Reset security policy on axim

remushociota · 07-10-07, 11:42 AM

Hello

I ran into a small problem and I was wondering if anyone has a solution for this.
So I have a dell axim x51v with windows mobile 5 on it.
And I wanted to try out the active sync with an exchange server 2007 we just set up. As some of you know on the exchange side you set up the policy to be used, meaning in my case "require a password" and require a password again after 15 minutes of inactivity.
Now initially my pda was running with no security settings as I wanted actually.
When I went to set up my sync with exchange after entering the credentials it tells you: the server must set new security policies on your device in order to bla bla. I accepted and now I am stuck with that even though I removed the exchange sync for it (as it was just for test purposes anyway).
And now if I go to setting -> LOCK I no longer have the option of removing this password and the promit if decive unused for is checked and greyed out.

Does anyone know how can I revert back to the original policy I had?

FYI I tried a new sync with the server, changing the policy there not to request a password but for some reason it seems that it always remember the first one set and it's not replacing it.

rlarson_mn · 07-10-07, 01:32 PM

A friend of mine had the same issue. He had the device sync set up between a PC and a server. I do not know how he got there but he did. I uninstalled activesync from his PC system and installed activesync 4.5 and during the set up selected PC to sync with not a server. That gave him a sync that included all items on his unit and PC combined. I would suggest you do what I did as an approach. Just make sure you back up your unit (suggest Spb backup application) and your Outlook folder in your My Documents folder.

remushociota · 07-10-07, 05:11 PM

thanks for the reply.

however i don't have activesync installed on my PC. I did the setup from my pda directly using the activesync found in programs.
so you suggest i install it on PC as well and then what? as i am a little confused.

**breley** · 07-10-07, 05:18 PM

Originally Posted by remushociota

thanks for the reply.

however i don't have activesync installed on my PC. I did the setup from my pda directly using the activesync found in programs.
so you suggest i install it on PC as well and then what? as i am a little confused.

How do you currently sync to the server? Wirelessly through a VPN or docked at your PC? If your desktop OS is Vista then it has its own software installed, though you would likely need to update the Mobile Device Center software.

remushociota · 07-10-07, 05:42 PM

I have wireless enabled on the pda so I can get on the internet. And then in the active sync inside the pda i set up the exchange account and all that. I really never had use to sync with my pc.

anyway i think we are off the problem here. The first time exchange synced with my pda it changed my security policy on it to require a lock pin etc. And that is what I can't remove anymore to revert it back to how it was originally meaning with no PIN.

remus

**breley** · 07-10-07, 05:50 PM

Originally Posted by remushociota

I have wireless enabled on the pda so I can get on the internet. And then in the active sync inside the pda i set up the exchange account and all that. I really never had use to sync with my pc.

anyway i think we are off the problem here. The first time exchange synced with my pda it changed my security policy on it to require a lock pin etc. And that is what I can't remove anymore to revert it back to how it was originally meaning with no PIN.

remus

Just make sure nobody initiates a remote mobile wipe by accident.:)

Quote:

Device Security and Management		Administrators may choose to enforce policies on devices used in their organizations including requiring PINs of varying length and strength and enforcing a device wipe of data and applications, should the device be lost or stolen. These controls become granular with Exchange Server 2007, allowing per-user policies. Device usage can be tracked and managed centrally within the Exchange Server environment.

remushociota · 07-10-07, 06:07 PM

no problem there as I am the admin. As I said it was set up in a test lab.
And now I can't get back to my original settings damn it.
i really don't feel like doing a hard reboot just for this.
there must be some other way i am sure...

**breley** · 07-10-07, 09:17 PM

Originally Posted by remushociota

no problem there as I am the admin. As I said it was set up in a test lab.
And now I can't get back to my original settings damn it.
i really don't feel like doing a hard reboot just for this.
there must be some other way i am sure...

Could you revoke the policy restriction server-side to nullify the restrictons/requirements? We have SBS 2003 SP2 which has a similar capability, but we've not implemented such a restriction. However, I'm an admin too and it's my personal Axim, so nobody fools around my my unit except me. :approve:
If you can't revoke without essentially wiping the unit that seems like a serious deficiency in Microsoft's server security policy configuration. I can just imagine telling a sales rep "Oh, sorry, we've changed the security settings to make them less stringent, but as a result you'll have to hard reset your unit to get back to where you were beforehand. Sorry about those apps..."

remushociota · 07-11-07, 11:24 AM

Well get ready to be dissapointed in the Microsoft implementation like I am. Of course that was my first attempt.
Well not quite... first I said to myself GOD I was stupid. Couldn't I have tried without setting the password/lockout policy and all that. And the final uncertenty feeling came when on my pda it asked me: exchange needs to set new security policies in order for the sync to work... I got that second thought feeling should i? :) And I did it and now I regret it :)
Anyway getting back to the point. My next attempt was to completly disable the security settings, basically I unchecked all the checkboxes in exchange there hoping it will override my old ones right? Exactly what you sugegsted to nullify the restrictons/requirements.
well guess what. it didn't. i don't know how why or what but it didn't.

Being a new day I will give it a try again, based on the old It joke. We get off the car and back into it and maybe it fixes the problem :) but i doubt it.
funny thing is how one can get used to things he resents just NOT to perform a device wipe :)

remushociota · 07-11-07, 03:58 PM

Oh man!!!! The joke applies :))))))
I set up a different policy and restarted the exchange server completly! and then setup the sync connection and it took the new settings so I am saved.
Microsoft bravo! i take my words back. however it would be nice to work without having to restart the whole server just for this you know...

thanks guys

**breley** · 07-11-07, 06:10 PM

Glad it worked out for you! :approve: Might be worth documenting and posting a Howto somewhere on the site.