Work Phone'.
Since the ROM update on the HTC hero, I have been able to access my work email (a massive highly secured company who generally know what they are doing) and I know for a fact that they enforce this kind of security arangement on mobiles that want to connect - however android has somehow got around this and there is no remote enforcement and I can use my phone for these emails via PUSH. (I use the gesture lock as a password) You could get them to sign an agreement that they will apply this kind of thing to their phone manually. I don't know if there is an app for remote wipe.
Your company isn't allowing you in some backdoor or anything... depending on their version of exchange they are simply allowing you to use activesync through exchange.
What we all really need is an andriod client to take advantage of exchange 2007's exchange web services protocol, activesync is old technology and limited.
O.P. - You can limit users on a single user basis, if you're running windows active directory. Need a little more info on what you are trying to accomplish. If you're allowing them to use their mail client setup they are saving a password that is not clear text and is hashed... you can install a remote wipe on the phone and if they lose it, simply wipe it and forget it.

Categories

Resources