Hi,
I am trying to setup My KNOX in my N910U.
Everything went fine, the KNOX is starting but, when I try to setup my company Exchange mail, it accepts all the setup process, then is asking me to update the Security settings as requested by the server.
It takes me to the Security / Activate device administrator, Email appears requesting admin rights.
My problem is that this page seems to be blocked, I cannot scroll or press Activate or Cancel, so I cannot actually use the office email at all...
Does anybody experienced something like this? Is there any solution or workaround?
MariusB said:
Hi,
I am trying to setup My KNOX in my N910U.
Everything went fine, the KNOX is starting but, when I try to setup my company Exchange mail, it accepts all the setup process, then is asking me to update the Security settings as requested by the server.
It takes me to the Security / Activate device administrator, Email appears requesting admin rights.
My problem is that this page seems to be blocked, I cannot scroll or press Activate or Cancel, so I cannot actually use the office email at all...
Does anybody experienced something like this? Is there any solution or workaround?
Click to expand...
Click to collapse
I had a similar problem. I was trying to set up Knox using my work Exchange email while I was still on their WiFi network. This is incorrect. I first had to get OFF of their network and then begin all over again. So, while I was on my T-Mobile network, I enrolled my device to My Knox and then it worked. You must click "activate" so that the device can be a device administrator. Whatever you are asked to allow....go ahead and allow it.
Kal-El7 said:
I had a similar problem. I was trying to set up Knox using my work Exchange email while I was still on their WiFi network. This is incorrect. I first had to get OFF of their network and then begin all over again. So, while I was on my T-Mobile network, I enrolled my device to My Knox and then it worked. You must click "activate" so that the device can be a device administrator. Whatever you are asked to allow....go ahead and allow it.
Click to expand...
Click to collapse
Hi,
I tried all these steps, I used either the WiFi at home, even the 4G network.
I even uninstalled and reinstalled the My Knox but,when I reach this Device Administrator, the page is unresponsive, I cannot scroll it or press the Activate.
I have now a support ticket with the developers at My Knox, they asked me for a lot of Print-screens, also they asked me to setup the email using the Default Email client (which works, by the way) and they are investigating the issue.
I will let you know if the find the problem.
Regards,
Marius
Related
When I set up an exchange account the phone ask me to set a password. Now every time I turn on my phone it or wake it up it asks me to enter the password. How do I remove the password???
If you were forced to set a password when you set up exchange activesync then the password is enforced, you can't remove the need for a password as long as you sync to that server.
The IT policy is set by whoever administers the server for all connected devices, most companies would use that setting for example to protect their data.
Who is hosting your exchange? Is it a work account?
It's 1&1. I really wish i knew that before i bought. Everytime I wake up the phone I have to put in a darn code. Is there any way around this? Very annoying.
Only way around it is to remove the exchange connection.
It's a server-wide policy - to cope for some users needing passwords, maybe even their own staff it will have been set up.
I'd stick with it personally, the device is more secure when lost with it enabled... I carry a wizard and Blackberry - both need password entry but I'm used to it
This week end I tried to sync my oulook mailbox and it asked me to accept new security policy.
It was in fact my company that upgraded to latest Outlook mail server with push functionality.
I was very happy and push is working fine.
But now I also have this annoying Pin code to enter every hour.
Also even when I entered the code and I am free to use my phone during one hour, I noticed that each time I turn it on I have a blank screen for 1 seconde before it loads the today page slowly.
This password feature is not nice at all and I really want to get rid of it.
I am pretty sure we will be able to find some regkey to unlock this stupid security policy like in HKLM\security\Policies\Policies.
It has to be a user choice in the end.
Do you know if I stop syncing with my server if i can remove it?
no, as I've said twice already, if you're using exchange activesync then this policy is enforced.
It's not user choice, if you're syncing your device with your employers equpment it's their data, they're legally entitled to protect it. If you're syncing with a third party server then the device will do as its told... the server is considered authorative - the same is true of Blackberry.
If you can find a way to alter the policy the checksum of your settings will differ to that stored on exchange, when the device next syncs it will see the change in policy and enforce the correct settings, turning the security back on.
Seriously guys, if you want exchange activesync then live with the policy , if you don't then disable the server connection.
remove the activesync service then yes you should be able to edit again to disable.
of course the thing mentioned above is not a solution...
i'm hal-way there and spoke with the rom makers to find a complete solution...this one is just temparary...
SeanH said:
I have been using a registry hack everyday to prevent my WM5 device from locking itself every 30 minutes. At around 7:00pm the company I work for forces a policy to my device using push email. At that time I open a registry editor and modify \hklm\security\policies\policies\00001023 from 0 to 1. That prevents the unit from asking for a password for 24 hours.
Click to expand...
