[Q] Device administrator - Admin notification - Atrix 4G Q&A, Help & Troubleshooting

Hi,
I just installed official Gingerbread 2.3.6 on my Atrix and I realized an option inside security menu.
I have an "Admin Notification" to select inside Device administrators menu.
If I check the box, device ask me if I'm sure about that and show me that this app can wipe my device, change password, define rules, monitor unlock attempts and lock screen. What exactly is the use of it? How that can help in my device security??
I searched internet, but I didn't find any results about this administrator embedded in motoblur.
Tks,

When I use the stock email app, instead of enhanced e-mail, for my work exchange it installs 1. Used by help desk to keep data safe during security breaches....or to GPS down my phone 4 me, or wipe it if report it stolen. Not the only thing they can do but.........my experience
Sent from my MB860 using XDA App

Correct that's a Microsoft Exchange (Outlook Web Access) feature.
Cheers
Sent from my Atrix 4G using Tapatalk

Related

Flashable Galaxy Tab Email app/Bionix Frost and Simply Galaxy/Sweet Honey/Bi-Winning

PLEASE READ THE OP! YOU MAY NOT THINK SO, BUT THERE IS INFORMATION HERE THAT MAY SAVE YOU TIME AND HEADACHES!
This is a flashable zip of the Galaxy Tab email app for 2.2.1 Roms. It does not work properly with exchange in 2.2 Roms, so please do not use if you are on a 2.2 Rom and need to use exchange. If you do not use exchange and are on a 2.2 or 2.2.1 Rom, it will work fine!
HISTORY: This app was ported to the Vibrant last year and was modded by XDA member, 'smoothone' who fixed the resolution for the Vibrant. Before that, the app was too large for the lower resolution Vibrant screen. It had many problems for exchange users which were only resolved when Froyo 2.2.1 was released. This app has extraordinary functionality, including multi-delete and support for all versions of exchange. It doesn't exactly support 'push' for corporate exchange accounts, but you can set it to sync on an interval of five minutes.
It has been tested and reported working perfectly in both Bionix Frost, Simply Galaxy/Sweet Honey, and Bi-Winning all 2.2.1 Roms. If you encounter any problems, please be clear in describing what exactly is going wrong. Screenshots are in the second and third posts below.
Instruction for setting up Yahoo accounts in Android.
IMAP is another way you can get Yahoo! Mail on your phone. Using IMAP you can download messages with your mobile client, so you can access your mail even when not connected to the mobile Internet.
*
How to set up Yahoo! Mail with your mobile client using IMAP
On your phone, press < Home >, then open the Email application.
On the 'Your accounts' page, select Next to get started with setup.
Enter your full Yahoo! address and password, then select Next.
On the next screen, you can give the account a nickname and choose the name to display on your outgoing messages. Tap Done.
*
If prompted, supply the following information:
Incoming Server - imap.mail.yahoo.com
Outgoing Server - smtp.mail.yahoo.com
Incoming Port - 993 (requires SSL)
Outgoing Port - 465 (requires SSL)
Username: full email address ([email protected])
Password: is the password you login to Yahoo! with
Note! The setup menu on your phone will take you through the incoming server settings first (incoming server,then incoming port, then check a box for 'ssl' required...) and then you can set up the outgoing server settings.
Click to expand...
Click to collapse
Instructions for setting up 'Push' for Hotmail and Gmail
FOR HOTMAIL: Open the email app and tap 'Menu' then 'Account Manager' then 'Add Account'. Type in your full 'Username and Password' ([email protected]) then select Manual 'Setup'. Out of the three choices choose 'Exchange account'. Your Domain\Username will appear with a backward slash. You must add '@hotmail.com' to it. The only other thing you need to change here is the server setting to 'm.hotmail.com'. Use ssl will already be checked. Tap 'Next'. NOTE: This may work for '[email protected]', and '[email protected]' too, but that has not been confirmed.
FOR GMAIL: Open the email app and tap 'Menu' then 'Account Manager' then 'Add Account'. Type in your full 'Username and Password' ([email protected]) then select 'Manual Setup'. Out of the three choices choose 'Exchange account'. Your Domain\Username will appear with a backward slash. You must add '@gmail.com' to it. The only thing you need to change here is the server setting to 'm.google.com'. Use ssl will already be checked. Tap 'Next'.
Click to expand...
Click to collapse
NEW***NEW***NEW***
Thanks to krad42 we now have a version with security removed! He can explain it better than me.
