Please help me figure out a way to disable Password policy change from my company - General Topics

My company set a policy for people using active sync to get their emails to have 8 character password entered if the phone has not been used for 20 min. This is driving me nutts. Anything i can modify on the phone to disable this? Thanks in advance.

phatmax said:
My company set a policy for people using active sync to get their emails to have 8 character password entered if the phone has not been used for 20 min. This is driving me nutts. Anything i can modify on the phone to disable this? Thanks in advance.
Click to expand...
Click to collapse
I would not advice you to violate the company polic and no, as far as I know there is no possibility to disable this since it is most likely set by the server.

phatmax said:
My company set a policy for people using active sync to get their emails to have 8 character password entered if the phone has not been used for 20 min. This is driving me nutts. Anything i can modify on the phone to disable this? Thanks in advance.
Click to expand...
Click to collapse
If your company has set this policy, then there is most likely a good reason. To remove it, your only option is to hardreset and forgo email on your PDA.

Related

remove lock password?

so i set up an exchange email that required the lock on my phone.
but i deleted the server
but the lock wont let me uncheck the box to have it set
and 20 mins is longest it can be
any fixes?
Add server>Uncheck box>Remove server
Kraize said:
Add server>Uncheck box>Remove server
Click to expand...
Click to collapse
doesnt work. even with the server added again the box stays grayed out
EDIT
found a registry hack in the hklm/securities/policies that worked
but apparently after 24 hours or so it changes itself from 1 to 2 and reverts to wanting a password
guess i will find out
but if anyone knows that would be great
I use an exchange server that requires a PIN, to disable it i set the reg key 00001023 to 1 which is located at HKLM\Security\Policies\Policies
Then go to Start>Settings>System>Lock and remove the lock.
Mine does not reset after 24 hours, but this is prob because the exchange server i connect to only enforces security policy on first connection. May be different for other exchange servers.
Dils said:
I use an exchange server that requires a PIN, to disable it i set the reg key 00001023 to 1 which is located at HKLM\Security\Policies\Policies
Then go to Start>Settings>System>Lock and remove the lock.
Mine does not reset after 24 hours, but this is prob because the exchange server i connect to only enforces security policy on first connection. May be different for other exchange servers.
Click to expand...
Click to collapse
ok yeah thats what i changed
good to know it works for you.
thanks
Thanks!!!!
It worked for me let's see if it lasts.
If not, let me know I have a CAB in the office removing this lock.
I did this and it worked. If your server updates everytime it might not work. Or if you delete the server the security setting may not go back to default automatically, so you will still need to change the registry key

SEVEN Email Program, Touch Pro - How To Change Send/Receive Interval

I use the SEVEN email program to have my Yahoo mail sent to my phone. It's great, free, etc., etc. The one thing I want to do is change how often it checks for new mail. My Touch Pro's battery dies pretty quickly so I'm doing everything I can to minimize the drain on it. There's nothing in the settings to dictate a time frame(say every 2 hours), only a way to set certain days to manual check. I have it set for manual check everyday until I can figure this out. Was hoping someone might know their way around the SEVEN registry entries. Any help is appreciated. Thanks.
brandontowey said:
I use the SEVEN email program to have my Yahoo mail sent to my phone. It's great, free, etc., etc. The one thing I want to do is change how often it checks for new mail. My Touch Pro's battery dies pretty quickly so I'm doing everything I can to minimize the drain on it. There's nothing in the settings to dictate a time frame(say every 2 hours), only a way to set certain days to manual check. I have it set for manual check everyday until I can figure this out. Was hoping someone might know their way around the SEVEN registry entries. Any help is appreciated. Thanks.
Click to expand...
Click to collapse
Pretty sure this isn't possible as the whole purpose of SEVEN is to provide Push email.
You can try using yahoo mobile or use some other email account and forward your yahoo mail to say a POP3 account.
As said above Seven is designed to provide realtime push email. It also says on their site that to enable this to happen the software maintains an open GPRS connection to their servers at all times unless you use the weekends/night sleep options.
I have been using it successfully for some time now and while it does run the battery down it is a small price to pay for free push mail from many accounts while keeping all the accounts distinct.

