[Q] Exchange Security Policy continuously want's to be allowed - Desire Q&A, Help & Troubleshooting

Hello
I recently updated to the new GApps and immediately noticed that my Exchange Account (which worked flawlessly before) demands I accept the Security Policy from my University's Exchange Server. So I allowed it and everything kept on working but every time I reboot my phone I get notified twice that I should allow the Policy which I already did and when I tap the Notification it just opens Mail and does not want anything allowed. Really annoying :/ Who's the culprit? The Exchange Server? Mail app? Android settings?

Related

Froyo & Exchange - "Update Security Settings"

Hi,
i have Exchange setup & working. I get a notification each time I reboot the phone it says update security settings. If I click on it, it goes away & doeesnt bring any other information together.
Any ideas on what it wants? Its not terribly annoying but its strange.
Thanks,
Rich
I don't have an answer, but I do have a question??? Do you still need to enter a password every time you "un-lock" the phone??? I am currently running 2.1 but use LockPicker to get around this.
Hi,
I dont have to enter any codes into my phone. I have exchange set up twice on my phone.
The first time I set it up with the default app so my contacts will be populated & then I set it not to check my exchange again.
Then I use Touchdown for my exchange needs. It works great & I would assume it would bypass that issue. I like Touchdown better as it downloads subfolders (once selected) by default, so the email is always in sync.
Thx...I have Touchdown and will try that once 2.2 goes OTA.
toddasimpson67 said:
I don't have an answer, but I do have a question??? Do you still need to enter a password every time you "un-lock" the phone??? I am currently running 2.1 but use LockPicker to get around this.
Click to expand...
Click to collapse
That's caused by a setting on your Exchange server from what I've heard. Basically its an enterprise level security feature. Without hacking it, like you have been doing, its not going to change in the software update. If anything, Google will make it harder to get around it, since they are trying to get enterprises to adopt Android, so they need to keep these kinds of settings around.
Lockpicker does not work with 2.2, you will have to enter a code but you can adjust the time for that code entry to up to 15 minutes, if you use Touchdown you will have to enter the code everytime you go into the touchdown app. its not to bad entering the code every 15 minutes, the screen for the code entry is huge with a big dialer, not so much of a pain as entering the code before.
Hi,
I am using exchange 2007 & Touchdown. I dont have to ever put a code in. Is this due to my exchange being a hosted exchange service vs a work corp email?
Thanks,
Rich
RichTJ99 said:
Hi,
I am using exchange 2007 & Touchdown. I dont have to ever put a code in. Is this due to my exchange being a hosted exchange service vs a work corp email?
Thanks,
Rich
Click to expand...
Click to collapse
it's a setting on the Exchange server. it just depends if the Exchange nerd was told to implement it or not.
I found this while searching to find a fix. I think that I figured it out though.
This is referring to the security settings for your phone and I believe that the Exchange server is set to require a password be entered on the phone to satisfy it's security requirements.
I turned on the pattern lock on my phone and haven't received the message again... Yet.
There's also an issue that I know of with Exchange Server 2010
If this setting has been enabled by the sysadmin;
Via EMC:
Microsoft Exchange
- Microsoft Exchange On-Premises
- Organization Configuration
- Client Access
- Exchange ActiveSync Mailbox Policies
Under Default policy, Device Password Required - Yes
Then your Exchange client on Froyo will bounce around asking you to press it's buttons every boot, and sometimes every time your network status changes!
EVEN IF this setting is reverted, there appears to be a bug where the security settings are still passed to the client device.
I've tested this myself and Ninpo [[email protected]] can verify.

