Jump to content


Photo

Disable MSFP's Mandatory Device Lock?

- - - - -

  • Please log in to reply
10 replies to this topic

#1
jminiman

jminiman

    Newbie

  • Members
  • Pip
  • 11 posts
When I installed the MSFP/AKU2 upgrade on my SP5 over the weekend then tried to connect to my Exchange server for the first time, it enforced a mandatory security policy of having my device automatically lock out every hour (and must be unlocked with a PIN at the very least). I find this terribly annoying! When I go into the security control panel, I cannot uncheck "Prompt if device unused for".

Is there a hack to remove this security restriction?

  • 0

#2
jimbouk

jimbouk

    Hardcore

  • MoDaCo Silver
  • PipPipPipPipPipPip
  • 2,721 posts
  • Location:London
  • Devices:HTC Diamond

When I installed the MSFP/AKU2 upgrade on my SP5 over the weekend then tried to connect to my Exchange server for the first time, it enforced a mandatory security policy of having my device automatically lock out every hour (and must be unlocked with a PIN at the very least). I find this terribly annoying! When I go into the security control panel, I cannot uncheck "Prompt if device unused for".

Is there a hack to remove this security restriction?

I think you will have to grovel to your IT people...

  • 0
Touch HD runnign Dutty's latest rom

#3
jminiman

jminiman

    Newbie

  • Members
  • Pip
  • 11 posts

I think you will have to grovel to your IT people...


Even when I delete my Exchange profile, I still cannot disable the PIN Lock.

  • 0

#4
jimbouk

jimbouk

    Hardcore

  • MoDaCo Silver
  • PipPipPipPipPipPip
  • 2,721 posts
  • Location:London
  • Devices:HTC Diamond

Even when I delete my Exchange profile, I still cannot disable the PIN Lock.


Thats by design. Whilst most users find the AKU2 (MSFP) rom's really good (especially if you sync with a hosted exchange server), one the of the major updates that the rom update brings is increased corporate security. Your IT people have set mobile access to server to the highest security settings and that includes the mandatory lock that can only be reset by them changing your account settings. They may not be able/willing to change only yours as they may have set a policy for all mobile devices. The update also gives them the option to wipe your device's memory if it gets lost/stolen.

  • 0
Touch HD runnign Dutty's latest rom

#5
chucky.egg

chucky.egg

    Did I say that out loud?

  • MoDaCo Silver
  • PipPipPipPipPipPip
  • 4,724 posts
  • Location:Kent, England
  • Interests:Sleeping
  • Devices:Desire S
  • Twitter:@chucky_egg

...The update also gives them the option to wipe your device's memory if it gets lost/stolen.


So dont p1ss them off!

  • 0

#6
Kaka

Kaka

    Chancer!

  • Members
  • PipPip
  • 102 posts
  • Gender:Male
  • Location:Derry, N.Ireland
  • Interests:Lan Gaming, Smartphones
  • Devices:HTC One, Nexus 7
I have the same problem. Driving me nuts. Thinking of a hard reset if nobody can answer.

  • 0
"It Wasn't Me"

#7
N!co

N!co

    Newbie

  • Members
  • Pip
  • 4 posts
  • Devices:qtek9100

I have the same problem. Driving me nuts. Thinking of a hard reset if nobody can answer.


F#ck me! After 2 months of using pushemail for work they suddenly introduced this PIN! And even after deleting the exchange server it still bugging me!! ;)

  • 0

#8
steveh2

steveh2

    Newbie

  • Members
  • Pip
  • 14 posts
  • Devices:HTC Hero

F#ck me! After 2 months of using pushemail for work they suddenly introduced this PIN! And even after deleting the exchange server it still bugging me!! ;)


It's damn annoying, I've put myself in as an excluded user, but the definition of "after 0 minutes" has changed, it used to be that it never locked unless I pressed the power off, which is exactly what I wanted, now it locks after about 30 seconds in that mode, but at least I can change it to an hour if I'm driving so the GPS software doesn't get locked out.

I'll see if I can use one of our support tickets to log a call with Microsoft about this unless anybody has done it?

  • 0

#9
Qapf

Qapf

    Newbie

  • Members
  • Pip
  • 2 posts
It is just a setting in the Active Directory server, any administrator can easily turn it off, if you ask them to.

  • 0

#10
Typhool

Typhool

    Newbie

  • Members
  • Pip
  • 7 posts
  • Devices:HTC Typhoon

It is just a setting in the Active Directory server, any administrator can easily turn it off, if you ask them to.


If your policy is set to lock after an hour that is not so bad. Many companies lock at 20 or even 10 minutes. There is an option to add a user to an exception list so the policy is not applied but that would probably require going through a security exeption process.

The policy is not evil as it does help protect the device if it is lost or stolen but it is pain in the *ss when you are using GPS navigation and I would like to see the OS modified so that if GPS is active the device does not lock. On the HP iPaq the GPS can only be activated via the GPS enabled SW (Camera, TomTom etc) and GPS is a drain on the batery so people would probably not leave it on just to defeat the policy so I think that is a reasonable compromise.

  • 0

#11
vwspeed

vwspeed

    Newbie

  • Members
  • Pip
  • 6 posts
I put together a post a while back at xda-developers that summarizes how to remove/modify the forced device lock, I think it may be what you all are looking for...
http://forum.xda-dev...ad.php?t=317107

  • 0




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users