Does anyone know how to make an ASOP Rom support Exchange 2007 security requirements? Whenever I try to add the account I get a message which says something to the effect of "Exchange requires features you phone does not support". Exchange wants you to have to enter a passcode every time you unlock the phone.
Stock eris and stock-based roms support it and so does the motorola droid.
Is this something where I can possibly just copy over a system apk to make it work or is it deeper in the code? I changed the email apk to the one from the droid but that didn't do anything. Has anyone ever ported a version of the motorola droid to the eris? Am I way off on the approach?
Thanks in advance for any ideas!
You'll have to be more specific. I have not yet had problems getting my exchange account to work properly on any ROMs, including the Kaos 2.2 v24.
Sent from my Eris using XDA App
You have to enable security on them. When I used 2. 1 romsI used lockpicker from the market. It will disable the need from having to type in password every tIME you lock phone but still make the server think its enabled. FYI kaosfroyo works too and no need to enter password. Only draw back is you have to reenable everytime you power down phone.
Sent from my FroyoEris using XDA App
isaycrikey said:
You'll have to be more specific. I have not yet had problems getting my exchange account to work properly on any ROMs, including the Kaos 2.2 v24.
Sent from my Eris using XDA App
Click to expand...
Click to collapse
That's weird. Our company must have different security requirements if you are getting it to work on the Froyo ROM because I've tried every kind of lockscreen setting I could find. I found this thread which basically says Exchange is only partially supported by Froyo. I know we require password history and expiration which must be the culprit. code.google.com/p/android/issues/detail?id=9426.
So HTC and Motorola must have added something which adds that expiration and history feature. Since it's security related I'm guessing it's more than just an apk. Can the .so files be moved across ROMs? Anyone have a guess at which one may contain this feature?
vtjiles said:
That's weird. Our company must have different security requirements if you are getting it to work on the Froyo ROM because I've tried every kind of lockscreen setting I could find. I found this thread which basically says Exchange is only partially supported by Froyo. I know we require password history and expiration which must be the culprit. code.google.com/p/android/issues/detail?id=9426.
So HTC and Motorola must have added something which adds that expiration and history feature. Since it's security related I'm guessing it's more than just an apk. Can the .so files be moved across ROMs? Anyone have a guess at which one may contain this feature?
Click to expand...
Click to collapse
Exchange 2007 sync is working for me on KaosFroyo V24 as well. My company also enforces password history and expiration, but no issues here. By the way, no lockscreen security is set on my Eris.
Did the sync work for you on 2.1? If not, your Exchange admins may have to enable it on your account. Sounds like it could be something setup by your employer. It doesn't hurt to ping an admin and see what they say...
g00gl3 said:
Exchange 2007 sync is working for me on KaosFroyo V24 as well. My company also enforces password history and expiration, but no issues here. By the way, no lockscreen security is set on my Eris.
Did the sync work for you on 2.1? If not, your Exchange admins may have to enable it on your account. Sounds like it could be something setup by your employer. It doesn't hurt to ping an admin and see what they say...
Click to expand...
Click to collapse
The sync was working on HTC 2.1, but not on any 2.1 ASOP ones.
But, after talking to support they switched my policy group and, of course, now it works so my apologies for being an idiot and putting this in a development forum. I honestly thought the ASOP roms just didn't have that functionality and was hoping there was a way to flash something that would make it work.
Related
i have just set up an exchange email on my hero, however my company policy requires pin setup compulsory on my set.
I used to have lockpicker on my 2.1 but seems like that doesnt work on vanilla, is there another software that you guys can recommend?
TIA!!!
All Androids that our company supports install Touchdown.
It is a paid app but once we started using it we have no more issues with PIN issues.
Sync's everything including tasks which the stock app does not do.
Thank you.
