Database Info

Enterprise Activation On Andriod

Let me first apologize if this is a question which has been discussed at length in another area.
My company currently uses blackberrys with an enterprise exchange e-mail system (i suppose that is called BES with blackberrys, no?). Anyway, on my old blackberry, all I had to do was put in my corporate e-mail and an enterprise activation password. From there the setup would do the rest. Is there any way to get my new MyTouch phone to get hooked into the system the same way my blackberry was? Cost is irrelevant, I just want to find a solution.
I have looked at software options (i.e. touchdown, and the work email program) with no luck.
Thanks for any help the community could offer!
-Ryan

Sorry I got no answer, but this is ment to be posted in the general discussion:
http://forum.xda-developers.com/forumdisplay.php?f=492
Reported

BES servers users BES accounts and they link are like this:
Blackberry <-> BES <-> Exchange
In Android, iPhone or Windows Mobile, you need your NT IAccount credentials as you communicate directly throw your phone to the Exchange server, like this:
Device <-> Exchange
So, probably what you need is:
-Name of the server (sometimes is the OWA(Outlook Web Access) address)
-Credentials (Sometimes is needed to have in your NT Account credentials for that, in the company I'm, we call it Active Sync Access).
-Username, Network login (NT ID)
-Domain
-Password
And... yeahhh this is general!!!
ral34c said:
Let me first apologize if this is a question which has been discussed at length in another area.
My company currently uses blackberrys with an enterprise exchange e-mail system (i suppose that is called BES with blackberrys, no?). Anyway, on my old blackberry, all I had to do was put in my corporate e-mail and an enterprise activation password. From there the setup would do the rest. Is there any way to get my new MyTouch phone to get hooked into the system the same way my blackberry was? Cost is irrelevant, I just want to find a solution.
I have looked at software options (i.e. touchdown, and the work email program) with no luck.
Thanks for any help the community could offer!
-Ryan
Click to expand...
Click to collapse

Interesting.. so I believe I have everything outside the credentials part. If I have my old blackberry and my work laptop, can I obtain all the information to set up the MyTouch? If so, do you know how?
Thanks a bunch!
-Ryan

Ryan, what I tried to explain to you is that the BES (Blackberry Enterprise Server) account, you can only use to your Blackberry. Any of the information there, except the e-mail address you'll use to configure your exchange account in an Android phone.
There's also other issue, not all exchange accounts will be working with the normal exchange e-mail feature on the Android, the to the security policies of some companies.
I can help you configure that, no prob man.. This is the list of things that you need to ask your IT department on your company:
- Username
- Password (will be the same as your e-mail)
- Domain
- Server address (in some cases are the same as the webmail address (OWA - Outlook Web Access).
P.S.: Ask them if this access force security features on your phone. If it does, Android phones haven't passwords to unlock and won't match the requirements for having this feature on your phone. You'll need to download a program for that (I don't remember what was that, but in the general section, you'll find as other person indicated me).
And you'll be set...
My best regards,
R

you need to also make sure that on your exchange account, they have Microsoft Activesync enabled on your account in order to allow mobile devices other than blackberry's can access corporate emails. you need to ask your admin on this part.

djchiena said:
you need to also make sure that on your exchange account, they have Microsoft Activesync enabled on your account in order to allow mobile devices other than blackberry's can access corporate emails. you need to ask your admin on this part.
Click to expand...
Click to collapse
It was already mentioned before

[Q] Exchange ActiveSync

Very new here and have run into what seems to be a ROM stopper issue.
My company uses Exchange Activesync but in order to connect has to be allowed to push certain security settings to my Inspire. The normal rooted phone, I am able to use the HTC Email app with no issues and am forced to use the security.
However, after flashing a ROM (I have tried MIMU and REV 4,) I am no longer able to add my Activesync account. It gets down to do the install and fails with a general error (Try again later or some such) and won't create the account.
I did do some searching and found there was an email app that apparently bypasses that setup, but I'm not interested in bi-passing, just in getting the security to work.
Now, finally to the question: Are there any INSPIRE ROMs here that people have got to work with activesync? More specifically, with activesync that is trying to force security settings on the device?
(I had made a backup of my ROM before hand and was able to restore back to working copy without any issues [yeah] and I am sure that I wiped everything on installing both ove the above mentioned ROM.)
Sorry for the long post, but I thought background was important to understand the issue.

