Active Sync Password Lock Requirement

Hello,
I have been using the iPhone 3g with Exchange the past month or so and everything has been working great. When the phone is first configured to work with Active Sync we have a password requirement and the device will automatically lock after 5 minutes if not being used. This weekend I decided to do a firmware restore and after it was complete I chose to restore the phone from a backup. Everything restored as expected but I noticed that it wasn't getting the forced 5 minute lockout or password requirement. I went into settings and sure enough Passcode Lock was set to off and when I selected this option, it prompted me for a new password. After I set the password it then resumed the 5 minute lockout as expected and I wasn't able to turn it back off again as expected. The concern I have is that from a security standpoint anyone we deploy an iPhone to in our company can easily bypass the password requirement by simply reloading the firmware and restoring from a backup that contains the active sync information. Has anyone else seen this issue? I personally verified it on 2 of our iPhones. It is bad enough that the iPhone doesn't have full disk encryption but with a way to bypass our security requirements this easily it is likely our security team will ban iPhones in our workplace completely.

Hi Wildpacket,
As said by m0j0m1k once
active sync establishes continuous sync (direct push) it takes 8 to 24 hours to recognize the changed
password.
Any update on this ?
Sathish

Similar Messages

Active Sync - Password Message Not Prompting - After AD pwd expired or new password reset

We have multiple CAS 2010 SP3 server in cas array servicing Active Sync Requests for Blackberrys and Samsung handhelds.
When a user password is reset on AD …. The users BB/Samsung works fine for approx. 24 hours.
After 20/24 hours they will are prompted regarding their password change on the their handheld devices.
Where is the setting… I want this to be right away …. As soon the password is changed on the AD or may be in 15 minutes.
Are there any pros and cons here ….. or what’s the best practice/recommendation???
Thank u

Hi Wildpacket,
As said by m0j0m1k once
active sync establishes continuous sync (direct push) it takes 8 to 24 hours to recognize the changed
password.
Any update on this ?
Sathish

Active Sync password recovery

Does the iPad support password recovery with Exchange Active Sync. It seems the option is greyed out.

Hi Wildpacket,
As said by m0j0m1k once
active sync establishes continuous sync (direct push) it takes 8 to 24 hours to recognize the changed
password.
Any update on this ?
Sathish

"iPod cannot be synced. The required file is locked."

I'm sure there are several threads about this, but none have produced an answer that works for me.
I have an iPod Touch 1G and iTunes 8.0.1.11, though I don't think that matters. I should probably ask this on a Windows XP website, but I thought maybe I could get some results here.
Basically my deal is, when I plug in my Touch and let it try to sync (or hit sync manually), I get the error message "The iPod (iPod name) cannot be synced. The required file is locked."
Ex: http://img410.imageshack.us/img410/8393/20901666.png
(Also, manually drag-and-drop method of music in the library freezes iTunes.)
Now, people say to go to your iTunes music folder, usually the one under "My Music", right click and uncheck the "read only" box. I've done that, hit OK, and brought up the Properties again, and it has been re-checked without my doing.
Could this be iTunes's doing? Or am I doing something wrong? Or should I go ask Windows users?
Another little bit of info: This only started happening today. I have done nothing different than I have before.

