[Q] Gingerbread ROM w/Exchange Security? - EVO Shift 4G General

Been following the various gingerbread ROM threads (Cyanogen 7, Evervolv, etc.) and they look very interesting.
Unfortunately, however, I can't seem to find one that includes full exchange enterprise security capabilities which are available in nearly all the Froyo ROMs.
Any insight about why this is missing and if/how I can obtain it?
Without Exchange Enterprise Security Policy support, there are many of us who cannot access our corp calendar, email, etc. Touchdown, Good Messaging, still work, but the built-in Activesync sppt is preferred...

geekdaddy said:
Been following the various gingerbread ROM threads (Cyanogen 7, Evervolv, etc.) and they look very interesting.
Unfortunately, however, I can't seem to find one that includes full exchange enterprise security capabilities which are available in nearly all the Froyo ROMs.
Any insight about why this is missing and if/how I can obtain it?
Without Exchange Enterprise Security Policy support, there are many of us who cannot access our corp calendar, email, etc. Touchdown, Good Messaging, still work, but the built-in Activesync sppt is preferred...
Click to expand...
Click to collapse
Is it true that all of the Froyo ROMs that include full Exchange security are Sense ROMs?
I was under the impression that HTC had added that in. You may be left waiting for HTC to officially update the Evo Shift to a newer version of Android.

I believe mine works with exchange and it asked for a bunch of admin permissions (like wiping my phone) when I set up the account. Email and calenders work too, but the email app won't let you search. (Cm7 RC4.1)
Sent from my PG06100 using XDA App

I've seen a lot of threads to disable these security precautions because people hate them despite them being required by corporate policy. As an admin it really makes me facepalm. I'd like to see ActiveSync bolstered in AOSP and other custom ROMs.

Moved to general.

BUMP...
There IS Exchange support in most of the gingerbread ROMs, but they seem to be missing support for some of the security policies and this can cause problems if your exchange server requires them...

Related

Exchange Email/2.2/Work Email

Ok, with my company's Exchange email, I find that the email settings work fine on devices like the HTC hero, Droid Eris, Aria, EVO...but does not authenticate on the N1.
On 2.1 I was using the "Work Email" app from the G1 found at nexeo.net. Worked 100% perfect for push with my company's email. Email only.
Now on Froyo that app does not work at all, wont even open. Force Close instantly. Understandable, its an old app, not supported anymore.
Question is...is there a way to get the HTC sense email app only on my N1? i dont want to root or anything or run any other rom. I like the new 2.2 froyo.
or would I be better off buying an app like Touchdown? or are there other apps I do not know about that may solve my problem?
Thanks in advance.
From my understanding, you use the email application. You can use it for pop / imap and Exchange ActiveSync.
not with my company's server settings, they work just fine on the HTC branded devices listed above, but not in the N1 email application.
You can try Touchdown, its a paid app but seems to work well with Exchange. I used it for a while and it offers a lot more features than the built-in Exchange support in Eclair and Froyo.
If I could sync more than 1 month of email in Froyo and actually store it on the device, then I wouldn't need a 3rd party app for my setup.
i have heard Touchdown is a quality option.
so is it unrealistic to think that the HTC email apk can be ported to the N1 without rooting, roms, etc etc?
mindfrost82 said:
You can try Touchdown, its a paid app but seems to work well with Exchange. I used it for a while and it offers a lot more features than the built-in Exchange support in Eclair and Froyo.
If I could sync more than 1 month of email in Froyo and actually store it on the device, then I wouldn't need a 3rd party app for my setup.
Click to expand...
Click to collapse
I also use Touchdown. It works very well with my company's exchange server. I had a small issue with Touchdown after the recent FRF85B upgrade. I notified Nitrodesk (touchdown) and they pushed out an update that corrected the problem later that same day (yesterday as a matter of fact). Can't ask for better support than that.
I also have used Touchdown in the past, it was a great app. I'm now using the stock Froyo exchange support, because i prefer the smaller 2 column google calendar widget over the huge touchdown widget.
When setting up my exchange settings in Froyo on the N1, i did notice that the autoconfigure did not work at all. I had to manually enter just about every username/domain/hostname while configuring it to get it to work.
MotoGAL and MotoCAl
The new Froyo email program works perfectly for me on Exchange server 2007 However my old standby - the Droid motogal and motocal applications fail completely.
This is especially irritating as there is no equivalent of motogal under froyo. i.e. it it allows me to search for email addresses from the GAL - but I can't look up phone numbers, post address, dept etc etc - which I also need.
Anyone know how to fix motogal for use under Froyo?
(The combined calender function in Froyo is quite cool - but I still need an exchange GAL browser app)
i wish the froyo email app worked with my company. maybe there is something different i dont know.
so lets say i work for a company called "BetterBuy"
in the HTC Sense email app all I need is:
server: sync.betterbuy.com
domain: NA
and then my login info, and its all good.
in the Froyo N1 email app its set up as follows:
domain\username:
server:
no matter what i put in it doesn not authenticate.
For domain\username, use: \yourusername
Works for me.
no go here. idealy i want the HTC sense email app since i know it works...last resort will be buying Touchdown.