I was sick of using pin mode to unlock my phone every time I locked it. Keep in mind there is a purpose of the security tools, prevent unauthorized access and remote wipe incase your phone gets lost. I am actually using delay lock app from market with this setup so that the phone will prompt for pin after a set period of time, but not every time I close out. Go ahead and make a flashable if you would like, hopefully it will be useful for others. Be safe, follow krad's advice and use the 'DelayedLock' app from the Market!
Click to expand...
Click to collapse
Credit: We all owe 'Smoothone' a big thanks for fixing the resolution of the app for our phones!
Thank anyone who helps you out with any problems by hitting their 'Thanks' button and please, be civil. Enjoy!
Raymond,
Thank you for this as well as the rom explanation. I've been trying to get it to work with Bionix V1.3.1 and now I know the problem.
Screenshots
Here are some Screenshots in landscape mode!
Screenshots
Here are some more plus one in Portrait mode!
Rom explanation
Raymond,
Thank you for this as well as the rom explanation. I've been trying to get it to work with Bionix V1.3.1 and now I know the problem.
Click to expand...
Click to collapse
Wow, that was fast! I hadn't finished setting things up yet, lol! That reminds me that it works fine if you are not using exchange and I should add that to the OP!
I saw in another post that you have one that gets by the security lock tool. Can you post that version.
Thanks
Sent from my Vibrant T959 using XDA Premium App
Seems like exchange issues are dependant on the version of the exchange server that someone is synching with. I had all kinds of issues when my job had exchange 2007. Now they are running 2010 and I have not had any issues with stock or tab versions.
Sent from my Vibrant T959 using XDA Premium App
email.apk
I saw in another post that you have one that gets by the security lock tool. Can you post that version.
Thanks
Click to expand...
Click to collapse
Yes, I can. That one is the stock version however. I think I can find it although it is not in a flashable. If you need it that way, let me know.
XDA member, djmz, modded this one.
Exchange 2010
Seems like exchange issues are dependant on the version of the exchange server that someone is synching with. I had all kinds of issues when my job had exchange 2007. Now they are running 2010 and I have not had any issues with stock or tab versions.
Click to expand...
Click to collapse
Thanks for that information!
Can you post tab version with sec bypass. Thanks.
The stock one did work with no security lock down..
Sweet
Sent from my Vibrant T959 using XDA Premium App
"It has been tested and reported working perfectly in both Bionix Frost and Simply Galaxy/Sweet Honey, both 2.2.1 Roms."
Raymond, do you use it with Trigger without any issues?
Security bypass
Can you post tab version with sec bypass. Thanks.
The stock one did work with no security lock down..
Sweet
Click to expand...
Click to collapse
Sorry it took me so long to reply, but I can't connect in Firefox for some reason today either on Windows or Ubuntu and IE isn't working so fast either although it is working. Anyway, sad to say I don't know of a Tab version with the security disabled. There were two tools able to do that made for use with HTC phones. Other devs modded those applications and got it working for other devices. Problem was no one managed to do it for the Galaxy Tab version that I know of. It was about that time that Froyo 2.2.1 was released and all efforts seemed to die out. I did try to contact smoothone and let him know there was a tool to remove security, but he had received a ban from XDA and was unreachable. Another user posted that he was leaving xda after his ban. If you have the ablility, I can put you in touch with those threads tonight if you want to take a crack at modding it for the Tab version.
Edit: I'll try looking into it tomorrow also, but I can make no promises of success.
flashable zip
"It has been tested and reported working perfectly in both Bionix Frost and Simply Galaxy/Sweet Honey, both 2.2.1 Roms."
Raymond, do you use it with Trigger without any issues?
Click to expand...
Click to collapse
Yes I do, but I don't use exchange. I use it to access both my yahoo and gmail accounts. The only strange thing that happens is I get an error message when I use the app while connected to my wifi, but all the emails load anyway.
If you have the threads handy I'll take a look.
Thanks
is there a certain way you have to set this up? i went to setup my yahoo and it keep giving me invalid username or password...
Flashable Gtab email app
If you have the threads handy I'll take a look.
Thanks
Click to expand...
Click to collapse
I had very little chance of finding this again but luckily I came by my old post to, smoothone. That link is the ticket to one of those apps I told you about. I'll try for the other one tonight!