Alright,
How did upgrading to the latest version of iTunes go? Did it help any? No, dang! sorry getting ahead of myself I don't even know if it has or not. I have been racking my brain trying to recreate this issue but am having no luck. I did however find a computer running xp sp2 to do some test and such on it.
Here are some more ideas that my wife and I came up with for you to try,
1. In iTunes go to (Help)/(Run Diagnostics) in the menu bar (In my opinion you don't need to do the test for (cd/dvd) or (network) but that is up to you. After which I request that you copy and past the report like so:
Microsoft Windows XP Home Edition Service Pack 3 (Build 2600)
Gateway W3107
iTunes 8.0.2.20
QuickTime 7.6
FairPlay 1.1.11
CD Driver 2.0.7.5
CD Driver DLL 2.1.1.1
Apple Mobile Device 2.1.2.7
Bonjour 1.0.6.2 (118.5)
iTunes Serial Number ######
Current user is an administrator.
The current local date and time is 2009-03-01 20:47:13.
iTunes is not running in safe mode.
Video Display Information
NVIDIA GeForce 6100
** External Plug-ins Information **
No external plug-ins installed.
** iPod/iPhone Connectivity Tests **
iPodService 8.0.2.20 is currently running.
iTunesHelper is currently not running.
Apple Mobile Device service 2.12.33.0 is currently running.
Universal Serial Bus Controllers:
Standard OpenHCD USB Host Controller. Device is working properly.
Standard Enhanced PCI to USB Host Controller. Device is working properly.
No FireWire (IEEE 1394) Host Controller found.
Connected Device Information:
Jarvis, running firmware version 2.2.1
Serial Number: #####
** iPhone/iPod Touch Sync Tests **
Sync tests completed successfully.
Just to see what it comes up with, I don't know if the diag. will fix any issues, since I've never needed to use it but it looks like it will give you a good report of whats going on. Go Apple! *and yes with the report feel free to block out any information you don't want to share.
2. I was reading around on the internet and I've found that a lot of the times its something simple to fix some of these issues like the one about the time getting messed up when windows xp goes to sleep. So Here is a simple idea to see if it helps.
Go to (edit)/(preferences) in the menu bar Click on the (Devices) tab and try clicking (Reset Sync History) button. Then try Syncing again. Don't know if it will help but hey worth a shot right?
3. My wife was looking around on the internet and she found a bunch of info on files that are corrupt not being able to sync, since I don't have a corrupt file and am at a lost in how to make one. I was unable to test this theory.
However, the information suggested that it may be related to a picture file. so I would look into the (photos) tab in the iPod touch's Summery page and un-check one picture folder at a time and sync to see if it is related to a particular image folder.
Also beside of the image folder it was noted that some errors are accruing with outlook syncing, so you might also look into the syncing of your contacts and emails in the (info) tab of the iPod Touch's Summery page.
After those too I would look into music that you have just stared to try and sync and try eliminated one at a time again to see if there is one particular file to be the error.
*In note of that it is suggested to only do one at a time, since its always best to do a process of elimination.
4. And last have you tried backing it up in iTunes and then Restoring it. To see if a hard reset like this fixes the issue?
Here is Apple's knowledge base article on it: http://support.apple.com/kb/HT1414
*Sorry that its such a long post I just want to save you time waiting for me to get back to you.

HT2476 After updating to OS X Mountain Lion, there is a password locked pdf document in the Downloads Stack. Does anyone know what password is required to access this file?

After updating to OS X Mountain Lion, there is a password locked pdf document in the Downloads Stack. Does anyone know what password is required to access this file?

Hello, if your install disk is locked (I assume with FileVault) there is no way to change the password. If it weren't locked there were at least two solutions. As far as I know, the only solutions now are:
- contact your dad
- erase and reinstall the OS X clean
Let us know.

Strange white light appearing when password input required on locked apps!

Strange white light appearing when password input required on specific apps... Locked apps.
It is a thick white line) appearing momentarily on upper left side of my screen.
This only appears briefly as specific apps are opening up .....only on apps where a password is required,(locked apps) like password managers, Apple App Store, etc.
(this is a little troubling… And I'm wondering about the security of my phone now)
I'm using iPhone 5s with latest iOS 7.1 This only started after the latest iOS update!
Although this line appears very briefly, I was able to get some screenshots examples (see links)
[IMG]http://i58.tinypic.com/1zo9dt1.jpg[/IMG]
[IMG]http://i61.tinypic.com/260bns8.jpg[/IMG]
Apple has no idea what this is… They're only suggestion was to wipe the phone clean and reinstall from the last backup! If that doesn't work, they would replace the phone.
Before I have to do this, I'm wondering if this could be a phone app doing this, or the iOS or something easily explained/ remedied?
Any ideas?

Anyone have any thoughts on this? Searches and experiments
still not yielded an answer...

Connector for Active Directory Password Sync

Friends,
We have some questions about the Connector for Active Directory Password Sync:
1. There is a need to extend the AD schema when using this connector.
2. If I have 10 domain controllers and are not synchronized, the documentation tells us to install the dll in each domain controller. Is there any way to do this if necessary, to install this dll in a single domain controller?
Thanks for your help.
regards

Definitely:
For your Point-1 Look for the Preinstallation section in the AD Password Sync Connector Guide which talks nothing about extending AD schema which supports the validity of the statement.
For your Point-2 Look for Metalink Article-432727.1 which confirms that the connector has to be installed on all the DC's
Thanks
SRS

I probably misclicked when I activated the security lock on the iPhone and now I can not figure out what password I entered. Moreover, I have patches and funky looking phone so I can not restore iphine pres itunes. Please advice.