jeff_chaney said:
Very new here and have run into what seems to be a ROM stopper issue.
My company uses Exchange Activesync but in order to connect has to be allowed to push certain security settings to my Inspire. The normal rooted phone, I am able to use the HTC Email app with no issues and am forced to use the security.
However, after flashing a ROM (I have tried MIMU and REV 4,) I am no longer able to add my Activesync account. It gets down to do the install and fails with a general error (Try again later or some such) and won't create the account.
I did do some searching and found there was an email app that apparently bypasses that setup, but I'm not interested in bi-passing, just in getting the security to work.
Now, finally to the question: Are there any INSPIRE ROMs here that people have got to work with activesync? More specifically, with activesync that is trying to force security settings on the device?
(I had made a backup of my ROM before hand and was able to restore back to working copy without any issues [yeah] and I am sure that I wiped everything on installing both ove the above mentioned ROM.)
Sorry for the long post, but I thought background was important to understand the issue.
Click to expand...
Click to collapse
CM7 will work fine. Now keep in mind, the actual server address can be different on AOSP email clients compared to HTC.
For example, my setup that I administer:
HTC Server address: owa.organization.com
Domain: organizationdomain
AOSP(CM7) Server address: owa.organization.com/owa
Domain:blank
Check with your exchange admin to see what your proper settings would be. If others in your organization have, for instance a Samsung or Nexus, get what they would use for settings.

My Inspire is a work phone I have never had an issue getting it to connect to our activesync. It also has that extra security thing but it always prompts me to allow it right before it syncs up. It has worked for me on the following ROMs.
Ultimate Droid (Current ROM)
CM7
MIUI
Cognition
RC Mix HD
You could always try a 3rd party email app like touchdown or K9 from the market.

I tried it for sure on MIUI and it didn't work. I have tried using K-9 and it won't even work with activesync account on stock. I am getting this error when I am trying to add the account both in email as well as in just the Settings - Account. Any other thoughts? I will try CM7 or Ultimate Droid tonight.
Thanks,
Jeff

jeff_chaney said:
I tried it for sure on MIUI and it didn't work. I have tried using K-9 and it won't even work with activesync account on stock. I am getting this error when I am trying to add the account both in email as well as in just the Settings - Account. Any other thoughts? I will try CM7 or Ultimate Droid tonight.
Thanks,
Jeff
Click to expand...
Click to collapse
MIUI makes changes to the AOSP email program, so it actually may not be compatible. What version of Exchange are you running?

I believe we are on Exchange 2007. Here is the info on the exchange web service:
Connected to Microsoft Exchange
Secured by Microsoft Internet Security and Acceleration Server
© 2006 Microsoft Corporation. All rights reserved.

jeff_chaney said:
I believe we are on Exchange 2007. Here is the info on the exchange web service:
Connected to Microsoft Exchange
Secured by Microsoft Internet Security and Acceleration Server
© 2006 Microsoft Corporation. All rights reserved.
Click to expand...
Click to collapse
That is what I administer. When adding to MIUI are you using the same server name/domain info that you had in HTC based ROMs?

We have a Exchange 2003 and I cannot get it to connect to that server. Maildroid and Touchdown both worked without any problems. I wish the default email client was a little more robust.

Yes, I am using the exact same information that I did when I installed it on the "stock" ROM when trying in MIUI. I have tried both on just the "add account" method as well as from the stock email client + K-9 Email.
In stock, I cannot get the K-9 email to work at all. the HTC sense email client works fine.
in MIUI (and REV 4.0) neither email client works and I cannot add the activesync server under accounts either.

jeff_chaney said:
Yes, I am using the exact same information that I did when I installed it on the "stock" ROM when trying in MIUI. I have tried both on just the "add account" method as well as from the stock email client + K-9 Email.
In stock, I cannot get the K-9 email to work at all. the HTC sense email client works fine.
in MIUI (and REV 4.0) neither email client works and I cannot add the activesync server under accounts either.
Click to expand...
Click to collapse
You may want to try using no domain and the full owa path for server name.
Sent from my Desire HD using XDA Premium App

I'll give that a shot. Thanks for the advice.
BTW...I did finally get the K-9 mail to work on the "stock" ROM. I had to put in my full email addy on the mailbox alias along with the /owa/auth/ in the Authorization path.