I don't know where you are on this, but I think I've found something else you could use to solve the exchange problems with the Galaxy Tab once and for all. [APP] **Updated 12/27/2010** Email.apk - Gingerbread src code w/o Exchange security I guess the idea is to remove the ability of the app the look for a security code. I don't know, it's all French to me, LOL!
http://forum.xda-developers.com/showthread.php?t=775007
I tried to pm you, but that wouldn't go through. If you do anything with this, let me know. It would be nice to have this app working for those using exchange on what is now called the 'Obsidian' Rom again!
Click to expand...
Click to collapse
Edit: Found it! This is the thread where that stock app with the security removed originated. Djmz, I think did it. http://forum.xda-developers.com/showthread.php?t=655649
RaymondPJR said:
I had very little chance of finding this again but luckily I came by my old post to, smoothone. That link is the ticket to one of those apps I told you about. I'll try for the other one tonight!
Edit: Found it! This is the thread where that stock app with the security removed originated. Djmz, I think did it. http://forum.xda-developers.com/showthread.php?t=655649
Click to expand...
Click to collapse
Thanks for the link, I was able to get the new tab email client working with no security policy getting pushed down. Confirmed working on Sweet Honey Exchange server 2010. Modified client attached for anyone that wants to try it out.
Flashable Gtab email app
is there a certain way you have to set this up? i went to setup my yahoo and it keep giving me invalid username or password...
Click to expand...
Click to collapse
Sorry I missed you post earlier. I used to get that error message when connected to wifi on my yahoo account. I just checked, and I don't get it anymore. (Strange) I would try deleting your yahoo account on the phone and going to menu>setting>applications>manage applications>all tab> scroll down to account and sync settings (actually it's third in the list on my phone) tap that and delete any cache and data (if there is any). Then scroll down to the email app and delete cache and data for that (there definitely should be some). Then reboot and reset your yahoo account. Let me know if that works.
Edit: Sorry I forgot all about Imap! Something changed when setting up yahoo in android from my last rom to this one. I had the instructions in my file the whole time. The setup menu on the phone will take you through the incoming server settings first (incoming server,then incoming port, then check a box for 'ssl' required...) and then you can set up the outgoing server settings.
IMAP is another way you can get Yahoo! Mail on your phone. Using IMAP you can download messages with your mobile client, so you can access your mail even when not connected to the mobile Internet.
*
How to set up Yahoo! Mail with your mobile client using IMAP
On your phone, press < Home >, then open the Email application.
On the 'Your accounts' page, select Next to get started with setup.
Enter your full Yahoo! address and password, then select Next.
On the next screen, you can give the account a nickname and choose the name to display on your outgoing messages. Tap Done.
*
If prompted, supply the following information:
Incoming Server - imap.mail.yahoo.com
Outgoing Server - smtp.mail.yahoo.com
Incoming Port - 993 (requires SSL)
Outgoing Port - 465 (requires SSL)
Username: full email address ([email protected])
Password: is the password you login to Yahoo! with
Click to expand...
Click to collapse
Thanks for the link, I was able to get the new tab email client working with no security policy getting pushed down. Confirmed working on Sweet Honey Exchange server 2010. Modified client attached for anyone that wants to try it out.
Click to expand...
Click to collapse
You certainly are fast! You know, I pm'd several devs about doing what you did today and never got a reply. Thank you so very much! I have a question though: Since you had no problems with the original or stock versions with exchange 2010 why did you want a version minus the security feature? And, do you mind if I place you .apk in a flashable zip and offer it to 2.2 users for testing (I'll make sure to credit you). Security wasn't the only problem with the Tab email unfortunately. I'd like to get some feedback from exchange users still on 2.2 Roms.
I was sick of using pin mode to unlock my phone every time I locked it. Keep in mind there is a purpose of the security tools, prevent unauthorized access and remote wipe incase your phone gets lost. I am actually using delay lock app from market with this setup so that the phone will prompt for pin after a set period of time, but not every time I close out. Go ahead and make a flashable if you would like, hopefully it will be useful for others.
Sent from my Vibrant T959 using XDA Premium App