Click to collapse
good luck
remen said:
of course the thing mentioned above is not a solution...
i'm hal-way there and spoke with the rom makers to find a complete solution...this one is just temparary...
good luck
Click to expand...
Click to collapse
I've decided I'm not going to be able to help on this one. It's your company's choice to enforce that security policy and not mine to help you get around it. I'm not being rude, I'm just not able to put time into research to do that at this moment.
Good luck.
Ok this may sound really dumb but I was messing with my MDA last night and set up Exchange Activesync to sync with my work email.
Apparently the email admins (not known to me) enabled the device password policy. After I deleted my exchange activesync settings, the password setting is still there!
Yes, I already tried going into the "lock/password" setting option in the control panel but since the security feature was enabled through the Exchange policy, those options to remove them are grayed out!
Does anyone know of a way to remove this? I'm assuming there MUST be some registry settings I can edit??
I tried playing around with the registry but I'm not that familar with WM 5 registry so I didn't want to mess it up further.
Any help would be GREATLY appreciated!
Device Reset? That's what I did with my MotoQ. I think it is a registry setting though.
I was not able to find info anywhere on MS site how to reverse the darn thing. Even when I removed the policy from the Exchange system testing security settings, it would still prompt for the password.
Let us know.
I have the exact same problem. My device now locks after 1 minute, extremely annoying.
Does anybody have an answer to this problem?
Thanks in advance.
Well... what about talking to the exchange admin and find out the password?
I think you should ask to your exchange admin to remove security policies for your account and resync it !
Have you ever considered WHY there is a password policy enforced?
Maybe to secure the device when left unattended?
And there MUST be a policy enforced to enable a pushed remote wipe, in case you lose the darn thing.
In that case a password policy is the most simple way to do this.
I'm an Exchange Admin myself, and I also enforce a password policy.
So I guess they wont help you with removing.
And even when you remove it via the registry, and you sync it again directly with the server, the policy is enforced again.
So you end up with a device you cannot sync again with your work email.
But a lock policy of 1 minute is harassing somebody, it must be a mistake.
In that case you should contact the exchange admins.
It turned out to be a misclick by myself during the setup. Because I changed the password of my exchange account, I was asked if I wanted a password on my mobile device (according to the exchange admin). Unfortunately I clicked 'yes' en 'next' to fast, leaving me with a device that locked after a minute. Problem was 'solved' by a hard reset.
I suffer from this a whole day even after asking my Exchange admin to turn of that security policy on the server.
Finally I reach a clean solution:
go HKLM\controlpanel\password
turn Dword:HintCounter from 0 to 1
going back to setting-password, now the grayed options return to black.
huangyz said:
I suffer from this a whole day even after asking my Exchange admin to turn of that security policy on the server.
Finally I reach a clean solution:
go HKLM\controlpanel\password
turn Dword:HintCounter from 0 to 1
going back to setting-password, now the grayed options return to black.
Click to expand...
Click to collapse
sadly enough, this doen't work for me...
i also got the pushed policy from the microsoft exchange server so i NEED TO HAVE the $%^&$ password, onterwise when i'm configuring the pushmail it won't accept.
if it was just entering the password it would be okay but it seems that when i use the ''password lock fuction'' and push it on stand-by and back on again the today screen quickly show's to turn black again and sort of reload the page (this hapens in about one second).
and when i don't use the ''password lock fuction'' this doen't happen, so it's clearly the ''lock fuction'' that's causing it.
now how can I disable the password?? i know that normaly you can do this by disabeling this in the menu, but it's turned gray cause of the pushed policy i gues...
and i got the wake-up problem too, but that's also solved when the password is removed... :S
for the rest i can only say, REALY GOOD WORK, and that count's for al,most everything here, i'm really satisfied with my wm6 busniess edition, it rock's!!accept for the thing mentioned above...who can help me out??is there another register tweak to disable the lock?? thanks in advandce and excuse me for my bad english
grtzz
Remen (from the netherlands)
My company runs an exchange server for email, and I was wondering if anyknow knows how to connect to them, using the mogul. I went through the setup on the phone, with no success...Are their any additional steps required to connect to the server when you are not on the same network as the server?
Missing Certificate ?
I think you'll have to install the certificate from your Mailserver on the phone to get it working.
Do you get any active-sync error code when you're trying to sync ?
In general you get an error-code in ActiveSync which is telling you what's wrong...
IMHO the best idea would be: aks your IT-Stuff in your company
you need to add a server in active sync with your companys exchange server addy and your username/password
To be clear you need to enter your companies OWA server address. At most small companies this is your Exchange server and at most large companies it is your ISA server.
