Exchange Security Policy forcing password - Desire General

Whenever I enabled my Exchange work email account, the phone forces me to set a password which drives me nuts, because I have to then set the screen timeout to at least 2 minutes so I don't go mad typing in the password every time I reach for the phone. I found a lock delay app which works great, but only after I disabled Exchange, so the screen times out after a minute but only locks out after about 10 minutes - MUCH better.
I just can't use this with Exchange as the 'security policy' over-rides everything and drops me back to password lock out with screen time out.
Any thoughts?

Lock Picker
Search Android Market for an app called Lock Picker by Jeroen Brosens. That should solve your problem.

And the Exchange Security Policy won't override this?

cosmicharade said:
And the Exchange Security Policy won't override this?
Click to expand...
Click to collapse
As far as I know, no. Lock Picker runs as a service which completely disables the policy. I.e. the phone will be locked no more. Works like a charm on my Desire. However, if you at some point have the need to remove and re-add the account remember to disable the service while doing so.

I found a few applications but no app by the name of 'lock picker' - I Lock Delay is great though as it sets a lock out different to the screen timeout.
Ideally one would be able to delay the lock past screen time out, I don't mind using a password (prefer in fact) but it's annoying to have to re-enter a password every two minutes, otherwise the screen is left on if I set the timeout for longer.

You could try this :
If your company is enforcing exchange security policy regarding password , but you want to use the lock pattern (Gesture) instead then you can do the following:
1. Delete your exchange Setup on the phone.
2. Go into Security and setup a lock pattern.
3. Once that is done and tested readd your exchange account.
4. Download the app called LockPicker from Market place.
5. Go into the program and enable the Override.
6. Enjoy the new way of unlocking your phone.
Click to expand...
Click to collapse

i also had this problem... when i setup my company mail account that the phone forced me to enter a password ...
so i just installed LockPicker and it worked ... no password entry screen anymore
great app !
- kr

Had the same problem too.
I made a new unlock pattern first, added my exchange account, installed LockPicker and then uninstalled it, works like a charm

Ok so I've installed lockpicker and removed the forced password. If I remove this app now, I can go back to before with the Lock Delay app? Can I also run custom lock screens on top too that display info on the lock screen?
The ideal set up is delayed password protection, say 20 minutes, with screen time out to 2 minutes.