I probably misclicked when I activated the security lock on the iPhone and now I can not figure out what password I entered. Moreover, I have patches and funky looking phone so I can not restore iphine pres itunes. Please advice.

Your only recourse is to force it into DFU mode:
Turn your phone off and connect your cable to the computer, but not the device just yet. Start up iTunes. Now, hold down the home button on your phone and plug it in to the cable - don't let go of the button until iTunes tells you it's detected a phone in recovery mode. Now you can restore to factory settings.

TS4062 can't update apps cos my daughter's Apple ID password is required: even though I'm signed in via my Apple ID in settings (she uses my Mac for her itunes and didn't sign out, i synced my phone and it's been like this ever since) GRRRRR!

can't update apps on my iPhone 4s cos it says my daughter's Apple ID password is required: even though I'm signed in via my Apple ID in settings (she uses my Mac for her itunes and didn't sign out, i synced my phone and it's been like this ever since). And there's no option of signing her out, it seems? GRRRRR!

Fatlozza wrote:
can't update apps on my iPhone 4s cos it says my daughter's Apple ID password is required:
Anything Downloaded with a Particular Apple ID is tied to that Apple ID and Cannot be Merged or Transferred to a Different Apple ID
Apple ID FAQs > http://support.apple.com/kb/HT5622

I recently deleted an email account from my phone because they were going to require me to always have password lock on ect. When I deleted it some of my notes in my notes app disappeared. Is there a way to get those back? Maybe by reinstalling that email

I recently deleted an email account from my phone because they were going to require me to always have password lock on ect. When I deleted it some of my notes in my notes app disappeared. Is there a way to get those back? Maybe by reinstalling that email account?

contact tech support at your company - they should have backups available and might be willing to help you
LN

Parameterized Active Sync Form generating random password

Hi im looking for an sample of an Parameterized Active Sync Form which generates a random password.
Thanks!
Michael

--I think password from AD not put in to activeSync.
--Why?
You cannot change the user's password from the activeSync RA. The password is encrypted in Active Directory and you can't decrypt it.
You can read the Idm Resources Reference - Active Directory. There's a table with all the supported fields; the userPassword field is write-only.
If you want to take the AD password and send it to IDM, you want to use Password Sync.
Good luck

Phone cannot be synced. "The required file is locked" - Please help!

Since I downloaded the new version if iTunes, my phone will not sync properly. I've narrowed it down to a issue specifically with syncing photos.
I've restarted the phone, restarted the computer, checked for additional upgrades. I have a PC, not a Mac, so no iPhotos. iTunes worked great before, with no syncing issues.
Now, when I try to sync -- it syncs everything but pictures. The error message says "The iPhone cannot be synced. The required file is locked". I've tried different picture folders, I've tried removing "read only" protection on the photos, I've tried renaming the photo files so there are no spaces or other symbols like underscores. I've tried removing all pictures from the phone, but now, no pictures will sync, even the very same picture folders that were previously on the phone.
I've searched topics, and so far, haven't found anything similar. Can someone please help me? or advise what else I can do? or who I can contact???
Thank you!
Tabitha

As a side note -- it appears that it may be an issue because my music and photo files are all saved on an external hard drive.
I copied a photo file and put it on my desktop - and the photos synced.
However -- the music files were on the external hard drive and those synced fine with no errors. Pictures on the external hard drive, did not.
Prior to the iTunes upgrade, everything synced fine from my external hard drive.
Anyone?