[Q] Exchange security

I've always had my work email (Exchange) connected to my Evo, no matter which ROM I was running. Had it hooked up with CM6 RC1, no problems. Had a bit of trouble getting it set up with CM6 RC2, but was able to get it working with a fake domain, which took me to the manual setup screen. All is well, except...
Now I'm getting random notifications that Exchange needs security settings changed. I can click on the notification and it's not telling me specifically what I need to enable. Under security in the settings menu, Email is set as a device administrator (can't remove it from there or it disables my account.) The thing is, even without security enabled, I'm still able to send and receive email.
I know on my old WinMo phone, Exchange automatically enabled PIN locking of the screen - but it's not enabling the security that it needs to here. Any idea what I need to change?
I had that notification for a long time..i went into my OWA through the web and had to delete all my previous devices to my exchange account and re setup my exchange and havent seen that notification since..

Unable to open connection to server due to security error

Hello,
I had my email account set up on my ET4G. I've cleared it completely in the past and been able to set it up again.
I went to add my corporate email back on my phone and I'm getting the "Unable to open connection to server due to security error". We are running Exchange 2010 SP1. We've had SP1 on for several months now so nothing has changed with the server. Any guess on why I can't set up my corporate email account any more? When I set up the account on my phone everything looks fine. It asks me what I want to sync and history etc. I don't get the error till I try to open email.
I'm able to set up outlook connections remotely and check it from my ipad and check my email on the web.
Strange. This is new on my device I got an authorization notice I didn't notice until I swiped from the top and looked at the notifications. Once I approved it I was all set.
Lots of people running exchange 2010 sp1 have this problem. Enhanced email is a great alternative and is currently free on the amazon market, I recommend it immensely. It bypasses the exchange pin which is what kills the stock email app
Sent from my SPH-D710 using XDA App
Wizard Knight said:
Lots of people running exchange 2010 sp1 have this problem. Enhanced email is a great alternative and is currently free on the amazon market, I recommend it immensely. It bypasses the exchange pin which is what kills the stock email app
Sent from my SPH-D710 using XDA App
Click to expand...
Click to collapse
I'm using Enhanced Email -- still having this issue! Is it confirmed to be a problem with Exchange 2010? I've received this error on both the stock Email app, and now Enhanced Email so feel like I'm running out of options! Any help would be appreciated!
I've posted a step by step guide for connecting your Epic Touch 4G / Galaxy SII to your exchange server. It works with Exchange 2010 including Exchange 2010 SP1.
http://www.completesystemsdesign.co...d-tablet-to-ms-exchange-for-email-sync-2.html
I'm not having issues actually setting up the account, that works fine. The issue is it sometimes will not be able to sync with the server, leaving me with the yellow box at the top and without an updated email inbox. As you can assume this leaves me quite helpless because I need my email right away when away from my desk.
Anyone else with this issue and potential solutions???
Thks
Thks a Ton Jim. You just saved a Samsung S2 getting sunk in the pacific. Struggling since a week.
Additional step required
This was the key! Thanks so much!
If it give you an error message such as "Unable to open connection to server due to security error", your device may require an additonal step. Slide your finger from the very top of your device to the bottom. Check for notifications and there may be a notification your must allow the security update for email to complete. Enjoy

[Q] E-mail account (Office365) wants to be able to erase all data?

My company's e-mail server was running Exchange 2007 up until Friday night, which I was able to link to with my GN (and for that matter, my Nook Color) via the stock E-mail app. Over the weekend they updated to Office365, and after going through all of the nonsense about deleting and re-adding the account, the app is now telling me I have to change my security settings and give the account device admin settings. Among these are "Erase all data" eek and "Set storage encryption," neither of which are things I want to do, let alone give a remote server the ability to do. Apparently I'm not the only one that's worried about this.
So, Is there any way to get past this craziness? This is really frustrating, because a lot of the time I'm not in the office, it's important that my e-mail and calendars are synced automatically. I don't want to have to use a mobile web interface, or manually copy each meeting or appointment from the desktop interface into GCal. FWIW, I'm rooted (see sig for ROM, kernel, etc.) and would be perfectly fine going with a 3rd party app, as long as I can get new mail and all appointments pushed to the phone.
ETA: Here's a screenshot of the "permissions" it wants:
That is set by your Exchange Admin Team. I know of Email.apk's that will bypass the PIN lock requirement, but not those permissions. I manage our Exchange 2007 environment, and when I used Enhanced Email it wanted to be device admin, basically turning on PIN lock requirement and enforcing our Exchange Policies. They would either have to assign another Active Sync policy to your user account, or ease up these security restrictions.