Warning to users with active sync accounts that require pin lockscreen

Many users have active sync accounts with pin code lock screen requirements. Vzw added a "feature" where you type if wrong 10 times and the phone will factory reset. With the lock screen gestures enabled it is much much easier to accidentally wipe your data due to this.
Until we get an insecure kernel that disables write protection to /system and can disable this "feature" be warned!!!
Sent from my Nexus 7 using Tapatalk
dottat said:
Many users have active sync accounts with pin code lock screen requirements. Vzw added a "feature" where you type if wrong 10 times and the phone will factory reset. With the lock screen gestures enabled it is much much easier to accidentally wipe your data due to this.
Until we get an insecure kernel that disables write protection to /system and can disable this "feature" be warned!!!
Sent from my Nexus 7 using Tapatalk
Click to expand...
Click to collapse
A sync account meaning a google account? This "feature" is pretty damn annoying.
123421342 said:
A sync account meaning a google account? This "feature" is pretty damn annoying.
Click to expand...
Click to collapse
anyone who selects or is forced to use a pin for their lockscreen....
Others are noticing ..
http://phandroid.com/2014/03/31/htc-one-m8-security-video/
Once we have /system write access this is an easy fix to eliminate.
Article writers missed that point though...
Sent from my HTC6525LVW using Tapatalk
To be fair, this is SOP for any business that allows users to connect their phones to their corp e-mail...
I didn't watch the video, but I assume he didn't connect his phone to his work and download the policy?
tehsquishmeister said:
To be fair, this is SOP for any business that allows users to connect their phones to their corp e-mail...
I didn't watch the video, but I assume he didn't connect his phone to his work and download the policy?
Click to expand...
Click to collapse
Even BlackBerry makes you type in a confirmation. The wake gestures on this phone make it very easy to do in your pocket or bag.
Sent from my HTC6525LVW using Tapatalk
I don't think this is related to exchange, I think it's any lock screen. I use a pattern lock screen and it is the same. I've also turned off the gesture wake options.
l7777 said:
I don't think this is related to exchange, I think it's any lock screen. I use a pattern lock screen and it is the same. I've also turned off the gesture wake options.
Click to expand...
Click to collapse
Then it's a bigger ouch! We will be able to kill it once we get better root action.
Sent from my HTC6525LVW using Tapatalk
This annoyed the crap out of me. I travel constantly with my phone and if it gets wiped during travel (and losing pictures and documents), that would equal me being fired from my job. My companies exchange server enforces security, which is a good thing, but then I have this device wipe thing hanging on my mind. On other devices, I can simply turn off this absolutely retarded option.
I had the same problem on the HTC M7. Luckily it can be disabled with root.
Anyway, once we get a proper root, you can set the failed attempts = 0 in an system xml file and then you will be good to go.
Edit this file:
/system/customize/ACC/default.xml
change this:
Code:
<item type="integer" name="devicepolicy_max_fail_passwords_for_wipe">10</item>
to this
Code:
<item type="integer" name="devicepolicy_max_fail_passwords_for_wipe">0</item>
Reboot and its disabled.
Exchange servers are known to push security policies which sometimes can hamper user experience and in some cases overstep the boundaries of BYOD setups in workplaces.
Using NitroDesk TouchDown for a few years now, allows an activesync connection to my work exchange server, but doesn't pull group policy to overtake my phone. I highly recommend it.. (man, that sounded like an ad)
Be aware the wipe on 10 attempts isn't an exchange policy. Some exchange policies can force a PIN or a password, but thats it.
HTC, as of recently on their devices, has mandated the wipe on 10 policy once any type of security is set (whether that is a PIN or a pattern or a password) regardless of exchange policy.
Whether its because of exchange or your own setting, any security lock enabled on the phone will trigger the wipe on 10 policy.

Stolen S7 with no passcode lock - anything preventing the thief from using it ?