Active sync with Active Directory. activeSync.password

AD - OS - Win2k3
IDM -6.0SP1
I am using active sync with Active Directory.
Form for Active Sync make with Wizard Active Sync.
Make user in AD with correct password.Excecute StartActiveSync.
User not make in Lighthouse.
In log file appears the following:
<WavesetResult>
<ResultItem type='error' status='error'>
<ResultError throwable='com.waveset.exception.PolicyViolation'>
<Message id='PL_POLICY_VIOLATION_HEADER'>
<String>password</String>
<String>Lighthouse User</String>
</Message>
<Message id='PL_STRING_MIN_CHARACTERS'>
<String>4</String>
</Message>
<StackTrace>com.waveset.exception.PolicyViolation: Policy Violation (password on Lighthouse User):
Must contain at least 4 valid characters.
     at com.waveset.policy.StringQualityPolicy.check(StringQualityPolicy.java:1090)
     at com.waveset.provision.PolicyProcessor.checkPolicy(PolicyProcessor.java:716)
     at com.waveset.provision.PolicyProcessor.checkLighthousePasswordPolicy(PolicyProcessor.java:651)
     at com.waveset.provision.PolicyProcessor.checkPasswordPolicies(PolicyProcessor.java:574)
     at com.waveset.provision.PolicyProcessor.checkAccountPolicies(PolicyProcessor.java:232)
     at com.waveset.provision.Provisioner.checkPolicies(Provisioner.java:1102)
     at com.waveset.view.UserViewer.checkPolicies(UserViewer.java:1559)
     at com.waveset.view.UserViewer.checkPoliciesAndConstraints(UserViewer.java:1415)
     at com.waveset.view.UserViewer.checkinView(UserViewer.java:1159)
     at com.waveset.object.ViewMaster.checkinView(ViewMaster.java:725)
     at com.waveset.sync.IAPIUserImpl.submitCreate(IAPIUserImpl.java:559)
     at com.waveset.sync.IAPIUserImpl.submit(IAPIUserImpl.java:657)
     at com.waveset.adapter.ADSIResourceAdapter.processUpdates(ADSIResourceAdapter.java:1419)
     at com.waveset.adapter.ADSIResourceAdapter.getAndProcessChanges(ADSIResourceAdapter.java:1456)
     at com.waveset.adapter.ADSIResourceAdapter.poll(ADSIResourceAdapter.java:1546)
     at com.waveset.adapter.SARunner.doRealWork(SARunner.java:268)
     at com.waveset.task.Executor.execute(Executor.java:159)
     at com.waveset.task.TaskThread.run(TaskThread.java:119)
</StackTrace>
</ResultError>
</ResultItem>
</WavesetResult>
2006-11-09T13:19:07.904+0500: lastname: Bogdanov9, accountId: Bogdanov9, objectGUID: <GUID=fb4016ebb4851b43af59763d6094932d>, isDisabled: false, identity: cn=Alexey L. Bogdanov9,ou=Users,ou=Test,dc=aut,dc=tst, uSNChanged: 78587, firstname: Alexey, AccountLocked: false, fullname: Alexey L. Bogdanov9, Initials: L
Policy Violation (password on Lighthouse User):
Must contain at least 4 valid characters.
But, when i use sample active sync form from ...sample/forms/ActiveDirectoryActiveSyncForm user make in Ligthhouse with password change12345.
Logicaly, from this code:
<Field name='waveset.password'>
<Comments>
Make up a password for accounts that are being
created. This makes it a constant
</Comments>
<Disable>
          <neq>
          <ref>feedOp</ref>
               <s>create</s>
          </neq>
     </Disable>
<Expansion>
<cond>
          <notnull>
               <ref>activeSync.password</ref>
          </notnull>
<ref>activeSync.password</ref>
<s>change12345</s>
</cond>
</Expansion>
</Field>
I think password from AD not put in to activeSync.
Why?
With MBR
Bogdanov Alexey.

--I think password from AD not put in to activeSync.
--Why?
You cannot change the user's password from the activeSync RA. The password is encrypted in Active Directory and you can't decrypt it.
You can read the Idm Resources Reference - Active Directory. There's a table with all the supported fields; the userPassword field is write-only.
If you want to take the AD password and send it to IDM, you want to use Password Sync.
Good luck

Enterprise Data Plan required for Exchange Active Sync?

