Mail App and Activesync Policies

I've added my corporate Exchange Activesync account to the Mail App on my Surface Pro 3 Windows 8.1

It's OK, but enforced a lot of policies. I'm OK with all except that it's enforcing a complex password to unlock my computer. The same server is enforcing only 4 digit pin lock on other platforms like iPhone or Android.

Why is this the case? Why doesn't Mail App only enforce 4 digit pin? It becomes very inconvenient to use Mail app for Activesync with this.

 
February 19th, 2015 1:54pm

Its due to policies as you said (device specific). I would suggest you to check this with the admin taking care of policies / deployment. 
Free Windows Admin Tool Kit Click here and download it now
February 19th, 2015 9:24pm

Indeed it looks like so. There's also password policy enforcement for domain membership on my other computer. I was considering "SP3" 's tablet side, that's why it was surprising to me. I guess the exch admins rightfully don't see it as tablet but rather a full computer.
February 20th, 2015 2:55pm

Hi,

Have you check if you still could create pin password for it as below:

If this option is not available after enforce the group policy, it must be the group policy limitation like your suspicion. Contact domain admin for help.

Free Windows Admin Tool Kit Click here and download it now
February 20th, 2015 5:38pm

Hi Karen,

I had pin unlock before and it was working fine when I had only the MS account configured. Once I configured my Activesync EAS account of my company, and it enforces the policies, the Pin lock is disabled and greyed out, no longer usable. Only a complex password unlocks it.

Note that this Surface Pro 3 computer is NOT a member of domain, that's why I was surprised that it does not behave like any other Android or iOS tablet or phone.

Is it possible that the Mail App enforces the security policy more than requested? Ie it's getting pin unlock but enforcing complex password instead?

February 20th, 2015 6:21pm

Hi,

Please give us more patience. We need more time to do research.

Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2015 5:07am

Thanks, waiting impatiently. 

FYI, our domain admin stated to me that "The ActiveSync policy is to use a password, it is the device that implements the details of that and it is Windows 8.1 that interprets that to mean a complex password"

February 23rd, 2015 6:11am

Hi,

Since this issue occurred after you configure the ActiveSync EAS account, it's the requirement of this type of acco

Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2015 1:06pm

Hi,

Since this issue occurred after you configure the ActiveSync EAS account, it's the requirement of this type of acco

March 1st, 2015 8:45pm

Hi,

About this part, it's recommend you contact Exchange forum for professional help:

https://social.technet.microsoft.com/Forums/exchange/en-US/home?category=exchangeserver

The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.

Free Windows Admin Tool Kit Click here and download it now
March 3rd, 2015 7:10am

This is a client side issue of Mail App, not an Exchange issue. So we need the experts who wrote Mail App implementation of Activesync Policies and its enforcement onto Windows.
March 9th, 2015 1:11pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics