[Q] Disable Exchange Security Policies - Windows 8 General

Hi guys,
Sorry if this is the wrong place to ask this, if is not the right place I will move it.
Recently I bought a Windows 8.1 tablet, so playing around with the pre-installed apps I set up my corporate exchange account in the Mail App(Metro) and it disabled the option to access with PIN and picture just the password was left as an option. So just wondering if is it possible to disable the exchange security that is imposed by the Mail App in Windows 8/8.1.
Thanks guys,

I get the feeling that you think it would work the same way as that of Android where you simply flash a cracked /modded .APK file
I simply use OWA (Outlook Web App) so as not to have to conform to the security.
You could also install a full copy of MS Outlook (desktop version) so as to bypass that requirement.

doomfrawen said:
Hi guys,
Sorry if this is the wrong place to ask this, if is not the right place I will move it.
Recently I bought a Windows 8.1 tablet, so playing around with the pre-installed apps I set up my corporate exchange account in the Mail App(Metro) and it disabled the option to access with PIN and picture just the password was left as an option. So just wondering if is it possible to disable the exchange security that is imposed by the Mail App in Windows 8/8.1.
Thanks guys,
Click to expand...
Click to collapse
Left click or long hold on the start menu, click control panel then user accounts. On left hand side of the window you will find 'reset security policies' at the bottom of the list.

I think you can also do it in Local Security Policy editor (secpol.msc) but I haven't ever tried. The actual restriction is stored in the registry. Be aware that if you continue using the corporate account, you'll probably get locked out of picture password again. Also be aware that what you're asking for is probably a violation of your company's policies and is much less secure (in order for the feature to work, your machine must store the password or an equivalent to it; normally no such thing is stored).
Sent from my Samsung ATIV S SGH-T899M using XDA Windows Phone 7 App

Hi Guys, any update on this? Would we have a patch of some sort to block this policy enforcement? My Android Nine app can simply accept a 4 digit pin and encrypt its own data, but Windows 8.1 Mail App (surface pro 3) insists on putting a complex password. It's a headache to write a complex password each time even if I set timeout to 15 mins.
I also could not find any other alternative, even Touchdown pulled support for Win 8.1 app. I can use an Android emulator but then we are losing connected standby function of getting mail updates automatically even when screen is off.

Related

Recent changes to your device require a restart???

Hi all,
About a month ago I enabled pushmail (company Exchange server) on my Touch HD and ever since I'm getting the message: "recent changes to your device require a restart".
It pops up every once in a while and ask me to restart my device.
When I restart nothing changes and the popup keeps on coming. If I select to restart later (which I do now) the popup dissappears and my HD functions normally.
I searched the web and the only thing I could find was a discussion on an Exchange Server setting, which I already verified with our Exchange Admin.
Anybody outthere with the same problem or perhaps even better, anybody with a solution?
Thanks,
Lars
Probably not but is your Exchange server pushing some sort of policy to your HD?
deedee said:
Probably not but is your Exchange server pushing some sort of policy to your HD?
Click to expand...
Click to collapse
Deedee,
Thanks for the rely, but as far as I understood from our Admin no policies are pushed.
Infact I'm currently the only one complaining about this. But that could be because I'm the only one not using the standard issue company PDA.
Lars
We have the same problem here too. It seems that anytime a policy is in place, exchange attempts to push it every 4 hours (for us). Then if the system is not rebooted, then it keeps prompting about every 10 mins to reboot.
If your exchange admin will, he can turn off the refresh setting (not recommended) and it will not keep trying to update the device. If he adds new policies, then turn it back on.
This only seems to affect WM6.1 devices, (regardless of the carrier), and exchange 2007 SP1.
ggiedd said:
We have the same problem here too. It seems that anytime a policy is in place, exchange attempts to push it every 4 hours (for us). Then if the system is not rebooted, then it keeps prompting about every 10 mins to reboot.
If your exchange admin will, he can turn off the refresh setting (not recommended) and it will not keep trying to update the device. If he adds new policies, then turn it back on.
This only seems to affect WM6.1 devices, (regardless of the carrier), and exchange 2007 SP1.
Click to expand...
Click to collapse
Hi, i have exactly same broblem too, maybe somebody help?
Same problem here with the HTC HD2 (windows mobile 6.5).
Synchronization is set to manual. Each time I do a synchonize, all mail is received correctly, but immediately followed by the message that because of "recent changes" the device requires a restart. Really annoying.
Don't know a solution yet...will also check Exchange server settings.
HTC HD2 constant reset
Yes same thing is happening here but the information provided here has given me something to approach our IT department on a possible solution.
Will get back with any valuable information I receive.
Did you get a response from the IT department? I am very curious as well, since I am currently updating a small software agent on the device, and this has triggered the ssame behaviour.