From:
http://www.wireless.att.com/cell-phone-service/specials/iphone-info.jsp
"What is the Enterprise Data plan?
Customers interested in using iPhone to access corporate email, business applications or corporate intranet will activate with an Enterprise Data Plan for iPhone."
So, if I have a normal $30 data plan will I be able to connect to my companies Exchange server with email/contacts/calendar push? Is there really a way AT&T could prevent me from using the Exchange Active Sync on the iPhone 3G without the Enterprise data plan?
I'm just a regular guy who works at a small company and would like my personal cell phone - used 99% of the time for personal needs - to be able to access my work email/calendar/contacts.
Message was edited by: engstrom

Ok, so I went by the AT&T store this afternoon to pre-approve my credit in order to save time on the 11th. Well, turns out it won't help, because they told me they are going to have to run a special iPhone credit check the day you buy it anyway, so it is pointless to get pre-approved (great job AT&T).
But, back to the subject at hand, they gave me this piece of paper with all this info on getting ready for the iPhone. Under the iPhone for business heading, it reads:
"It's easy to set up your iPhone for business use on company intranet sites, corporate email or other business applications. SIMPLY SELECT ANY BUSINESS VOICE RATE PLAN and add a $45 Enterprise Data plan for iPhone..."
To me, this would mean that you would have to start with a base business plan, then add the iPhone Enterprise data. Well, if you are an individual opening a personal account, can you even sign up for a business plan? If this is the case, then their own literature prevents you from even getting the Enterprise plan if you wanted to. It seems to me that the would be proof that you don't HAVE to have the Enterprise plan to use ActiveSync, Exchange, etc.