Lockpicker for Exchange on Froyo vanilla

i have just set up an exchange email on my hero, however my company policy requires pin setup compulsory on my set.
I used to have lockpicker on my 2.1 but seems like that doesnt work on vanilla, is there another software that you guys can recommend?
TIA!!!
All Androids that our company supports install Touchdown.
It is a paid app but once we started using it we have no more issues with PIN issues.
Sync's everything including tasks which the stock app does not do.
Thank you.
10char
Does anyone know if lockpicker will be updated to support 2.2 or if another app is out that has the same features? I tried emailing the dev for lockpicker but he has gotten back to me about supporting 2.2. HTC droid incredible on froyo w/sense.
figured no point in starting new thread to ask the same question (i dont want to use touchdown)
Thanks
NM found this post xda-developers.com/showpost.php?p=7182615&postcount=88
I guess lockpicker or other same type of app won't be available for a little while
Check the thread in my signature. I have written an app which strips out the relevant parts of code in the stock email apk and the sense mail apk on froyo.

Exchange 2007 Support in ASOP Rom

Does anyone know how to make an ASOP Rom support Exchange 2007 security requirements? Whenever I try to add the account I get a message which says something to the effect of "Exchange requires features you phone does not support". Exchange wants you to have to enter a passcode every time you unlock the phone.
Stock eris and stock-based roms support it and so does the motorola droid.
Is this something where I can possibly just copy over a system apk to make it work or is it deeper in the code? I changed the email apk to the one from the droid but that didn't do anything. Has anyone ever ported a version of the motorola droid to the eris? Am I way off on the approach?
Thanks in advance for any ideas!
You'll have to be more specific. I have not yet had problems getting my exchange account to work properly on any ROMs, including the Kaos 2.2 v24.
Sent from my Eris using XDA App
You have to enable security on them. When I used 2. 1 romsI used lockpicker from the market. It will disable the need from having to type in password every tIME you lock phone but still make the server think its enabled. FYI kaosfroyo works too and no need to enter password. Only draw back is you have to reenable everytime you power down phone.
Sent from my FroyoEris using XDA App
isaycrikey said:
You'll have to be more specific. I have not yet had problems getting my exchange account to work properly on any ROMs, including the Kaos 2.2 v24.
Sent from my Eris using XDA App
Click to expand...
Click to collapse
That's weird. Our company must have different security requirements if you are getting it to work on the Froyo ROM because I've tried every kind of lockscreen setting I could find. I found this thread which basically says Exchange is only partially supported by Froyo. I know we require password history and expiration which must be the culprit. code.google.com/p/android/issues/detail?id=9426.
So HTC and Motorola must have added something which adds that expiration and history feature. Since it's security related I'm guessing it's more than just an apk. Can the .so files be moved across ROMs? Anyone have a guess at which one may contain this feature?
vtjiles said:
That's weird. Our company must have different security requirements if you are getting it to work on the Froyo ROM because I've tried every kind of lockscreen setting I could find. I found this thread which basically says Exchange is only partially supported by Froyo. I know we require password history and expiration which must be the culprit. code.google.com/p/android/issues/detail?id=9426.
So HTC and Motorola must have added something which adds that expiration and history feature. Since it's security related I'm guessing it's more than just an apk. Can the .so files be moved across ROMs? Anyone have a guess at which one may contain this feature?
Click to expand...
Click to collapse
Exchange 2007 sync is working for me on KaosFroyo V24 as well. My company also enforces password history and expiration, but no issues here. By the way, no lockscreen security is set on my Eris.
Did the sync work for you on 2.1? If not, your Exchange admins may have to enable it on your account. Sounds like it could be something setup by your employer. It doesn't hurt to ping an admin and see what they say...
g00gl3 said:
Exchange 2007 sync is working for me on KaosFroyo V24 as well. My company also enforces password history and expiration, but no issues here. By the way, no lockscreen security is set on my Eris.
Did the sync work for you on 2.1? If not, your Exchange admins may have to enable it on your account. Sounds like it could be something setup by your employer. It doesn't hurt to ping an admin and see what they say...
Click to expand...
Click to collapse
The sync was working on HTC 2.1, but not on any 2.1 ASOP ones.
But, after talking to support they switched my policy group and, of course, now it works so my apologies for being an idiot and putting this in a development forum. I honestly thought the ASOP roms just didn't have that functionality and was hoping there was a way to flash something that would make it work.