New Server + updated Exchange server

Well today was d-day, a new server was installed at the office along with the latest edition of MS server software. I am now required to have a PIN or PW to unlock my phone. This means that I am unable to run the Jkay Deluxe lockscreen if I want to be able to sync my work email with my phone. So I did what any responsible employee would do and said screw it, I'll remove the acct from my phone.
Any way around this at all? I can't even log onto our webmail from home currently to see if I can have the email forwarded to a separate acct, i.e. [email protected]
Edit: Lockscreen back (toggled "show when secure"); regardless, I still have to enter a PIN after that.
Plan: log onto the server on Monday and change my profile, uncheck PIN requirement, thanks Google.
I reported myself; wrong section.
Sent from my GT-I9100 using XDA App
Solution = 12 button quick panel with security toggle now with security toggled off I only have to enter PIN on reboot. Was not possible by changing Settings>Location and Security.
Cliffs notes: it's all good.
Sent from my MicroTAC 9800X using speech to fax modem

[Q] Exchange 2010 wipes devices remotly

Hello
I have Galaxy S2 and synch with Exchange 2010. But i was checking on the device and under Location and security - Select device administrator, It has " Enable server-specified security Policies.
Which enables to wipe device remotly. Is there a way to stop that but keep synch.
I did a test and he not only wipes the email side but also wipes the entire device back to default.
Is there a way around this or not?
Thank You
Any update please
Sent from my GT-I9100 using XDA App
I believe the only way to change this is via a policy change at the Exchange Server end.
That said, I do remember seeing something on here about a utility that would bypass Exchange's policies.
Is there another client for the outlook so that the Exchange admin cannot wipe my device
Thank you
try using Enhanced Email, that's what i've been using since Exchange 2010 was implemented in my organisation.
NTOP said:
Hello
I have Galaxy S2 and synch with Exchange 2010. But i was checking on the device and under Location and security - Select device administrator, It has " Enable server-specified security Policies.
Which enables to wipe device remotly. Is there a way to stop that but keep synch.
I did a test and he not only wipes the email side but also wipes the entire device back to default.
Is there a way around this or not?
Thank You
Click to expand...
Click to collapse
This is a feature of Exchange just incase your device is lost the admin or you can remotely wipe all your secure information. Businesses of-course like this because they don't want their trade secrets in the back of some cab somewhere to be sold off to the highest bidder (imagine iPhone 4 but information instead of the physical device).
There are hacks out that removes the checks for security but the Server could then block those devices if they don't reply properly to requests for encryption and such.
There is however no need to try to circumvent this as you'd only ever use it in those cases, it's not like the admin is gonna just wipe your device one day because he is bored at work.
shotta35
I agree with you there if the device was given from the company but if the device is your personal and you are just synch email than i don't want the exchange admin wiping anything so that is my main reason for looking at another client
I think this is a feature of Exchange 2010
Thank You

[Q] Exchange/ActiveSync on Android Permissions -- Options?