Related

Lock/Enter PIN to unlock

Hey there,
I use 1and1 for my exchange access and they require you to use some sort of security enforcement policy on your phone. On windows 5 I was able to put in a 4 digit pin and set it to only ask me for it after 24 hours of non-use. It also asked me for it on reboot. I keep my keypad locked because there's nothing I hate more than having my phone dial random people. To do this of course, I just held down the end key untill the screen locked. To unlock it, I just pressed the center button on the d-pad and the asterisk key. Everything was peachy.
Well in windows 6, they still require me to enter a PIN in and everything, BUT I cannot change the time in which it requires me to enter my pin to unlock. Additionally, every time I screen lock my phone I have to enter my PIN which is incredibly annoying.
Is there some sort of reg hack that I can fix this with?
No, the point of security enforcement is to protect the device from having sensitive data stolen and as a result these kinds of policies can not be overridden through any fashion except settings on the exchange server. You need to contact 1and1 and ask them to remove this policy, or switch to another exchange provider.
4SmartPhone doesn't pull this stuff.
Thanks for the response, but I don't think I made myself clear enough.
I don't want to bypass the security, I don't care about that.
I just don't want to have to enter my password every time I want to use my phone. Who does that?
Start>Settings>security>device lock
from there you should be able to adjust the phone's lock settings.
whether you want to get round it or not, it is most likely the policy set at 1 & 1's end and they need to adjust it at their end....
it might be that this function on the exchange works differently on the server cos it is windows mobile 6.
As WM6 is optimised for Exchange 2007, it could be a bug in the MS Activesync set up when using these policies on an exchange 2003 SP2 server.
I don't have a WM6 excalibur, but i can test it with an S710 and our Exchange 2007 server if you want....?
One more thought, delete the exchange partnership, and then go into the lock settings. Turn the lock on and set it to 24 hours.
Then go back in and turn it off. the time settings should stay at 24 hours even though it is turned off.
Then set up the exchange server. if you are lucky, it might just stay at 24 hours instead of the OS default of 0 minutes.
Be lucky....
try this:
Enable changing password lock time:
In the registry do the following:
\hklm\security\policies\policies\00001023 from 0 to 1.
i have the same problem with 1and1 using a cavalier with wm6. my real problem is that sometimes at startup the device gets stuck in t9 and will not recognize the numbers in my pin so i have to hard reset the device. 1an1 say they have nothing to do with the security password and will not help
Disable T9
Heh-heh, I never liked the T9 thingie on my T-Mobile Dash/HTC Excalibur. To turn the T9 on and off (toggle) press alt and then press space. This should toggle the T9 function of WM6 smartphones. At least, it did on my Dash.
Now, on with my crusade to unlock my Dash!!...
turning the t9 off is the same on the cavalier, but the problem is that sometimes this test rom decides to turn it back on at start up and other times it does not. it is really pissing me off.
thanks for the suggestion though. i just really need a way to dissable this security password.
joedm said:
try this:
Enable changing password lock time:
In the registry do the following:
\hklm\security\policies\policies\00001023 from 0 to 1.
Click to expand...
Click to collapse
The phone gives an error screen and says "unable to perform this operation".
on my wm5 ppc i removed the exchange account yet I can't turn off the pin security. Now thats annoying.
you can also try this: http://forum.xda-developers.com/showpost.php?p=1269318&postcount=7
I haven't tried it myself =)
joedm said:
you can also try this: http://forum.xda-developers.com/showpost.php?p=1269318&postcount=7
I haven't tried it myself =)
Click to expand...
Click to collapse
cool that worked thanks!
Before you can change the registry keys, you need to run the "Application and CID" unlock program provided on this site. I did it on my Cavalier and it worked like a charm.
Any ideas anyone?
Hey mtvkilledusall -
Did you ever get this figured out? It is annoying the ****e out of me!!!
I'm the Exchange admin, and I'm considering turning off this "feature" for my device.
Like you, I just want to be able to KEYLOCK the device (so it doesn't dial 911 in my pocket, etc.), but I'd still like to keep the security.
This used to work fine on my MDA. Very annoying.
mtvkilledusall said:
Hey there,
I use 1and1 for my exchange access and they require you to use some sort of security enforcement policy on your phone. On windows 5 I was able to put in a 4 digit pin and set it to only ask me for it after 24 hours of non-use. It also asked me for it on reboot. I keep my keypad locked because there's nothing I hate more than having my phone dial random people. To do this of course, I just held down the end key untill the screen locked. To unlock it, I just pressed the center button on the d-pad and the asterisk key. Everything was peachy.
Well in windows 6, they still require me to enter a PIN in and everything, BUT I cannot change the time in which it requires me to enter my pin to unlock. Additionally, every time I screen lock my phone I have to enter my PIN which is incredibly annoying.
Is there some sort of reg hack that I can fix this with?
Click to expand...
Click to collapse
Same issue here after upgrading from Samsung Blackjack 1 to a Blackjack II, WM6 and 1and1 Exchange server. On top of that, after configuring exchange, my phone also looses the menus quick access numbers. Very frustrating.... Anyone found a fix yet?
Thierry.