Update to the saga. Just tried CM 7 and when I try to add the ActiveSync Account, here is the actual error I get:
Setup could not finish
This server requires security features your phone does not support.

jeff_chaney said:
Update to the saga. Just tried CM 7 and when I try to add the ActiveSync Account, here is the actual error I get:
Setup could not finish
This server requires security features your phone does not support.
Click to expand...
Click to collapse
Do you already have a PIN code set to unlock the device?

It sounds like your corporate IT server is locked down a little more than normal. I've used the CM7 stock client on 3 exchange systems (my employer's server, my consulting gig's server and gmail exchange settings for push) and it connects fine to all of them.

Also, try RCMix 5.9.3. See if it gives the same results as Rev 4.

OK. Update with CM7.
I tried setting up the pin before adding account, no go. The other security option that they are trying to enforce is being able to wipe the phone (I work for a State Gov't...neat, huh) I'm guessing it is this setting that is causing the issue.
I did, however, get the K-9 email program to work in CM7. Now the only downside is I don't get contacts or calendar. I'll keep looking...

jeff_chaney said:
OK. Update with CM7.
I tried setting up the pin before adding account, no go. The other security option that they are trying to enforce is being able to wipe the phone (I work for a State Gov't...neat, huh) I'm guessing it is this setting that is causing the issue.
I did, however, get the K-9 email program to work in CM7. Now the only downside is I don't get contacts or calendar. I'll keep looking...
Click to expand...
Click to collapse
Hah, local Gov't here. The default AOSP mail client does support remote wipe, as I have tested our organization's functionality on Android on CM7, RCMix, and of course stock. (as well as a few times on the Captivate).
Try setting the password in Location & Security and checking that Use Secure Credentials is checked; and make sure Email is set as a device administrator.

How would I go about doing the "make sure Email is set as a device administrator." step you mentioned? When I click on device administrator there is nothing there to select.
I did try setting up the password in Loc & Sec and the checked the Use Secure as well. Still wouldn't allow me to add the activesync account. This is all still on CM7. Still a no go on getting my contacts and calendars to sync. What am I missing? (I'm sure it is me.)

You may want to try to contact your organization administrators and ask them if you can have an exception for the security policy. There is a particular setting that I have seen brought problems with several android phone this setting is "Allow Non-provisionable Device" and it should be set to true (many organizations set it to false which cause connectivity failures).

There is no way that I will get them to change settings for me. It has to either be something I am missing or a change that needs to be made in the ROM
Sent from my Desire HD using XDA App

Sudden MS Exchange issues

Hey everyone. Last week I decided to ditch the Blackberry and get into the android scene. Did alot of research and decided to get the G2X. Well it has been interesting so far... seems like I discover some weird issue every couple days.
Today I wake up and check my work email (MS Exchange). All emails are gone. I deleted and re added the account, still nothing. Can someone tell me what happened?
Thanks

The fact that it worked and now doesn't work leads me to believe it's on the Exchange server side. Are you sure you accepted all of the SSL security requests when your first set up the e-mail client on the phone? I'd guess that the Exchange server isn't registering your device do to something security related. Domain, user name, and password can also be funky because to the server they're not the same as your every day entries. The e-mail client on the phone is stock Google and therefore pretty basic. It relies on the server for almost everything. Check with your IT support folks to make sure all the right entries are being made.