Corporate microsoft exchange support in dhd aosp roms

Hi all you clever developers and tweakers! I have been playing around with all the recent roms without sense and they are the ROMS I prefer. The reasons are quite self explanatory as u all know.
Any way I have been doing some digging and although Google say that android supports msEx its upto the manufacturer to build it. HTC have done a Sterling job with Sense as they have done gone the extra mile. Specifically functionality which incorporates remote wipe complex passwords etc...
Touchdown is an application that works and goes someway to bridge the Google gap but this does not integrate it self to the stock email and Calender apps.
So do we have anyone brave enough to tackle this by developing potentially a port of the mail client from sense to work on cm roms for example.
Look forward to your endeavours.
Sent from my Desire HD using XDA App
Come on guys surly I am not the only one suffering from this issue!
Sent from my Desire HD using XDA App
Any takers?
Sent from my Desire HD using XDA App
Sense apps aren't just drop-in replacements for the stock Email apps. They require a SDK to be released from HTC which provides public APIs to use the Sense libs (which also have to be available at runtime). To date, HTC doesn't do or allow any of this for third party devs, so porting is impossible.
For what it's worth, the Email client included in CM has *much* more Exchange support than the Sense client does as-shipped. It supports everything you mentioned plus client certificates. You can even install the Email.apk included in CM on your DHD without rooting and while staying on HTC's official ROM. It's what I do and it works well (calendars and contacts are even accessible via the Sense apps). The only downside is that the Email client installed has a different look and feel than the Sense apps, but it's not such a big deal since it's usable and it's free (as opposed to Touchdown).
I've been in contact with HTC regarding their lack of support for client certificates while using ActiveSync and they've elevated my ticket from support to engineering since it's more of an RFE than a support request. Hopefully in the future either HTC will include client cert support in their own Sense client or Google will finally allow applications to access the central certificate store (see issue 11231). As of right now it seems HTC is hesitant to add functionality like this without Google taking the lead in their native Email app, so "star" the issue above if you want to have your voice heard by Google. Adding more comments is just noise, star it instead since that's what grabs Google's attention.
I use touchdown because of the ability to do a server search a feature that has been sorely lacking in even the HTC app. Does anyone know if this functionality is present in the CM version ?
Basically I can search my entire 15gb mailbox in 15seconds through a client server command.
Sent from my Desire HD using XDA App
For now I have moved back to a sense rom. I have used the following link to sort and free myself off exchange restrictions and all is good for now.
http://forum.xda-developers.com/showthread.php?t=655649&page=34
That was using a patched mail.apk.
I have been unable to use any email.apk on cm roms even the stock android email apps as it keeps saying the security features are not sufficient on this phone?
I tried to setup on s nexus s and that had the dame problem. Any further advice would b great.
In terms of searching I have just loaded all my messages on the phone now do don't have to worry about server searches.
Sent from my Desire HD using XDA App
no active sync in CM7 RC1
I have EVO 4g, and using a SENSE ROM, I can connect to corporate email. Using CM6 or CM7 I am unable. I have tried using modified Email.apk to no avail. I have had to switch back to a SENSE ROM to sync with exchange because of this security issue.