10char
Does anyone know if lockpicker will be updated to support 2.2 or if another app is out that has the same features? I tried emailing the dev for lockpicker but he has gotten back to me about supporting 2.2. HTC droid incredible on froyo w/sense.
figured no point in starting new thread to ask the same question (i dont want to use touchdown)
Thanks
NM found this post xda-developers.com/showpost.php?p=7182615&postcount=88
I guess lockpicker or other same type of app won't be available for a little while
Check the thread in my signature. I have written an app which strips out the relevant parts of code in the stock email apk and the sense mail apk on froyo.
Have a question though. I added my work email to my account and the only way it would work was to add a pin when unlocking my screen. Is there any way to disable this besides removing my work email account?
Thanks.
My wife uses an app called Lockpicker to disable it on her Hero, which works pretty well. I think it might only work on Sense devices, but you can give it a try.
smooney3 said:
My wife uses an app called Lockpicker to disable it on her Hero, which works pretty well. I think it might only work on Sense devices, but you can give it a try.
Click to expand...
Click to collapse
No go on 2.2
When my friend got froyo on his phone he looked into it and it requires rooting and somethingsomething (so I wasn't paying attn... ) but it's possible!
mynewepic10 said:
Have a question though. I added my work email to my account and the only way it would work was to add a pin when unlocking my screen. Is there any way to disable this besides removing my work email account?
Thanks.
Click to expand...
Click to collapse
This is not a glitch, it's a the phone complying with the AD email server's security requirements. If you have a problem with this, the appropriate place to ask is your IT dept, not XDA. They were the ones that set the requirement for a lock.
Been following the various gingerbread ROM threads (Cyanogen 7, Evervolv, etc.) and they look very interesting.
Unfortunately, however, I can't seem to find one that includes full exchange enterprise security capabilities which are available in nearly all the Froyo ROMs.
Any insight about why this is missing and if/how I can obtain it?
Without Exchange Enterprise Security Policy support, there are many of us who cannot access our corp calendar, email, etc. Touchdown, Good Messaging, still work, but the built-in Activesync sppt is preferred...
geekdaddy said:
Been following the various gingerbread ROM threads (Cyanogen 7, Evervolv, etc.) and they look very interesting.
Unfortunately, however, I can't seem to find one that includes full exchange enterprise security capabilities which are available in nearly all the Froyo ROMs.
Any insight about why this is missing and if/how I can obtain it?
Without Exchange Enterprise Security Policy support, there are many of us who cannot access our corp calendar, email, etc. Touchdown, Good Messaging, still work, but the built-in Activesync sppt is preferred...
Click to expand...
Click to collapse
Is it true that all of the Froyo ROMs that include full Exchange security are Sense ROMs?
I was under the impression that HTC had added that in. You may be left waiting for HTC to officially update the Evo Shift to a newer version of Android.
I believe mine works with exchange and it asked for a bunch of admin permissions (like wiping my phone) when I set up the account. Email and calenders work too, but the email app won't let you search. (Cm7 RC4.1)
Sent from my PG06100 using XDA App
I've seen a lot of threads to disable these security precautions because people hate them despite them being required by corporate policy. As an admin it really makes me facepalm. I'd like to see ActiveSync bolstered in AOSP and other custom ROMs.
Moved to general.
BUMP...
There IS Exchange support in most of the gingerbread ROMs, but they seem to be missing support for some of the security policies and this can cause problems if your exchange server requires them...
First off I take no credit for this at all. All credit goes to Rsotbiemrptson who is a Jedi master for creating this after many have tried and failed.
What you have here is a flashable crack to the HTC Mail.apk that will bypass any and all security administrators that may be otherwise forced onto your device when syncing to an exchange server.
To install:
1. You must remove all mail accounts that you have set up in the Mail app.
2. If you have any existing security administrators present from a previous exchange sync deactivate them.
3. Set your lock time out to none under security settings.
4. Reboot into recovery and wipe Dalvik Cache
5. Flash the attached file.
As with all mods or changes to ROMS do a complete backup in recovery.
If you find this useful please send all thanks to Rsotbiemrptson for cracking this bad boy.
Has anyone tried this?
sdorn77 said:
Has anyone tried this?
Click to expand...