BarryH_GEG said:
The fact that it worked and now doesn't work leads me to believe it's on the Exchange server side. Are you sure you accepted all of the SSL security requests when your first set up the e-mail client on the phone? I'd guess that the Exchange server isn't registering your device do to something security related. Domain, user name, and password can also be funky because to the server they're not the same as your every day entries. The e-mail client on the phone is stock Google and therefore pretty basic. It relies on the server for almost everything. Check with your IT support folks to make sure all the right entries are being made.
Click to expand...
Click to collapse
OK, I will talk to them tomorrow.
I did remove my My Account I highly doubt those would be tied together in any way.

I'd also recommend downloading Touchdown and giving a test with that. It is a good way to make sure that you've setup your Exchange account correctly and also it has a more complete implementation of ActiveSync than the stock client. If it syncs ok but you still see no e-mails then I would login through OWA if that is available and make sure that e-mails are actually there to show up.

How to setup Outlook for Exchange Server on WP7?

I am trying to setup a WP7 Outlook, but it won`t connect to a company Exchange Server.
Always getting error- Error code: 80072EE7.
I have read on web that certificates needs to be installed on wp7. I did it, but no luck.
I used to synch this exchange account on my HTC Evo 4G.
Any ideas how to fix issue?

I wish WP7 had a better way to load self-signed certificates.
Best way to install a cert is to e-mail it to yourself using a Gmail account, set up the Gmail account on WP7, open the e-mail and the resulting certificate attachment, and then install the certificate.

Thanks for response,
But,
Everywhere on web people talking about certificates and no one says which particular cert needs to be installed.
I tried with verisign, Microsoft root authorication and other kind public certificates. But issue still persist.
Who knows where can I get the exact certificate from?

Also make sure you are putting in the local domain
(whateveryourdomain.local)
It is required for WP7 unless your username has the domain in it.
For cert... here is what one user said...
1. went to google chrome on my desktop, spanner, options, under the hood, manage certificates.
2. go trusted root certificate authorities.
3. found the certificate from our server.
4. exported it as a DER encoded binary X.509 (.cer) file to the desktop
5. emailed it to my godaddy account on my WP7 phone.
6. clicked on the link installed it AND THEN created the outlook account on my WP7 phone.
IT IS IMPORTANT TO NOT HAVE ANY OUTLOOK ACCOUNTS ACTIVE WHEN INSTALLING THE CERTIFICATE.
thanks for all your help guys!

yes, sure I have local domain:
\whatever - this is what i used on android outlook settings.
how to know which one is our server certificate?

in WP 7 though you don't need a slash. just the domain name when it asks for it.
For the cert... can you get to your mail server via web mail?
For ours in IE9, i just click the lock by the address bar and hit view certificate. Also if you know your Exchange admin, ask him to send it to you via the hotmail account. they you can just click on it and install it.

I believe we do not use any certificate. probably we use public certificates. i do not see lock next to address bar.

Does you host require on device encryption?
Does your company provide instructions for other phones? I may be able to tell you or translate them to how it works in windows phone.
No lock? go to advanced in account and uncheck ssl. I think its on by default.
If that doesn't work pm me the the web outlook address an i can tell u if there is one on there at least.

still cannot synch my outlook account. is there any new ideas?

The only thing left i can say is talk to your exchange admin / tech support. All the settings seem correct for a normal setup. Maybe they are using on device encryption... the only thing that windows phone really doesn't support for exchange, or maybe there is a setting we don't know that they will tell you.
The questions to ask are -
Does it require on device encryption?
Is the certificate required the same one outlook webmail uses as that is the one i walked you through installing?
Is the mail server address the same as outlook webmail minus the owa?
What is the local domain of the mail server? (that is different then the mail server address in most cases)
Does the username have to be whole email address? domain\username? or just username
Does the exchange admin have to add my phone?
Hope that helps get your questions answered.

I need some help also. I had my exchange account on my phone until my comp did server upgrades. This knocked me off as they say this will only support Blackberry and iPhone, don't ask me why. So I was able to setup my exchange account on my Android Epic 4g after trying for a week, as I figured if an iPhone can access it my Android should also. But I have tried the same settings from my Android phone on my WP7 and no luck.
After reading this it looks like I need to follow the above mentioned steps to manually add a sec cert to get it working just right?
I really want my exchange account on my WP7, sucks trying to be on the phone and not be able to download attachments cause you are talking on the phone that gets the email.
Any help would be great!