company directory

The manila contacts is having company directory listing option.
But, it is greyed out
Do anyone know how to enable it?
This is an option that allows you to get contact information directly from your corporate Exchange server. You need an over-the-air Exchange sync account set up if you want to use this feature (not that you need it without such an account in the first place).
vangrieg said:
This is an option that allows you to get contact information directly from your corporate Exchange server. You need an over-the-air Exchange sync account set up if you want to use this feature (not that you need it without such an account in the first place).
Click to expand...
Click to collapse
Oh
Thanks.
I have to continue with the windows contacts then.
The Company Directory feature worked fine on my TD2 but on my HD2 it's greyed out, and I never used Exchange on either of them.
The Company Directory feature simply groups your contacts by Company Name - you don't need Exchange for that.
me 2
I'm having the same problem, although I CAN access the company directory if I turn off Sense and go to the stock Windows phone interface. Then when I go back to sense, it's grayed out. Does anyone know anything about this?
davsug said:
I'm having the same problem, although I CAN access the company directory if I turn off Sense and go to the stock Windows phone interface. Then when I go back to sense, it's grayed out. Does anyone know anything about this?
Click to expand...
Click to collapse
bump...anyone else seeing this problem when connected to an Exchange server and using Sense?

Enterprise

In the Keynote, there was discussion of "over 20 new Enterprise features." From the Keynote, we know some of them were:
1. Auto discovery
2. Security Policies
3. GAL Lookup
4. Device Admin API's
5. Exchange Calendar support
From the Froyo test release I've see exchange signatures activated.
Does anyone know the rest? Any other discoveries that I missed? I'm really hoping that they enable folder push and the ability to transfer messages between folders in the final build.
Is there a list anywhere that you guys have seen?
gibosn6594 said:
In the Keynote, there was discussion of "over 20 new Enterprise features." From the Keynote, we know some of them were:
1. Auto discovery
2. Security Policies
3. GAL Lookup
4. Device Admin API's
5. Exchange Calendar support
From the Froyo test release I've see exchange signatures activated.
Does anyone know the rest? Any other discoveries that I missed? I'm really hoping that they enable folder push and the ability to transfer messages between folders in the final build.
Is there a list anywhere that you guys have seen?
Click to expand...
Click to collapse
For the GAL, if you compose an email and type the person's last name (provided that your GAL is "last, first") it'll autosearch the GAL. For the exchange calendar, this is supported out of the box and works well. It doesn't folder push unfortunately. I personally use rules that only work on my laptop (i.e. not server side rules) so that everything's in my inbox until I log in. Looks like the ability to move items into folders is also a no show.
Mi|enko said:
For the GAL, if you compose an email and type the person's last name (provided that your GAL is "last, first") it'll autosearch the GAL. For the exchange calendar, this is supported out of the box and works well. It doesn't folder push unfortunately. I personally use rules that only work on my laptop (i.e. not server side rules) so that everything's in my inbox until I log in. Looks like the ability to move items into folders is also a no show.
Click to expand...
Click to collapse
No, I know that those features are supported. I'm asking if anyone knows about the rest that don't seem to be so obvious. Perhaps they are something we will see in the final build?
Remote wipe
Devastatin said:
Remote wipe
Click to expand...
Click to collapse
Yea, that's another. That's puts us at about 7 out of 20. Any others?
yea i'll be honest i think folder pushing is a bit of an annoying oversight!
that's only other feature I could really do with!
Devastatin said:
Remote wipe
Click to expand...
Click to collapse
I haven't been able to get remote wipe to work on FroYo yet. Has anyone else?
http://www.zdnet.co.uk/news/mobile-...googles-android-into-the-enterprise-40089007/
http://phandroid.com/2010/05/20/and...-announced-with-ground-breaking-new-features/