I asked this in XDA Android Q&A; posting to this Rezound Q&A as well in case there are any Rezound specific options that can be explored:
I've been debating configuring my personal phone to access my employer's Exchange server; I would be checking it on occasion-- more of a convenience thing to know what's up before I head in for the day.
Using the default Android Mail client and choosing ActiveSync and doing the setup, I inevitably reach a screen with the following:
Activate security policies?
Exchange security policies
Your IT administrator requires that you activate these security policies in order to sync with your Exchange Server.
Activating this administrator will allow the application Mail to perform the following operations:
! Erase all data
Perform a factory reset, which deletes all of your data without any confirmation.
! Set password rules
Restrict the types of passwords that you are allowed to use.
! Monitor screen-unlock attempts
Monitor failed attempts to log into your device.
! Lock the screen
Control when your device locks, requiring that you re-enter your password.
! Device function limitation
Restrict some function on device like Wifi, Bluetooth, Camera etc.
Click to expand...
Click to collapse
Needless to say, this is highly unappealing for my personal phone-- way too much power for the Mail application.
So my questions-- what are my options?
-would a different Exchange connectivity application like Touchdown request those same permissions for access?
-would I be better off setting up ActiveSync on an alternate ROM and booting into that when I want to check work mail (not as frequently as some other users)?
-How far does that remote wipe control extend? Could they wipe the entire phone, including bootloader? Or is it just reference to internal storage? Could they wipe the external SD card?
-is there a way to revoke those permissions from the Mail application while retaining the ability to connect to the Exchange server?
vprasad1 said:
Needless to say, this is highly unappealing for my personal phone-- way too much power for the Mail application.
Click to expand...
Click to collapse
It is designed to protect corp data. If you don't want your personal phone under that control, then don't connect it. That is the choice you have.
So my questions-- what are my options?
-would a different Exchange connectivity application like Touchdown request those same permissions for access?
Click to expand...
Click to collapse
Nope. The policy is from the Exchange servers policies.
-would I be better off setting up ActiveSync on an alternate ROM and booting into that when I want to check work mail (not as frequently as some other users)?
Click to expand...
Click to collapse
Not sure how you would do this.
-How far does that remote wipe control extend? Could they wipe the entire phone, including bootloader? Or is it just reference to internal storage? Could they wipe the external SD card?
Click to expand...
Click to collapse
When you connect, if they have issued the wipe command, it wipes. Distance is not relative. Wipe is wipe.
-is there a way to revoke those permissions from the Mail application while retaining the ability to connect to the Exchange server?
Click to expand...
Click to collapse
No. they could have a different policy setup for different groups of users and have you into that group, but you would have to ask the administrator though.
The exchange policies are part of the requirements of connecting to that exchange server. The policies can be changed by the administrator by putting you into another group, but I doubt they will do that. They are there to protect corp data.
There are other ways that policies can be setup, but that needs to be done again by the administrator.
These types of policies are becoming more and more common as companies realize their contacts, email and attachments are valuable and need to be protected. A lot of people use two phones, one for corp and one for personal, not mixing the two.
Remote wipe and all is a feature of activesync, not necessarily exchange. So, according to what I'm reading, you can find an email client that supports exchange but not eactivesync and get around the permissions.
I am also interested in how far the wipe can extend. It says reset to factory, which would leave your SD card intact.
gthing said:
Remote wipe and all is a feature of activesync, not necessarily exchange. So, according to what I'm reading, you can find an email client that supports exchange but not eactivesync and get around the permissions.
I am also interested in how far the wipe can extend. It says reset to factory, which would leave your SD card intact.
Click to expand...
Click to collapse
As far as I am aware, the Exchange server CAN initiate a full wipe, if your company is on Exchange 2010. The wipe command can be found in OWA settings. The only way you can get around the permissions is to login to OWA via your browser. The security settings are there for a reason, as mentioned above.
Microsoft works very hard with its partners to provide the best security possible. I do not think using Touchdown or another email client will allow you to circumvent security policies enforced by the Exchange server.
Sent from my Dell Streak 7 using Tapatalk 2
vprasad1 said:
So my questions-- what are my options?
-would a different Exchange connectivity application like Touchdown request those same permissions for access?
-would I be better off setting up ActiveSync on an alternate ROM and booting into that when I want to check work mail (not as frequently as some other users)?
-How far does that remote wipe control extend? Could they wipe the entire phone, including bootloader? Or is it just reference to internal storage? Could they wipe the external SD card?
-is there a way to revoke those permissions from the Mail application while retaining the ability to connect to the Exchange server?
Click to expand...
Click to collapse