Activesync-TomTom and Password lock question

I've had a quick poke around and cant find anything obvious about tweaking the activesync security settings so it doesnt lock out after the configured time when running an app such as TomTom, bit useless if it keeps doing it realy. Our Policiy is max 20 mins before the device locks. bit of a PITA if youre trying to navigate your way somewhere.. anyone got any ideas??
I'm having the same problem. I have my device setup with MS Exchange and the password lock is set to kick after 5mins. Annoying for navigation software.
Any more info on this?
yep there's a small app attached, once installed it intercepts the exchange policy push which allows you to set the lock to kick in when you want it or just to switch it off, I would suggest that you use it with caution, as you would be breaching your company's security policy, e.g. only disable the password when you are using tomtom, the rest of the time you should set it to whatever your company security policy is.
Disclaimer, I am not telling you to use this so you use it at your own risk.
Nice one- seems to be working a treat.

Goodmail - changing keyboard lock intervals

Hi,
I have just installed goodmail top get my work email (as the corporate for some reason is supporting this). I find it very annoying that every 10 minutes it locks itself and forces me to enter a password. So if I need to make a phone call, I have to enter this password to unlock it.
The current preferences in goodmail only allows me to select the timeout interval to be 1, 5 or 10 minutes only.
Is it possible to turn off this locking, or allow the interval to be changed to 99 minutes - by registry hack or something?
Many thanks.
this is controlled by your company at the GOOD Server. Like Blackberry, GOOD has built in a way to apply policies to the handheld. It's a good thing from a corporate IT security perspective, but a bad thing for the, sometimes, over-restricted end-user.
thanks, I suppose from the response that there is no way to get over it. It is very annoying especially when I am forced to set a 6 digit password.
I only need to use a 4 character password and get 30 minutes before the device locks.
When i try and change the keyboard lock interval, I get only three choices - 1, 5 and 10 minutes. I looked at the registry and that has value = 3.
When I set/change the password, I get a message that it must be atleast 6 characters.
I believe this must be the policy set up by the company - I will chase the administrators and find out.
Thanks and regards,
Satinder
spahwa said:
Hi,
I have just installed goodmail top get my work email (as the corporate for some reason is supporting this). I find it very annoying that every 10 minutes it locks itself and forces me to enter a password. So if I need to make a phone call, I have to enter this password to unlock it.
The current preferences in goodmail only allows me to select the timeout interval to be 1, 5 or 10 minutes only.
Is it possible to turn off this locking, or allow the interval to be changed to 99 minutes - by registry hack or something?
Many thanks.
Click to expand...
Click to collapse
Are you sure you can't use your phone without unlocking? I have goodmail and it lets me place and receive calls without unlocking. It tries (and partially succeeds) at blocking me from viewing my contacts, but I can still make calls.

Timed lock

Does anyone know of an app which will replace the current lock (every time you close) to lock after a certain time eg 15 minutes.
Most of the time lockinging software in the market seems to require a
"Screen unlock pattern" to be set first but the Desire does not seem to have one or it is knocked out when you setup sync to Exchange Server 2007
Sam
samcory said:
Does anyone know of an app which will replace the current lock (every time you close) to lock after a certain time eg 15 minutes.
Most of the time lockinging software in the market seems to require a
"Screen unlock pattern" to be set first but the Desire does not seem to have one or it is knocked out when you setup sync to Exchange Server 2007
Sam
Click to expand...
Click to collapse
Menu > Settings > Display > Automatic screen timeout?
You can't set it to dim the display but not be locked anyways, I don't think. Or does Proximity Tool offer that functionality?
No that does not help, once the light goes out you need to enter a password.
If you link to Exchange Server 2007 it forces a policy of a maximum of 5 minutes.
When I am with a client I do not want the screen to stay on too long and flatten my battery but I would like the Desire to remain unlocked for about 15 minutes for each unlock.
maybe a registry edit could fix that?
I've been using Lock Delay for doing exactly this. It's not free, but only costs a few pence I think.
-------------------------------------
Sent via the XDA Tapatalk App
samcory said:
No that does not help, once the light goes out you need to enter a password.
If you link to Exchange Server 2007 it forces a policy of a maximum of 5 minutes.
When I am with a client I do not want the screen to stay on too long and flatten my battery but I would like the Desire to remain unlocked for about 15 minutes for each unlock.
Click to expand...
Click to collapse
Hm. Have you tried No Lock? It might work, even with exchange. It just bypass the whole slide/pattern thing, but I haven't tried it with Froyo and passwords yet.
Edit: works with alphanumeric passwords. So it should be fine in combination with setting your auto screen timeout to whatever you want it to be.
Timed Lock
NO LOCK works very well, but once you start it your Desire stays unlocked indefinately or untill you turn it off.
This is a bit too dangerous for me, I do need it to lock after a prescribed time say 15 minutes.
Sam
Timed Lock
LOCK DELAY will not work since it demands a "Keyguard Pattern" to be enabled before it will work. My Desire does not seem to have Keyguard.
My Desire does not have Keyguard. I do not know if the Desire comes with it or it is something disabled by connecting to Activesync on Exchange Server 2007.
Sam