[Q] Cannot set up Exchange mail sync

I just got my Gnex. It updated to Android 4.04. I try to set up email with my office Exchange account and it fails. The error message says "you don't have permission to sync with this server"
I'm using the same email exchange log in infromation as I have used on my Xoom. No problems there.
I tired using Touchdown and had the same results.
Any ideas?
Thanks
elcap373 said:
I just got my Gnex. It updated to Android 4.04. I try to set up email with my office Exchange account and it fails. The error message says "you don't have permission to sync with this server"
I'm using the same email exchange log in infromation as I have used on my Xoom. No problems there.
I tired using Touchdown and had the same results.
Any ideas?
Thanks
Click to expand...
Click to collapse
sounds like the server itself is rejecting your login.
maybe the company only allows one mobile device with your credentials?
i would remove exchange from your xoom and then try. if it allows you to connect then, there's your answer
I think that is unlikely.. I had a moto dinc syncing fine and upgraded to the nexus.
The dinc and zoom synced fine in parallel.. The dinc is now turned off.
elcap373 said:
I think that is unlikely.. I had a moto dinc syncing fine and upgraded to the nexus.
The dinc and zoom synced fine in parallel.. The dinc is now turned off.
Click to expand...
Click to collapse
that is the only thing I could think of.
It looks like the server is rejecting your login however.
Sent from my Galaxy Nexus
reminds me of an old girlfriend......
There's an option to trigger the security certificates or something - forgot the exact wording, but when I tapped that, I could get into my office Exchange server.
Of course, I like to keep my office things in the office so I quickly disabled the email app.
Ya, there are two dialog boxes:
User secure connection (SSL)
Accept all SSL certificates
My Xoom account shows the first checked. The second not.
Using the same configuration - I get the message that I don't have permission to sync with the server.
When I check the Accept all SSL certificates - I get the same message.
When I go through the setup on my Xoom after completing the inputs - I get the following message:
'This server requires that you allow it to remotely control some security features of your Android device. Do you want to finish setting up this account?'
Is there something about ICS 4.04 running on the Gnex that would pose a problem with this security handshake?
I'm running an ICS 4.04 Cyanogen Mod nightly on my Xoom. I had Gingerbread on my Dinc before I switched to the Gnex. The email exchange sync worked fine on the Dinc.
When I have time I may root and load a custom ROM on it and see if that makes a difference. Although I'd prefer to stay stock for a while - just to get used to the thing.
If anyone has insight into the security issues - I'd appreciate hearing it. A quick Google search of issues relating to Exchange sync shows that there are issues with the Gnex and Exchange handshake. Some people have had to encrypt their phone to get it to work?!?
Certainly this must have been worked out by someone...
Thanks for any suggestions
elcap373 said:
'This server requires that you allow it to remotely control some security features of your Android device. Do you want to finish setting up this account?'
Is there something about ICS 4.04 running on the Gnex that would pose a problem with this security handshake?
Click to expand...
Click to collapse
That's a common message to see depending on the security policies your Exchange Server administrator has established. Among other things, for example, your company probably requires the ability to do a remote wipe of your handset's email should the account be compromised, your device be reported stolen, or you quit or be fired.
Perfectly normal. My company does this as well, and it works beautifully with my Galaxy Nexus...no device encryption needed, and I'm running ICS 4.0.4 IMM76K - one Exchange Server account via the stock email client, and one GMail account via that stock app. All works beautifully.
Jon
sent from my Galaxy Nexus using XDA

Categories

Resources