We’ve added Exchange capabilities such as account auto-discovery and calendar sync. Device policy management APIs allow developers to write applications that can control security features of the device such as the remote wipe, minimum password, lockscreen timeout etc.
Click to expand...
Click to collapse
Looks like its there and no interface to use, or its not there and you have to wait for 'official'
Within Exchange, I can choose to Remote Wipe the device, the same way I can remote wipe an iPhone or WinMo phone. It just didn't do anything.
PIN enforcement is another. Because of our Exchange security policy, I get asked to set a Password or PIN while setting up activesync.
Another enhancement over 2.1 is Office 2007 files are supported (pptx,docx,xlsx) and quick office pinch-zoom works, so more consistent with rest of OS
I haven't been able to get my N1 set up for our Exchange environment. I'm coming off a 3GS and didn't have any issues. Our policy isn't set particularly stringent - don't allow non-provisionable devices, enforce simple passwords, password recovery and no encryption. Keep getting the "your device doesn't support the policies pushed by the server" message, or whatever it is.
I was wondering if certain elements of the EAS policy aren't supported yet? No clue.
satchmo_d said:
I haven't been able to get my N1 set up for our Exchange environment. I'm coming off a 3GS and didn't have any issues. Our policy isn't set particularly stringent - don't allow non-provisionable devices, enforce simple passwords, password recovery and no encryption. Keep getting the "your device doesn't support the policies pushed by the server" message, or whatever it is.
I was wondering if certain elements of the EAS policy aren't supported yet? No clue.
Click to expand...
Click to collapse
I had similar issues with 2.1. I had to purchase roadsync (trial is possible)
froyo addressed all that! Did you upgrade yet?
satchmo_d said:
I haven't been able to get my N1 set up for our Exchange environment. I'm coming off a 3GS and didn't have any issues. Our policy isn't set particularly stringent - don't allow non-provisionable devices, enforce simple passwords, password recovery and no encryption. Keep getting the "your device doesn't support the policies pushed by the server" message, or whatever it is.
I was wondering if certain elements of the EAS policy aren't supported yet? No clue.
Click to expand...
Click to collapse
I got that when my company switched over to 2007 exchange, until I let the IT department know that they needed to flip the switch for Android devices (they had done BB, WM, et al)...
In the short term I used TouchDown, it has a free trial period that you can use as many times as you want, you just have to set your account back up once a week.
pjcforpres said:
they needed to flip the switch for Android devices (they had done BB, WM, et al)...
Click to expand...
Click to collapse
Can you expand on that? I'm not familiar with changes that need to be made to allow Android via EAS. Am I missing something? Would rock if I could get it to work.
BTW, I did upgrade to Froyo.
satchmo_d said:
Can you expand on that? I'm not familiar with changes that need to be made to allow Android via EAS. Am I missing something? Would rock if I could get it to work.
BTW, I did upgrade to Froyo.
Click to expand...
Click to collapse
On my companies exchange 2007 server, they have the option to block or support mobile devices. Out of the box, it had no devices allowed to sync, so they had to turn on sync for different mobile devices. They had done Windows Mobile and BlackBerry, but forgot to do Android until I reminded them that some of use use Android devices, and would like to use our native exchange support.
I got the same error you do until they changed the security settings to allow Android devices to sync as well. I would assume this is your case as well, given that Android, even 2.1, supports more security protocol than iPhone's regarding exchange, and our exchange server is set up with high levels of security (uses SSL, etc).
Anyways, just email your IT department and ask them to enable Android devices for mobile sync... if they say it is already allowed, then ask them what the settings are supposed to be for your phone... I would bet $5 they just never turned on mobile sync for Android devices.