I use TouchDown for my work e-mail, and while I have never had any administrators use remote wipe, I will let you know my experiences:
-There is an option in the settings screen for "Clean SD card on remote wipe." It's unchecked by default. I assume a remote wipe will only clear TouchDown related data, but am not 100% sure of it. At the very least this option implies that it won't normally wipe your SD card as well.
-TouchDown will ask for the same permissions. However, unlike the default mail application, which will force your whole phone to be pin locked, TouchDown will only force you to enter a pin when you open the application. This feature is nice if you don't want to always enter in a pin to unlock your phone but also want Exchange e-mail.
-As the policies are set on the ActiveSync server, there's no way to get around revoking the permissions.
If you search for it enough, you can probably find a modified mail app that doesn't require these security permissions. I know I've seen one that works with CleanRom and I use it on ICS Business Sense. No lockscreen pin required either and no device administrator.
http://forum.xda-developers.com/showthread.php?t=1456425
Sent from my ADR6425LVW using XDA
Just created the account to reply to this thread.
I am too looking for a solution to avoid giving my employer the access rights to wipe my phone, and I just wanted to comment that IMO, theorically it is not because this setting is on server side that it can't be avoided.
Android can give whatever permissions the server asks for then totally ignore the commands when they eventually come. That would probably require some coding to simulate executing the command without actually doing it, and it would definitely require root access to do this, but I do not see how that would be impossible on Android or on one of its mods.
Now obviously this is not something I'm going to waste time on. if it can't be done, my pro account will not be on my phone. That was me trying to do something for my employer, but if they don't want me to see my mails on weekends, I won't be fool enough to complain.
I'm in a similar situation. With ICS, at least it gave me the ability to only have to enter a PIN after 15 minutes or something when your phone is locked. Prior to that with GB, every screen unlock required the PIN.
I do use a modified Mail.apk, but in a sense, I'm contributing to the problem of my company not allowing android phones on their network, because there are just so many workarounds like this.
LBE Security Guard may be able to inhibit the permissions, though I wouldn't want to have to depend on that as a last line of defense right before my device is potentially WIPED!
There has to be some better solutions to control it on the client side...
My admins at work say they will not change the exchange policy.
They said it comes with Exchange Server 2010 as the default settings, but they won't change it. They have actually tested the remote wipe and it works instantly. They claim they can remote 'unwipe' it as well, but I gave an analogy about formatting drives (quick format vs. full format) that they couldn't answer.
I told them I'm concerned about anyone having that much power over personal "BYOD" phones, and the possibility of someone accidentally or maliciously wiping my device.
They said the policy will not be changed.
Does anyone know of other 3rd party mail OR calendar programs that will update my calendar without allowing these INSANE permissions? Thanks.
I've recently bought a new phone and found these ridiculous permissions when I went to sync with my work exchange.
There must be apps available or possible to develop because the email app on my old phone doesn't ask for these permissions. Unfortunately it isn't available to download, just the default app with that phone.
worldheroes said:
I've recently bought a new phone and found these ridiculous permissions when I went to sync with my work exchange.
There must be apps available or possible to develop because the email app on my old phone doesn't ask for these permissions. Unfortunately it isn't available to download, just the default app with that phone.
Click to expand...
Click to collapse
There are several mail programs in the Google Play store, if you search for 'exchange email'
I saw:
k-9 mail
touchdown
exchange exmail
maildroid
and so on...
k-9 had the best ratings and is open source so I tried it, but it couldn't connect to my exchange server. I got an error during setup:
'Setup could not finish, cannot connect to server. (ioexception)'
Please let me know if you have better luck with any exchange program!
The best choice for you is to install OWA from the play store (outlook web) and that will get you contacts, push mail and calendars without having to accept the exchange policies. All you have to do is point it to your companies webmail page and login.
I searched for OWA in the Play store but didn't find the one you mentioned. (see attachment) Is it a free app?
I have the first one by WWO. It gets the job done. 5 bucks well spent. I'm sure it can be side loaded if you'd like to test the functionality first.
Daistaar said:
I have the first one by WWO. It gets the job done. 5 bucks well spent. I'm sure it can be side loaded if you'd like to test the functionality first.
Click to expand...
Click to collapse
At the risk of asking a silly question - how would I get it to test it?
might want to try this:
http://forum.xda-developers.com/showthread.php?t=1965468
Thanks - the link to the ICS Email APK with Exchange Security removed was exactly what I needed!
I wish that app would be maintained with the current version and be put in the google play store!
If I activate the device administration can I undo it? Can I deactivate it and go back to life as usual?
quarksurfer said:
If I activate the device administration can I undo it? Can I deactivate it and go back to life as usual?
Click to expand...
Click to collapse
Yes, delete the account in question.

