Simple Pin required for exchange server email

[johnwashere3]

My brother setup his touch pro with his work email address. Their activesync/exchange requires to setup additional security for mobile devices. He had to make an 8 digit simple pin for his email on his phone. It requires him to enter it in every 30 minutes if the device is unused. The box to uncheck this is grayed out. His IT department told him he couldnt change it (Im sure they dont want him too for secuirty purposes...)
Is there anyway to change this?

I know this isnt a touch pro specific question.

[jeffH70]

Originally Posted by johnwashere3

My brother setup his touch pro with his work email address. Their activesync/exchange requires to setup additional security for mobile devices. He had to make an 8 digit simple pin for his email on his phone. It requires him to enter it in every 30 minutes if the device is unused. The box to uncheck this is grayed out. His IT department told him he couldnt change it (Im sure they dont want him too for secuirty purposes...)
Is there anyway to change this?

I know this isnt a touch pro specific question.

Yes he can. I did this before to overwrite my company policy, and wrote a procedure here (all registry edit and clean). You may want to search it under my name.

Here you go http://forum.ppcgeeks.com/showthread...light=exchange

[MadlyAlive]

I'm not going to sway anyone from doing what they want with their phone and their company policy, but as a Systems Administrator, we have certain security policies in place for not only the company's protection, but the employee's as well. System policies wouldn't be in place unless they were absolutely necessary. My company is a national healthcare IT consultative firm and we have to comply to many government regulations that require to keep the company, employees and our clients safe and secure.

Just my $.02, but I would strongly recommend not doing this...

Please don't flame me!

[johnwashere3]

Thanks Jeff Il take a look. Yea my brother works for a national acounting firm, but he dosent get any real important emails as of now. Im going to warn him about doing this though. He looses everything, and it really wouldnt be good if someone got into his email. But its has fault if he gets in trouble Hes just way to anoyed by the password every 30 minutes. Maybe 2x a day would be ok.

[Ele7eN]

Originally Posted by MadlyAlive

I'm not going to sway anyone from doing what they want with their phone and their company policy, but as a Systems Administrator, we have certain security policies in place for not only the company's protection, but the employee's as well. System policies wouldn't be in place unless they were absolutely necessary. My company is a national healthcare IT consultative firm and we have to comply to many government regulations that require to keep the company, employees and our clients safe and secure.

Just my $.02, but I would strongly recommend not doing this...

Please don't flame me!

x2 from a fellow IT consultant.

[JMAC303]

Yes, I agree with MadlyAlive. I'm a desktop tech at a county government and we have that same policy being pushed out via Exchange. The point of it is so if you loose your phone or it gets stolen the device will lock after 30 minutes and a person cannot access any of your data stored on the phone.

That being said, it's not my phone and not my liability but I hope he's aware of the security risk this presents.

Enable/Disable Exchange Security Policy

Registry Key: HKLM\Security\Policies\00001023
To enable it: Set value to 0
To disable it: Set value to 1

Enable/Disable Inactivity Time

Registry Key: HKLM\Comm\Security\Policy\LASSD\AE\
{50C13377-C66D-400C-889E-C316FC4AB374}\AEFrequencyType
To enable it: Set value to 1
To disable it: Set value to 0

Setting Inactivity Time

Registry Key: HKLM\Comm\Security\Policy\LASSD\AE\
{50C13377-C66D-400C-889E-C316FC4AB374}\AEFrequencyValue
Value: Set to any value you want want. This is the number of minutes before timeout.

Set Minimum Number Or Characters For Password

Registry Key: HKLM\Comm\Security\Policy\LASSD\LAP\
lap_pw\MinimumPasswordLength
Value: Set to any value you want want. This is the minimum number of characters needed for a password.

Determining Password Complexity

Registry Key: HKLM\Comm\Security\Policy\LASSD\LAP\
lap_pw\PasswordComplexity
Value: 0 = Require Alphanumeric. 1 = Require numeric (PIN). 2 = No restriction.

[johnwashere3]

Cool, thanks for even more details Jmac! =D>

[g33m0]

My company set it lock every 5 minutes... How Annoying! I wish I could get 30 minutes!

[g33m0]

Originally Posted by JMAC303

Yes, I agree with MadlyAlive. I'm a desktop tech at a county government and we have that same policy being pushed out via Exchange. The point of it is so if you loose your phone or it gets stolen the device will lock after 30 minutes and a person cannot access any of your data stored on the phone.

That being said, it's not my phone and not my liability but I hope he's aware of the security risk this presents.

Enable/Disable Exchange Security Policy

Registry Key: HKLM\Security\Policies\00001023
To enable it: Set value to 0
To disable it: Set value to 1

Enable/Disable Inactivity Time

Registry Key: HKLM\Comm\Security\Policy\LASSD\AE\
{50C13377-C66D-400C-889E-C316FC4AB374}\AEFrequencyType
To enable it: Set value to 1
To disable it: Set value to 0

Setting Inactivity Time

Registry Key: HKLM\Comm\Security\Policy\LASSD\AE\
{50C13377-C66D-400C-889E-C316FC4AB374}\AEFrequencyValue
Value: Set to any value you want want. This is the number of minutes before timeout.

Set Minimum Number Or Characters For Password

Registry Key: HKLM\Comm\Security\Policy\LASSD\LAP\
lap_pw\MinimumPasswordLength
Value: Set to any value you want want. This is the minimum number of characters needed for a password.

Determining Password Complexity

Registry Key: HKLM\Comm\Security\Policy\LASSD\LAP\
lap_pw\PasswordComplexity
Value: 0 = Require Alphanumeric. 1 = Require numeric (PIN). 2 = No restriction.

And none of these work! (getting access denied errors)

THanks for the information though!

[wrecks]

ExchangePolicy Disabler
http://blogs.microsoft.co.il/blogs/t...e-devices.aspx

Or you can try this, but is specifically programmed so your device won't lock.
http://mobilitytoday.com/forum/showp...&postcount=124

Haven't tried these solutions on my HTC, but worked on my Treo. Make sure you do a soft reset after change your settings.