Adding password to Owner mode?

From the lock screen there's an option to switch "accounts", at the upper right hand corner.
Is there a way to (or how do you) assign a password to access the Owner account?
Capataz said:
From the lock screen there's an option to switch "accounts", at the upper right hand corner.
Is there a way to (or how do you) assign a password to access the Owner account?
Click to expand...
Click to collapse
Pretty sure, haven't tried this myself on this device yet (as I have no need for guest mode), all you need to do si go to Lockscreen settings and set up a password/pin there.
IIRC, guest mode is multi-user in disguise, and this is how I set up a pin for normal functions on my tablet, and restricted access for the guest account.
Hope this helps.
joel.maxuel said:
Pretty sure, haven't tried this myself on this device yet (as I have no need for guest mode), all you need to do si go to Lockscreen settings and set up a password/pin there.
IIRC, guest mode is multi-user in disguise, and this is how I set up a pin for normal functions on my tablet, and restricted access for the guest account.
Hope this helps.
Click to expand...
Click to collapse
Ah it does work, albeit sort of indirectly. If I add a PIN/Password to my lock screen then the guest user will not be able to go beyond my lock screen even if he/she switches to Owner mode.
But doing so means that I would have to enter a PIN/Password too each time I want to get passed my lockscreen. What I was looking for is that the PIN/Password be asked when switching to Owner account from Guest account itself, not the lockscreen of each account (or to-and-fro other accounts, if there are others).
True but you can now use Smart Lock in Lollipop to add a bunch of stay unlocked scenarios such as whenever you are holding the phone, certain gps locations you choose, Bluetooth or NFC devices whenever they are attached. Then your lock screen stays pretty much unlocked all the time you use it normally. But it will still ask for password or unlock pattern you choose when switching accounts.
Sent from my ASUS_Z00A using XDA Free mobile app
texla said:
True but you can now use Smart Lock in Lollipop to add a bunch of stay unlocked scenarios such as whenever you are holding the phone, certain gps locations you choose, Bluetooth or NFC devices whenever they are attached. Then your lock screen stays pretty much unlocked all the time you use it normally. But it will still ask for password or unlock pattern you choose when switching accounts.
Sent from my ASUS_Z00A using XDA Free mobile app
Click to expand...
Click to collapse
Ah I see. I havent meddled around with the Smart Lock feature yet, as I really just prefer the swipe-to-unlock. I find any other way to unlock to be cumbersome as 90% of the time it's only me using this phone, the 9% being my SO, and the 1% being other people like friends and relatives.
While my SO uses this phone in Owner mode, I was hoping I could switch it to Guest mode each time a friend borrows it to send a text or call etc. and have the confidence the he/she cannot switch back to Owner mode easily.
Then 99% of the time I'd just have swipe-to-unlock and I wouldnt have to worry about Smart Lock or other privacy/lock settings.
I was just comparing it to a PC, because this is like having multiple accounts in one phone. But it seems to have very little application when I can just switch back to the administator account (the Owner account) without any password.

Categories

Resources