Example:
You access OWA using https://exchange.mycompany.com/exchange
You enter: exchange.mycompany.com in the activesync settings and you use your username, password and domain to authenticate
You also need to make sure Outlook Mobile Access is enabled on the Exchange Server and on your Exchange Mailbox. You will need to contact your IT Admin to verify these settings.
I'm in the same boat as the OP. I had been trying to hit the mail server directly or via VPN, with no luck, probably due to no certificate. Never thought about OWA. I set this up as indicated in the prior post, and checked 'Tasks' only (just to run a quick test), and it sync'ed fine. I then checked email and calendar, and now it takes me to a company sign-in web page (same page I encounter when using web access to OWA). Weird thing is the page is in the ActiveSync window and does not appear to be rendering correctly or completely (e.g. no 'submit' button). Nonetheless, I sign in and click where the submit button "should be" and the page goes away and it appears to start syncing, only to take me back to the sign-in page again after 15-20 seconds. Any suggestions on how to get past this point? I've tried logging in to OWA from IE, but ActiveSync still brings up this sign-in page. And yes, I've got my userID, pswd, and domain properly set up as well. Thanks.
BTW, my company IT won't help because they only support handheld access for specific company-issued devices.
try using mail.yourcompanymailserver.com/oma
its a lightweight version that handles easy in mobile browsers (only if your IT guys have enabled it)
as for the OP your exchange settings could vary depending on how your admin set it up, ssl (requiring a certificate) or not. to get the certificate from your company you can dl it from the server mail.yourcompanymailserver.com/cersrv
you log in using your mail credentials and you select download certificate chain and select a der 64.
save it to your phone and just install.
chances are though if your company is using a lot of treo's they dont require ssl because you can't install self issued certificates on them (good work palm). so if you want to ask your IT guys their setup and post it here i can try to walk through it with you.
this is my situation and how i got it to work.
Although i tried to internal address of 1x01po2s.domain.name, that didn't work.
I thought about it for a while, and reasoned if i can access my companies exchange server outside the network through a http://mail.domain.name address, then maybe that'll work hahaha
BAM! it did and now it works perfectly fine. Conincidentally, since i started trying to get this going last week, i emailed a few guys i know and the last one who got my email (it was forwarded to try to solve the problem) said that because of security policies, i am not allowed to do this. Ooops!
Here is a quick run down of my settings:
server address: mail.domain.name
ssl is selected (checked)
username: exchange/nt workstation login name
password: user password
domain: network domain (we have different domains)
save password is selected
under advanced you can select whatever options you like
next select e-mail, and any other options you want
and you're done!
I also enabled the push email icon and get my email regularly on my phone throughout the day.
Well, i hope that this helps some of you out.
server address: mail.domain.name
Click to expand...
Click to collapse
just so folks know there is no standard for this, its whatever subdomain your company decided to put OWA on, for my company its webmail.companywebsite.com
best thing to do would be to ask someone in your company how to access email from outside the office using internet explorer, thats the address your lookign for
Sprint mogul (Titan) WM6.1 Rom update killed exchange server activesync
(Sorry in advance for the long Email) I purchased a Mogul from RS about three weeks ago. For the first week, it worked great! I logged into my company exchange server down loaded and synced email, cal,contacts,tasks ... was very excited. I also got very excited when I started t read threads in this blog .... it seems like there are some pretty smart members maybe someone can help!!
Noticed that there was a new Rom (Sprint TV and improved connection) installed the ROM.
Have spent endless hours with HTC technical support, sprint technical support (not an appropriate name). At times managed to get the email to load but never again Cal, Tasks, contacts. Always able to get sent emails to load (by checking option) . I'm left with a couple of alternatives (any others would be greatly appreciated (actually I really like this phone but I need my email,schedule,etc to work) The error is 0x8503001C there is no exact description about this from MSmobile it seesm to be an awh**** code. Searching on the web provides 1000s of hits unfortunately not just my issue.
o Go to an early Rom WM6.0. So far it seems like to do this I need to unlock the phone then flash the earlier rom?? Since no SIM card I need to hack the registry?? There are several products out there which is best (I do not mind paying for somethng that works well). I down loaded several "Oficial ROm versions ... unfortunately did not write down the number of the one the phone came with.
o Find some way of getting this thing to work well to keep the extra features
o My grace period ends in a week ... cancel with Sprint go to Att but there is not a 3G phone I like ... only Iphone ... it has issues for exchange server??
o I got my wife a Touch at the same time (it runs WM6.1) same issue. Downloaded once my corp email no cal, etc.
o I was told that this Rom was cooked up by MS & Sprint what a disaster
Please, please help ... Thanks in advance
Scurfer
Exchange email and Skype not working after Upgrading Sprint Touch to Wm6.1
The Exchange activesync died at connection and never can sync my company emails after I upgraded Touch to 6.1 Sprint/HTC ROM. Skype also does not work, no sound after first ring, even with 2.2.0.45. I like the GPS and Rev.A speed, and do not want to risk downgrading the ROM. Anybody encounter ssimilar situation?
