Simple Pin required for exchange server email

[mdodge]

Originally Posted by MadlyAlive

I'm not going to sway anyone from doing what they want with their phone and their company policy, but as a Systems Administrator, we have certain security policies in place for not only the company's protection, but the employee's as well. System policies wouldn't be in place unless they were absolutely necessary. My company is a national healthcare IT consultative firm and we have to comply to many government regulations that require to keep the company, employees and our clients safe and secure.

Just my $.02, but I would strongly recommend not doing this...

Please don't flame me!

Originally Posted by Ele7eN

x2 from a fellow IT consultant.

x3 from another sys admin. Like I always say, it only takes one security breach to cost you your job or the company a hell alot of money.

[tek818]

Originally Posted by mdodge

x3 from another sys admin. Like I always say, it only takes one security breach to cost you your job or the company a hell alot of money.

+4 From another IT Consultant.

[jelleroll]

Originally Posted by tek818

+4 From another IT Consultant.

+5 I recomend not only leaving this setting but implementing the storage card encryption just in case.

[RChris173]

Has anyone found a solution that works? The thing from the Microsoft IL blog works, but only until the Exchange server pushes the security settings again forcing the PIN to be setup again.

For everyone stressing security here, it is important to remember that there are those who use Exchange for personal use and do not need the increased security, despite what the exchange administrator implemented.

[GoodThings2Life]

I hope you guys understand that the IT guys have the power to ban certain phones from connecting if they discover a blatant breach of policy, no matter how harmless it may seem.

It only takes a couple clicks too in Exchange 2003/2007, and for that matter... the IT admin could be pretty nasty and have the entire device wiped clean (hard reset). In fact, I had to do it twice at my last job to former employees when they were fired.

[GoodThings2Life]

Originally Posted by RChris173

Has anyone found a solution that works? The thing from the Microsoft IL blog works, but only until the Exchange server pushes the security settings again forcing the PIN to be setup again.

For everyone stressing security here, it is important to remember that there are those who use Exchange for personal use and do not need the increased security, despite what the exchange administrator implemented.

If it's a COMPANY provided email account there is no such thing as PERSONAL use.

[cordevil95]

Originally Posted by RChris173

For everyone stressing security here, it is important to remember that there are those who use Exchange for personal use and do not need the increased security, despite what the exchange administrator implemented.

Why do you have an Exchange Admin for personal use?? You must have a pretty fancy home network setup! But yeah, if it is for your place of employment, school, etc, it really isn't personal. I'm a local Exchange Admin, not on the actual Exchange Server, but if I was, and I noticed someone trying to break the security policy I would cut them off immediately.

[RChris173]

Originally Posted by GoodThings2Life

If it's a COMPANY provided email account there is no such thing as PERSONAL use.

For my specific uses, it is a University e-mail address XX@XXX.edu.

And since all of my contacts (even the Global Contact Manager is an extension of the University's online publically available phonebook), calendar, and tasks would be the same if I used ActiveSync locally, I see no difference if it is on the Exchange server without the PIN.

As far as e-mails, IMAP access is possible, and you can tell it to remember password.

So either way you look at it, the information is still available without Exchange & the PIN, its just nicer to use Exchange for the e-mail push and other server features.

[Existentialism]

Im a Security Admin. The only solution I've found that works pretty well is LockMeNot. Problem is, it works by not letting your device go idle and thus drains your battery. I only use it when I need the convenience, say, Im listening to music are watching a video.

[MadlyAlive]

Originally Posted by RChris173

For everyone stressing security here, it is important to remember that there are those who use Exchange for personal use and do not need the increased security, despite what the exchange administrator implemented.

Yes, but the OP mentioned work and not personal.