Hello,
A friend of mine had his Galaxy S7 stolen. The phone had no passcode or fingerprint set up, but it did have a Google account and a Samsung account set up.
While initially the phone did appear in the "find my phone" section of the Samsung account, now the Samsung account reports that no phone is registered. The phone could never be located after it was stolen, either via the Samsung service or Google service. Lock requests have been issued on both accounts, but I kind of doubt that they will have any effect ?
My question is: is there anything preventing the thief to use the phone ? Anything preventing the thief to reset it/reflash it and use it like it was a new phone ?
I did read that on iPhones, you cannot reset it/reflash it without entering the iCloud password, is some similar protection available for the S7 also ?
Thanks !
Did you try google's device manager to wipe the device
Sent from my SM-G930S using Tapatalk
Google's Android Device Manager or Samsung's Find My mobile.
davebugyi said:
Google's Android Device Manager or Samsung's Find My mobile.
Click to expand...
Click to collapse
That's only if you turned them on. I think by default they are off. I know they are off on mine.
midnightrider said:
That's only if you turned them on. I think by default they are off. I know they are off on mine.
Click to expand...
Click to collapse
Then he can say bye-bye to the phone
davebugyi said:
Then he can say bye-bye to the phone
Click to expand...
Click to collapse
I think you can say goodbye to any stolen anything. It's rare to get anything back and even more rare to get something back in any kind of condition that you would actually still want it.
Anyway can't somebody who knows start a wiped/locked phone in recovery and reflash and fix it?
Call your phone service and block the phone IMEI, this will put it on a black list and never work as a cellphone again.
katananja said:
Call your phone service and block the phone IMEI, this will put it on a black list and never work as a cellphone again.
Click to expand...
Click to collapse
He's going to need some paperwork to prove he owned it. And also if he blocks it and does get it back it won't be useful.
About the only thing you can do is lock your own phone so if somebody does steal it at least they don't get all your personal data with it.
The chance for him to get his phone back is minimal since he didn't use any basic security from the beginning.
katananja said:
The chance for him to get his phone back is minimal since he didn't use any basic security from the beginning.
Click to expand...
Click to collapse
Security doesn't get you your phone back. It just keeps people from getting your info.
midnightrider said:
Security doesn't get you your phone back. It just keeps people from getting your info.
Click to expand...
Click to collapse
But security block people from using your social network, email, contacts, data, personal information, etc, etc.
katananja said:
But security block people from using your social network, email, contacts, data, personal information, etc, etc.
Click to expand...
Click to collapse
So you agree with me? Because that's what I said. You even quoted it

security, global, family, credientals

anybody care to help me out.
i dont know what it is or how to fix. im not rooted so i dont know
BLEEDCOLORYOU said:
anybody care to help me out.
i dont know what it is or how to fix. im not rooted so i dont know
Click to expand...
Click to collapse
I'm not sure exactly what your problem is, are you saying you are just seeing the msg "Messaging is sending a large number of SMS messages. Do you want to allow this app to continue sending messages?"
If yes, you are just exceeding the number of msg you can send in a set time, (normally this is 30 msg in 30 min in most phones, I believe). It's a security measure to prevent malicious apps sending lots of msg. It can be changed in some phones/rom easily but needs adb commands in others.
Maybe you changed this setting previously, to a lower number. Either way you are probably just sending more messages than this limit is set to. If you are not then you may have a malicious app.
Why are you looking at "net send" & microsoft cert, is it related to that app in the background? Does it send sms & that is causing the pop up? As I said I don't follow, please explain more
I believe I have stagefright I have some sort of third party running over my phones. Its not just the 1 phone its all
BLEEDCOLORYOU said:
anybody care to help me out.
i dont know what it is or how to fix. im not rooted so i dont know
Click to expand...
Click to collapse
Simple answer
A noobie hacker (like me xD)
Is using a simple open source sniffing app. When it is turned on, chrome blocks the request.
Based on practical experience, nothing more
BTW go to your router admin panel page and reset your password and disable WPS and enable mac filtering

Categories

Resources