Click to collapse
I don't really understand the point of it. Is there something wrong with Exchange on the Tbolt? Mine works fine.
Shiftyshadee said:
I don't really understand the point of it. Is there something wrong with Exchange on the Tbolt? Mine works fine.
Click to expand...
Click to collapse
This is for people who want to use their Exchange account on their Tbolt, but DON'T want to give their Exchange admin the ability to enforce security policies on their phone (like having to enter a PIN every time you unlock the screen). Sounds like your Exchange admin doesn't implement any of those policies, so you don't need this.
Is this something that was implemented in newer versions of Exchange? I think my company uses 2007 still. Might be why I haven't seen this.
i managed to get my gmail, hotmail an windjammercable mail setup though exchange on my thunderbolt, but i kept getting sync errors where it would try to sync all three emails like every 5 seconds when the phone was operating in peak time. My battery went from like 100 to like 75 in less than 20 minutes So i had to just delete all the email setting i changed an go back to what i had before.
Now, if install your mail akp will this stop the sync errors?
Shiftyshadee said:
Is this something that was implemented in newer versions of Exchange? I think my company uses 2007 still. Might be why I haven't seen this.
Click to expand...
Click to collapse
It's been around since at least the 2003 version but it's all optional settings, your admin may just not have them enabled. Mine doesn't.
Jacquestrapp said:
It's been around since at least the 2003 version but it's all optional settings, your admin may just not have them enabled. Mine doesn't.
Click to expand...
Click to collapse
Gotcha. Thanks for clearing that up for me
This absolutely works on all DAS BAMF roms but should work on any ROM including stock. You only need this if you have exchange policies pushed to your phone by your company. If you don't know what this is you prob don't need it.
I do not know if it will fix the afore mentioned sync errors but I would doubt it.
Here's a new question. When I had CM7 on my Incredible, Exchange wanted to setup device admin rights. Now on my Tbolt with Sense I don't get asked. Any idea why?
madroix said:
This absolutely works on all DAS BAMF roms but should work on any ROM including stock. You only need this if you have exchange policies pushed to your phone by your company. If you don't know what this is you prob don't need it.
I do not know if it will fix the afore mentioned sync errors but I would doubt it.
Click to expand...
Click to collapse
I have installed this on DAS BAMF remix v1.4 and it does work so far. I was able to remove the PIN lock and use a pattern lock, which was not permitted before. Also, I didn't get the exchange security policy notice when I added my exchange account. Syncing appears to be working properly as well so far.
The mod is quite honestly ridiculous. Whats the point of trying to have security setup and protect possible sensitive information, when you don't want an Admin to enforce security rights.
This 100% defeats the purpose that was set in place by Exchange for good reason's. I sure hope everyone understands the SERIOUS consequences of what could happen by flashing this and possibly leak sensitive data into the wrong hands.
^^ it's a very good point. One of the problems with AS and lock screens is that with the default client and iPhones you have to pin to unlock even the phone. Nothing to do with email, just the darn phone. So everyone hates it. I use Touchdown which only requires a pin if you go to check email. But it's $20. Anyway, be careful with hacks that bypass security in a workplace. It could be cause for termination.
I love my phone, I've loved ALL my devices... Yes, I use it for work with MS Exchange email (MS Consultant), and yes the pin/password policies are annoying.
But I'm not about to risk my job over some "hassle" of 3 seconds to enter a pin. Aren't our email Administrators able to see we bypassed this or no?
oc3rulz said:
The mod is quite honestly ridiculous. Whats the point of trying to have security setup and protect possible sensitive information, when you don't want an Admin to enforce security rights.
This 100% defeats the purpose that was set in place by Exchange for good reason's. I sure hope everyone understands the SERIOUS consequences of what could happen by flashing this and possibly leak sensitive data into the wrong hands.
Click to expand...
Click to collapse
To be honest, if someone wanted my data or emails a stupid 4 digit pin is not going to stop them. There are many ways in getting a persons email off of there phone without even unlocking it. This seems like it is for those small companies who's admins are security freaks and its really not needed. Granted, I am sure apple would not be happy if an employee used this app or an android phone lol
Sent from my ADR6400L using XDA Premium App
It is important to keep sensitive data secure. I think a properly set up pattern lock is as good as a 4 digit PIN. I use lookout to be able to remotely wipe if needed.
THANK YOU SO MUCH! Hats off to the dev.
Do I have to remove gmail accounts too, or just the active sync exchange accounts?
Sent from my ADR6400L using XDA App
chriskader said:
To be honest, if someone wanted my data or emails a stupid 4 digit pin is not going to stop them. There are many ways in getting a persons email off of there phone without even unlocking it. This seems like it is for those small companies who's admins are security freaks and its really not needed. Granted, I am sure apple would not be happy if an employee used this app or an android phone lol
Sent from my ADR6400L using XDA Premium App
Click to expand...
Click to collapse
Let them get in hacking your password/pin, you won't be held responsible. However if you have the phone pin/password disabled and they realize this you will be terminated. They will be able to see that you are bypassing security measures, and you could have lawsuit on your hands as well.
Please dont think that I am bashing the dev, I'm simply trying to let people know that they very well could and most likely lose their job and have possible legal action taken against them for using this. Cellphones are such a volatile thing anyhow, but giving them an easier way in is not a good idea, especially not while breaking company policy.
oc3rulz said:
Let them get in hacking your password/pin, you won't be held responsible. However if you have the phone pin/password disabled and they realize this you will be terminated. They will be able to see that you are bypassing security measures, and you could have lawsuit on your hands as well.
Please dont think that I am bashing the dev, I'm simply trying to let people know that they very well could and most likely lose their job and have possible legal action taken against them for using this. Cellphones are such a volatile thing anyhow, but giving them an easier way in is not a good idea, especially not while breaking company policy.
Click to expand...
Click to collapse
Like I said, they don't even Ned to unlock your phone e to read the emails on of. Google it.
Sent from my ADR6400L using XDA Premium App
I tried to set up an account to my Exchange email at work using the default email app on my TF101. When I set up an account it requires that I enable all of these security settings on the tab like having a PIN and encrypting data. I don't want to do all of that. I realize that this is something set up by my Exchange administrator but I am not sure they even did it knowingly and anyway I don't want to have to deal with it to check email.
Does anyone know how to bypass this? Searches of these forums and the web show that there are some modded email apks for other platforms that let you bypass the security settings. I have not seen any such mods for ICS on the TF101.
Thanks in advance for your help.
Hello,
I do not believe the stock email is able to handle the security settings from an exchange server. You need to look at other programs like Moxier Mail or TouchDown.
+1 for touch down. Works great but it is $20
Enhanced email is another option. I got it from free app of the day by Amazon. At first, it did not work on android 3.0+, but it works fine now. It gives you the option to ignore security policies.
Alternatively, if you decompile the email.apk, I believe you can force a variable so that the email app always tells the exchange server you have sufficient security enabled (I'm not exactly sure where must be changed).
tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
I couldn't agree more. Do the trial first to see if you like it. I don't recommend bypassing the security. You can unknowingly pass a virus through your corporate exchange. Hopefully, one day, they will resolve this issue in the Android exchange client.
tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
+1... Touchdown. Forget any other Exchange apps.
+1 for Enhanced Email - optionally bypasses the admin security settings - works fine on Honeycomb and ICS too.
Exchange Admin
Hello,
When setting up exchange servers in the past, the default exchange policy is to have those features enabled. Even if those are DISABLED, the tablet will still ask to create the partnership. I believe this is so it can be wiped remotely. It seems ICS just tells you it is going to do all of those things as a generic warning. I have noticed this is only on ICS though. If you click ok, it shouldn't ask you to create a PIN or anything if it isn't actually required. We currently only have exchange 2010 in production in a test environment, so I have yet to look for the setting to disable this feature entirely. Hope this helps you understand how it works at least a little.