CM9 and issues with Exchange

I have seen on the CM9 thread that there are a few users who are having trouble with the stock apps syncing with Exchange.
I had the same issue after installing alpha 2 a few days ago. A little research let me to this article: http://code.google.com/p/android/issues/detail?id=22975
Basically, there are a number of Exchange configurations that the stock ICS clients simply are not compatible with right now. It may be as simple as the security requirements that your employer is trying to enforce, or in my case, the fact that my employer is running Exchange 2010sp1. Apparently sp2 is compatible.
In any case, this is an upstream Google issue, and is not specific to CM9. They are working on it.
I am using Moxier Mail in the interim.
And, yeah, I know I should have posted this in the thread, but I don't have enough posts yet.
-AH
Sent from my SPH-D700 using XDA App
Glad to hear. Hope it gets fixed soon. My college's notification website pushes all notifications to our school email which uses exchange. Sadly I have to log in to my email to check for these rather then get them automatically on my phone.
Sent from my SPH-D700 using XDA App
brooksyx said:
Glad to hear. Hope it gets fixed soon. My college's notification website pushes all notifications to our school email which uses exchange. Sadly I have to log in to my email to check for these rather then get them automatically on my phone.
Sent from my SPH-D700 using XDA App
Click to expand...
Click to collapse
Can't you use POP or IMAP, so you don't have to log into the website?
No. MS Exchange Server is a completely different and much more secure protocol than POP or IMAP, and entities that use it do so precisely because they do not want their sensitive info going out on POP or IMAP. And, as Exchange offers true push, and several other features that go beyond the scope of just email, it has other advantages too.
And, while there usually is a website component available (Outlook Web Access) that's not what we are talking about here.
TWO515TY said:
Can't you use POP or IMAP, so you don't have to log into the website?
Click to expand...
Click to collapse
what issues specifically are you having trouble syncing.
All. None of mystock android apps work with exchange.
My work uses Exhange 2010sp1 and there is a security requirement that android 4.0.x exchange services do not support. The issue is not present in sp2. I'm not an expert. This is what I have found out through my research, and have been told. My employer has no plans to implement sp2. Now why android 2.3 would work, and then they would leave out that compatibility in 4.0 is beyond me. And why the android team would still be working on it 4 months later without resolution is also beyond me.
Sent from my SPH-D700 using XDA App
amateurhack said:
No. MS Exchange Server is a completely different and much more secure protocol than POP or IMAP, and entities that use it do so precisely because they do not want their sensitive info going out on POP or IMAP. And, as Exchange offers true push, and several other features that go beyond the scope of just email, it has other advantages too.
And, while there usually is a website component available (Outlook Web Access) that's not what we are talking about here.
Click to expand...
Click to collapse
well, I wouldn't say exchange is any more or less secure (probably less) than IMAP (POP is dead) over SSL/TLS. Companies do it so that they can enable group policy on the data, you know, like being able to REMOTELY WIPE YOUR PHONE (without your appoval). really depends on the company. I work on the systems team for the production servers at our company, but I'm not part of the IT group facing our employees. We use Exchange. They know the guys in my group are not idiots, so they enable IMAP for our accounts at a special requrest from us. IMO, IMAP is far better than trying to screw around with Exchange/Outlook.
Though I do have a Windows VM that I use to accept meeting invites. *shakes fist*
I just gave up on exchange for now. It was eating through my battery and it would forget my credentials.
I am just having all of my exchange emails forward to my gmail for now.
Yes, in terms of the tranfer of data over ssl, there is little or no difference between exchange and imap, though I would bet that a lot of users don't have their imap account set up with ssl. For a lot of exchange users, ssl is required.
And yes, my employer wants to be able to remotely wipe my phone. I want them to be able to as well. They know, as do I, that some of the information on my phone is personal/private/confidential/sensitive/secure, so to them, and to me, the advantage of being able to remotely wipe my phone makes Exchange MUCH more secure than IMAP.
I guess it's all a matter of needs and perspective.
dzl said:
well, I wouldn't say exchange is any more or less secure (probably less) than IMAP (POP is dead) over SSL/TLS. Companies do it so that they can enable group policy on the data, you know, like being able to REMOTELY WIPE YOUR PHONE (without your appoval). really depends on the company. I work on the systems team for the production servers at our company, but I'm not part of the IT group facing our employees. We use Exchange. They know the guys in my group are not idiots, so they enable IMAP for our accounts at a special requrest from us. IMO, IMAP is far better than trying to screw around with Exchange/Outlook.
Though I do have a Windows VM that I use to accept meeting invites. *shakes fist*
Click to expand...
Click to collapse
I just realized I linked the wrong thread in hte OP. Here is the correct one:
http://code.google.com/p/android/issues/detail?id=22975
I'll update the OP.
The email.apk and exchange.apk included with epiccm9's test build of android 4.0.4 have fixed my exchange sync issues.
Big props to whoever fixed this!
Sent from my SPH-D700 using XDA

Categories

Resources