Possible Concern for Exchange ActiveSync users

Hey everyone, this thread is both to let everyone know of a possible issue in Android M and to poll the community to see if this issue is isolated or if we will all be seeing it. First a bit of background on how the security policies work in Exchange ActiveSync as I understand it:
- When you assign an Exchange policy for ActiveSync devices you can basically tell it to require a password or not, encryption, etc. From there the OS of the device determines what that means. For example in Android if you are set to require a password it disables Pattern, Swipe and Face Unlock as choices for securing your phone. It assigns each a security level something like: Swipe = Not secure, Pattern = Weak security, Face Unlock = Medium Security (those are just examples.... I'm not saying thats what they are actually are) and the OS decides what level of security is acceptable when the password requirement is set. It also disables features like Smart Lock for trusted locations/bluetooth devices
As one of the admins of my own network I long ago set my policy to NOT require a password but I still do configure and use a PIN to secure my phone. The reason I set my device to not require a password was solely for the Smart Lock feature.
So the other day I flashed a 6.0 ROM on my Nexus 4 (no factory images available obviously). So I joined my phone to my Exchange server before I had setup any security and shockingly it said that it required I have a PIN. I double-checked my policy on the server and I am most definitely set to not require a password still. So now even with that policy set I am not able to use my phone without a PIN and am not able to use the Smart Lock feature and my fear is that this will also include not being able to unlock my phone with the fingerprint sensor (ouch!)
I'm sure many of you are thinking exactly what I did and that it was an issue with the ROM since it was a port. So with that in mind I setup my Exchange account on my freshly factory imaged Nexus 9 tablet and the exact same issue happens with it.
So either Google jacked up the security settings when connecting an Exchange account or there is a bug that causes the requirement of a PIN even if your policy is set not to.
Anyone else running Android 6.0 connected to an Exchange server that previously did not require a password and now does? One of the things I was most looking forward to was being able to secure my phone using my fingerprint instead of a PIN so this is a big bummer for me
If I am not mistaken, requiring a PIN is the policy of android pay, which comes default with Marshmallow, and is also a device manager. This makes sense, because Google wouldn't want someone draining your bank account in addition to stealing your phone.
rajendra82 said:
If I am not mistaken, requiring a PIN is the policy of android pay, which comes default with Marshmallow. This makes sense, because you wouldn't want someone draining your bank account in addition to stealing your phone.
Click to expand...
Click to collapse
If I dont join my Exchange server I can set any type of security I want so its not related to that
Wow, that's pretty upsetting. I too run my own Exchange Server. I always use PIN but I like the Smart Lock feature. And of course I had expected to use the fingerprint sensor. I wonder if rooting and using a combination of Tasker and the Secure Settings plug-in would allow you to get around it.
I currently have an HTC M8 and 6.0 is supposed to be out for it before the end of the month. I guess I'll load that and see how it works.
My Nexus 6 had been on M since the previews. I have a pin and I use smartlock with my moto 360. It's mostly unlocked and exchange works fine. My servers are set to require passwords and everyone at work has iphones with finger print and they work with that also.
Sent from my Nexus 6 using XDA Free mobile app
SymbioticGenius said:
My Nexus 6 had been on M since the previews. I have a pin and I use smartlock with my moto 360. It's mostly unlocked and exchange works fine. My servers are set to require passwords and everyone at work has iphones with finger print and they work with that also.
Sent from my Nexus 6 using XDA Free mobile app
Click to expand...
Click to collapse