I have searched and searched for an answer to this problem and have not been able to find anything. Hopefully someone here has run into this before and might have an idea or solutuion. Her is my problem.
I have two exchange servers (2003 SP2) on of which is a front end server handling OWA and OMA. We sync about 18 Windows Mobile 6.1 devices over the air using OMA. We are using SSL. All of our devices have random problems connecting to the server. They will sync fine most of the time but will randomly for no particular reason ask the user for their exchange password. We are not enforcing any password policies on the server and we are always checking the box to save the password. In order to get the device synching again the user has to re-enter their password multiple times and often has to kill and restart activesync on their device.
Any ideas as to what might be causing this?
Any help would be much appreciated.
You could try unchecking the box in Activesync on the phone that requires SSL. We use SSL as well, but we have to uncheck that box on the phone. Although our problem is that the phone never syncs when its checked as opposed to your problem of randomly not syncing and asking for a password.
Unfortunately that is not an option. Our SSL is required for authentication. It will not connect without it. It seems like what is happening is that the device is not always passing the credentials to the server. Usually when it asks me for the password I enter the password once making sure I check the Save Password box then when it asks me the second time I hit cancel. ActiveSync then gives me a could not authenticate error. Now if I just hit Sync again it goes through and works just fine without asking for the password. So my guess is that it is not passing the credentials until after the connection is reinitialized.
From what I understand, Push Email relies on the OMA functionality which uses IIS. The problem my lie there. Although I've never tried, you may have to uninstall/reinstall (or confirm) that the OMA part of Exchange is functioning correctly. Sorry I can't be of more help.
Do the log files on the server show anything when a phone can't log in?
No, the exchange logs don't show much. I almost think it might be something with the device configuration. At this point I just don't know. We will be migrating to Exchange 2007 sometime in the next few months. Hopefully that will resolve the problem permanently. I was just hoping maybe by some chance someone here had seen this problem before. Thanks a bunch for your help.
Is the FE server doing the authentication (NTLM) or is there an ISA server in the way configured with Forms Based Authentication? You should make sure the IIS virtual directory for OMA is set only for Basic Auth - and the following article might be worth a read.... http://searchexchange.techtarget.com/tip/0,289483,sid43_gci1188440,00.html
Hope that helps - good luck!!
Mark.
^^^What he said. Took the words right out of my mouth. You'll still be secured through the SSL certificate, even though you're doing "basic auth" you aren't exactly sending your password as clear text. Requiring SSL on the OMA site will automatically encrypt the connection so you have no need to worry.
Try it out and get back in here. I manage a site with about 50 WM 6.1 Black Jack II's that sync with Exchange 2007 with no issues whatsoever. Also verify that you have all your hotfixes related to OMA installed on your Exchange 2003 server.
Okay, my HD2 yesterday forgot my unlock passcode, I have not installed any version of sype, and running 1.66 WWE stock Rom. My Exchange Server security policies forces a passcode.
What i have found (tested) is that an option in BsB Tweaks is causing the problem.
The option that is causing this (or at least for me) is 'Owner Information - show or hide owner in settings'
When enabled, with the show notes, your Owner information and notes are displayed when you wake the phone (before slide to unlock) I wanted this option because it gives you a slightly better chance of recovering your phone if it gets lost.
It works well initially, then for some reason it fails to show, restart the phone and BANG, your passcode wont work!! I have experimented this and it happens every time.
Thought I'd let you all know my findings, and hopefully this bug can be ironed out.
regards
Paul
I've tested it some more today, and I'm pretty sure that it is the Owner info. Going to leave it off now, but would definitely want this feature fixed As i said before it does give me a slightly better chance in getting it back if it gets lost!
Have you tried using the Recovery Password from the Outlook Web Access for your exchange server?
It's not the Exchange password that gets forgotten, it the unlock code for the phone!!! You just cant unlock the phone, hard re-set is the only option!!
Its a know problem for some people that install sype! Same thing your passcode just will not work
Paul Boy said:
My Exchange Server security policies forces a passcode.
Click to expand...
Click to collapse
Microsoft said:
You can use the EMC, the Shell, or Microsoft Office Outlook Web App to recover a device password.
You can require a device password through Microsoft Exchange ActiveSync policies. A user can configure a device password even if your Exchange ActiveSync policies don't require one. If users forget their password, you can obtain a recovery password using the EMC or the Shell. The recovery password unlocks the device and lets the user create a new password. Users can also recover their device passwords by using Outlook Web App.
Click to expand...
Click to collapse
Is what I think you are looking for.