E-mail and Exchange Active Sync

Planning on configuring E-mail in your Xperia phone? Or do you experiencing problems syncing your E-mails? If yes this might be the topic for you.
Below you’ll find some guides on how to setup E-mail sync and troubleshoot any problems.
POP3/IMAP
POP4/IMAP E-mail accounts are the most commonly used. This guide will show you the steps of configuring your E-mail manually if your E-mail server doesn’t support auto setup. Please note that the Next button won’t be lit if you have typed an incorrect E-mail address containing characters or symbols that are not supported.
Configuring POP3 or IMAP E-mail
Go to the E-mail application and enter your E-mail address and password. Now press Manual setup.
Chose the kind of E-mail server your provider is using. If uncertain check this with your E-mail provider.
Under Incoming settings enter your username, password and server details. If you’re uncertain about these details contact your E-mail provider. But in general your username is the same as your E-mail address but some providers may use a specific user name for your account.
Here you can also set if the server should delete the E-mails if you delete them in your phone. This setting is by default always set to Never.
Next step is Outgoing settings. If your E-mail provider also has an SMTP server you can enter the details for sending E-mails here. This normally requires a sign-in on the SMTP server. If yes, check the Require sign-in box and enter your E-mail address and password. As above if you’re uncertain about any of these details contact your E-mail provider.
If your E-mails provider lacks an SMTP server you can check if your network operator provides an SMTP server and use their details. Using your network operators SMTP generally doesn’t require sign-in.
Now it’s time to set how and when to check for new E-mails. Set and check the options you desire.
The last step of the setup is to enter an account name and your name (signature).
Troubleshooting POP3/IMAP E-mail
First make sure that you have a working Internet connection in the phone.
You can download Internet and MMS settings for your phone by going to Setting > Xperia > Internet settings.
If you have a working Internet connection but still not able to connect to your E-mail server or sync your E-mails check that no Proxy server within your APN settings may be blocking this. You can check this by going to Settings > More (Wireless & networks) > Mobile networks > APN or Access Point Names > Your Internet APN. Check if any details are set for Proxy and Proxy port. If yes you can try to delete them (temporarily) and save the APN. Now check if you’re able to connect or sync with your E-mail server.
You can also verify suspected Internet connection issues by trying via a Wi-Fi network instead.
E-mail disappearing?
By default our E-mail application is set to only mirror the server. So if an E-mail on the server is deleted it will also be removed from the phone at the next sync.
Syncing sent E-mail?
This is not possible on POP3 configurations. To be able to sync sent E-mails in the phone you must have configured an IMAP or Exchange Active Sync account.
Problem sending E-mail?
If you’re not using the same SMTP server as network operator in your phone you might experiencing problems sending E-mail via mobile networks. If this is the case you can connect to a Wi-Fi network to send E-mail or check with your SMTP provider if the outgoing port can be encrypted.
If none of the tips above helps you, you can try to download a third party E-mail application from Google Play store. This can be easy way to rule out where a specific problem may be located.
Exchange ActiveSync
Our Xperia phones come with the built-in Android native client for synchronizing your corporate E-mails, calendar and contacts. Here are some things worth double checking if you would experience any problems with Exchange sync.
Begin with checking your sync account details and if you haven’t configured the Exchange ActiveSync account yet see the instructions bellow.
Configuring a Exchange ActiveSync account
Go to the E-mail application and enter your corporate address and password. Then press next.
Don’t worry if the setup might fail at this point because most Exchange servers don’t have auto setup enabled. In this case just press Manual setup. Please note that the Next button won’t be lit if you have typed an incorrect E-mail address containing characters or symbols that are not supported.
Now our E-mail application needs to know what kind of account you want to configure. Press Exchange ActiveSync.
This will bring you to the incoming settings screen. Enter domain\user name, password and server address. If you’re uncertain about your details contact your IT department to check which credentials to use. You will also need to know if you should accept all SSL certificated or use a client certificate.
When all details are correct you will have to setup how and when to sync. So enter and check the options you desire.
When you see this screen the setup is complete.
If your Exchange server requires certain security settings you might see the following pop-up after finishing the setup. If this is the case you must approve the security update in order to sync E-mail, calendar and contacts.
Pressing OK will give you a screen showing you what permissions you need to give the E-mail application. These permissions/ security settings are set from the Exchange server and depend on your corporate IT policy.
Troubleshooting Exchange Active Sync
First make sure that you have a working Internet connection in the phone.
You can download Internet and MMS settings for your phone by going to Setting > Xperia > Internet settings.
If you have a working Internet connection but still not able to connect to your E-mail server or sync your E-mails check that no Proxy server within your APN settings may be blocking this. You can check this by going to Settings > More (Wireless & networks) > Mobile networks > APN or Access Point Names > Your Internet APN. Check if any details are set for Proxy and Proxy port. If yes you can try to delete them (temporarily) and save the APN. Now check if you’re able to connect or sync with your E-mail server.
You can also verify suspected Internet connection issues by trying via a Wi-Fi network instead.
ActiveSync protocol version
You can check which Exchange ActiveSync protocols that are supported by your phone model in its white paper. http://developer.sonymobile.com/downloads/whitepapers/
Compare this with your server to make sure they’re compatible.
“SERVER REQUIRES UNSUPPORTED SECURITY FEATURES”
If you get the error message above your Exchange server is using security settings which are not supported by the Android native Exchange ActiveSync application. Which security settings that your phone model supports depend on firmware version and phone model. If your company runs on security settings that the Android native mail application doesn’t support and you don’t plan to alter the security settings, an alternative is to download any of the dedicated Exchange ActiveSync applications from Google Play store.
New meetings don’t sync?
If you have entered a new meeting in the phone and it doesn’t sync make sure that the meeting has been put into the correct account. When creating a new meeting in the calendar application make sure that you’ve chosen your ActiveSync account as calendar when creating the meeting.
How to use GAL (Global Address List)?
In most of our models you can access the GAL by opening the contacts application and tap the search icon. This will search the Global Address List on your exchange server. Our mail application also searches GAL when typing something in the To: field. Unfortunately we don’t have any default support at the moment for browsing the complete Global Address List.
For more information about what is supported by our Contacts, Calendar and E-mail applications please see this link (Xperia Z, Xperia ZL, Xperia ZR and Xperia Tablet Z). Or this link (Xperia Z1, Xperia Z ultra and Xperia Z1 Compact).
- Community Manager Sony Xperia Support Forum
If you're new to our forums make sure that you have read our Discussion guidelines.
If you want to get in touch with the local support team for your country please visit our contact page.

Hi and welcome to the community! Since you're new please be sure that you have checked out our Discussion guidelines.
Are you sure that your account is really configured for the ActiveSync protocol? Because we've seen this occur only when using IMAP with Hotmail/Outlook.com.
I suggest that you make sure that the account is configured as POP3 or EAS. Or use their own dedicated app.
- Community Manager Sony Xperia Support Forum
If you're new to our forums make sure that you have read our Discussion guidelines.
If you want to get in touch with the local support team for your country please visit our contact page.

Active Sync Password Lock Requirement

Similar Messages

Maybe you are looking for