What version of Exchange? We are running the latest 2013. My Smart Lock menu is completely greyed out and says "Disabled by administrator"
I am using Exchange 2013 and have no issues with my Nexus 5x. I am using smartlock with my Huawei Watch, location, and facelock. Maybe I'm confused about the issue here.
hollowlog said:
I am using Exchange 2013 and have no issues with my Nexus 5x. I am using smartlock with my Huawei Watch, location, and facelock. Maybe I'm confused about the issue here.
Click to expand...
Click to collapse
Nope you are understanding. I flashed 6.0 then activated my phone on my Exchange server and now it says my Smart Lock is disabled by administrator despite my policy not even requiring a password.... very odd
I use mobimail through the OWA instead of going through the Exchange Server Active Sync
I am using Nine as my exchange email client, that allows me to set a Pin on the email itself instead of needing it on the phone. Our company requires a PIN or a Password for mobile usage.
I'm using touchdown and a hosted exchange, no phone pin, nexus 5, Android 6.0 and no issues
I have used Nine before. It's not bad. Touchdown (the last time I used it) was complete garbage.
Anyone using the Gmail app that can still use smart lock in M?
I use touchdown so it's independent of my OS therefore i can set it only on the app.
WoodroweBones said:
I have used Nine before. It's not bad. Touchdown (the last time I used it) was complete garbage.
Anyone using the Gmail app that can still use smart lock in M?
Click to expand...
Click to collapse
I must admit it's got worse since symantec bought it..... but i paid for it when it was cheap and it still works so may as well make use of it.
can you post the exchange server-side security settings here? i wouldn't be surprised if google did something to "up" the security of their exchange apk. also - testing with a third party app would be a valid test as well. remove all exchange accounts from your device, confirm your basic security is re-enabled and then try an app (like nine). if the app requires security configuration, it's server-based.
640k said:
can you post the exchange server-side security settings here? i wouldn't be surprised if google did something to "up" the security of their exchange apk. also - testing with a third party app would be a valid test as well. remove all exchange accounts from your device, confirm your basic security is re-enabled and then try an app (like nine). if the app requires security configuration, it's server-based.
Click to expand...
Click to collapse
Attached
Just an update to this....
I went ahead and removed my Exchange account and immediately was able to access those other features that were previously greyed out. I then installed Nine and setup my account there and it allows me to use it without any security at all. Very odd
EDIT: Wow... Nine has improved! I might go this route anyway. I also like having my work account in a separate app as there has been a few times when I've sent a work email from my gmail account
Ok and not only does Nine have a Dark theme but it has a "True Black" option which I'm guessing was made specifically for AMOLED.... too good not to use!
kumarshah said:
I am using Nine as my exchange email client, that allows me to set a Pin on the email itself instead of needing it on the phone. Our company requires a PIN or a Password for mobile usage.
Click to expand...
Click to collapse
I use Nine as well, love it.
My company requires a pin or password, but I'm also able to use a pattern, which is much better than a pin or password for ease of use. Your fingerprint scanner on the new Nexus will be an option in addition to pin or password. No worries, it will all work.
WoodroweBones said:
Ok and not only does Nine have a Dark theme but it has a "True Black" option which I'm guessing was made specifically for AMOLED.... too good not to use!
Click to expand...
Click to collapse
also - you can change the notification icon from their little circle thingy to something that actually looks like a mail icon.
640k said:
also - you can change the notification icon from their little circle thingy to something that actually looks like a mail icon.
Click to expand...
Click to collapse
Very nice! It also does per folder notification which is just about the only reason I rooted my phone previously....

Categories

Resources