[Q] Windows 8 and Exchange Server

Hey Folks,
managed to install Win8 Consumer Preview without any problems..running smooth and stable on a medion AIO Touch Machine..
Also managed to create a domain account on that machine..
Question :
We have a Exchange Server 2003 in our local network..i tried to create a connection in the Mail app by adding an account -> Exchange, entered all the required informations and tried to connect, without success, after 2 minutes always failed.
Anyone an idea what could be wrong or is it just because of the consumer preview.
Or is it a thing because of SSL ?...
But there are no possibilities to configure them...
Any hint is highly appreciated.
Saludos
Sunny
Got the exact same problem. Looks like its ok at first since a green box appears to the left, and then it says syncing right before it fails and asks for further details.
Then i just get "[email protected]" not available. Think its just broken in the preview.
Same Problem with Exchange 2007.
I installed Win 8 on my Lenovo X220T. When I want to use the calender it tells me to register a microsoft account, but frankly spoken, I don't want to. So is there a way to directly add an exchange account, where all my calendar data is stored? And where do I add an exchange account?
Thanks!
What is weird is I had Exchange working fine by signing into the Microsoft Account and setting it up. But then I joined our domain, and now I cannot get it to connect at all.
It may be a glitch in this preview, but try un-joining the domain and see if it works for you then. I just did that, and my Exchange inbox is running again.
sinister.dexter said:
What is weird is I had Exchange working fine by signing into the Microsoft Account and setting it up. But then I joined our domain, and now I cannot get it to connect at all.
It may be a glitch in this preview, but try un-joining the domain and see if it works for you then. I just did that, and my Exchange inbox is running again.
Click to expand...
Click to collapse
So, what does that mean? Does it mean that I HAVE TO sign up a microsoft account in order to not syncing with it, but with my exchange server? I want to directly sync with my exchange server... windows phone 7 can do it as well...
lamajstro said:
So, what does that mean? Does it mean that I HAVE TO sign up a microsoft account in order to not syncing with it, but with my exchange server? I want to directly sync with my exchange server... windows phone 7 can do it as well...
Click to expand...
Click to collapse
I couldn't find a way to not sign into a MS account before setting up my exchange account (but yes, after that it directly syncs).
This could easily be because this is a consumer preview, of course. But I have a MS account, so it wasn't a big deal to me. I signed in, and it let me sign into the exchange account.
But again, the odd thing is once I joined the domain, I lost the ability to set this up. When I left the domain, the exchange account worked again.
For now I'm just chalking that up to pre-release weirdness, and using it off domain.
sinister.dexter said:
I couldn't find a way to not sign into a MS account before setting up my exchange account (but yes, after that it directly syncs).
This could easily be because this is a consumer preview, of course. But I have a MS account, so it wasn't a big deal to me. I signed in, and it let me sign into the exchange account.
But again, the odd thing is once I joined the domain, I lost the ability to set this up. When I left the domain, the exchange account worked again.
For now I'm just chalking that up to pre-release weirdness, and using it off domain.
Click to expand...
Click to collapse
Can you please tell us which version uf exchange you use... and is your exchange connection ssl based?
HerrVorragend said:
Can you please tell us which version uf exchange you use... and is your exchange connection ssl based?
Click to expand...
Click to collapse
Yes, Exchange 2007, uses SSL.
Attached is what the display looks like once it's up. Sorry for all the redacting, but I don't want to spread anyone's personal info.
The inbox is pretty basic, and your options are limited, but then I've not installed an Office product or anything, I'm just connecting through its normal interface, the way I would through Windows Phone or the like.
Going to try installing Office in the Desktop environment today I hope. No idea if that'll work at all.
Connected to 2 Exchange Servers
FWIIW I've got it connected to two Exchange Servers (a corporate 2007 system and a hosted 2010 system) and it is working.
A few notes:
Those that have commented here about having to first logon with an MS Live account (if joined to a Domain or using a Local User Account/Profile) I am seeing the same thing. Not real happy with this (actually I’m not real happy with a lot of App issues surrounding the whole “must use a Windows Live Logon/Profile to get the full features of this App approach but I promised myself I’d not do the rant in this post”) However once that has been done it appears that you can set up multiple accounts with ease.
Having corporate IT correctly set up Exchange Front-End Certs and Mobile Device Policies correctly are critical (and yes, I’ve designed a few Exchange systems in my time so I know some of the mistakes that can be made there) so if people are seeing policy-applied errors or sync refusal problems it could be because of the Beta nature of the app but I’d also would be looking at the Front-End or CAS server setups as well as currently deployed policies (depending on the version of Exchange)
Overall my impression so far is that the App feels remarkably like the original email/calendar App in WP7, which is a shame because what MS should be shooting for is an App that works more like the WP7 Mango version. Like that version I’d really like to see the following:
• Option to create separate tiles for each account or selectively combine accounts together at the users discretion (this feature kicks ass over the iPhone/iPad/Android options right now and I want it in Metro as well)
• Option to select Calendars and Colors that I want to use in the Calendar Function (right now I get every Calendar folder I have created on both exchange servers – hated that on the pre-Mango WP7 and hating it on WP8 DP as well
• Needs to work correctly regardless of whether it is a domain account, local account, or MS live account (seriously MS, this should be a no-brainer)
With only 36 hours to really bang on it so far I’m sure I’ll find a few more quirks but so far it kind of sorta works as advertised for me. Juts needs a LOT of refinement

Shortcut to Active Sync account options

Hello. I support a large medical agency and they have adopted Galaxy S 3's as their company phone. They have to change their Active Directory password every three months, which in turn means they have to update the password for their email on the phone. I was wondering if it's possible to make an app that would simply bring up a field where they can type their updated AD password in and it update the password withing the account settings. I hope this makes sense. Technologically speaking, most of these people are a generation from stone tools and smoke signals, so I'm basically looking for a way to eliminate as many steps as possible from the process. Thanks for any assistance.

Categories

Resources