Did you mean to include a URL or two in there? Anyhow, setting up WP7 to work with Exchange should be pretty easy, although I'm not sure it will do EAP with anything older than 2007 (though IMAP on older servers will work fine). Both of my phone's synced Exchange accounts were set up easily and automatically by just telling it to add the email address; it found the servers and automatically configured the accounts.

black06c230 said:
I need some help also. I had my exchange account on my phone until my comp did server upgrades. This knocked me off as they say this will only support Blackberry and iPhone, don't ask me why. So I was able to setup my exchange account on my Android Epic 4g after trying for a week, as I figured if an iPhone can access it my Android should also. But I have tried the same settings from my Android phone on my WP7 and no luck.
After reading this it looks like I need to follow the above mentioned steps to manually add a sec cert to get it working just right?
I really want my exchange account on my WP7, sucks trying to be on the phone and not be able to download attachments cause you are talking on the phone that gets the email.
Any help would be great!
Click to expand...
Click to collapse
Did they post instructions on what was needed to get an iphone on it? Should be similar with windows phone. For the cert, once you get it, email it to your hotmail and open it. THat will install it.

ROCOAFZ said:
in WP 7 though you don't need a slash. just the domain name when it asks for it.
For the cert... can you get to your mail server via web mail?
For ours in IE9, i just click the lock by the address bar and hit view certificate. Also if you know your Exchange admin, ask him to send it to you via the hotmail account. they you can just click on it and install it.
Click to expand...
Click to collapse
once i click the lock and see the cert. how do i get it to send it in an email?
---------- Post added at 11:22 PM ---------- Previous post was at 11:16 PM ----------
ROCOAFZ said:
Did they post instructions on what was needed to get an iphone on it? Should be similar with windows phone. For the cert, once you get it, email it to your hotmail and open it. THat will install it.
Click to expand...
Click to collapse
other co-workers have their iphone's working just fine. I will get a hold of one and see if any settings in there make it work.
but again i got it setup on my android phone without much issue and those same settings won't work on my WP7. it errors about the cert.
as stated I can click the lock and view the cert from web access but how do I email it to myself? i don't see a export option.
lastly, they block any IP but intranet IPs to access the mail.companydomain.com so the cert from there may not even help?!?!?
to access mail from home/laptop i have outlook setup so no need to access via the web.
any help you can give to get this working would be great!! and yes IT won't give my squat.

Have you tried manual setup. That's what mine requires. I put in my email address and password but it never gets it. I then click on manual and add
Login name: whatdoyaknow
Domain: ad.xxx.com (actually mine is more complex than that, but start with ad.)
Server: exchange.xxx.com (again more complex)
I need certificates for most things, but this seems to work ok.
Actually I still have problems getting WM6.5 to connect, but WP7 goes ok with the above.

Can't get corporate email after upgrade to Nougat (insists on full disk encryption)

I have a personal Honor 8 device I use to access my company email. They use Duo Mobile software to authenticate before allowing this.
After upgrading to Nougat 7.0, I am unable to access email (using the Outlook app). I get a message saying that I need full disk encryption turned on. I don't see this as an option anywhere in my Settings. I do have a strong password set to be used.
Do I need to enable File Based encryption at this stage? I am trying to do this and do not see the option to convert to File Based encryption even after turning on Developer Options by the way.
Has anybody else run into this issue? Any guidance - I am dead in the water without being able to access my email.
Thx
AK

I remember I had a problem with my e-mail but I'm not 100% certain that it was the same issue. But try to remove all your screen locks including finger print and try again.

Ihaveatattoo said:
I remember I had a problem with my e-mail but I'm not 100% certain that it was the same issue. But try to remove all your screen locks including finger print and try again.
Click to expand...
Click to collapse
Thanks for the response. However in order to enable Corporate Email, Outlook asks for a password to be in place. Therefore I cannot remove all screen locks.
The problem seems to be that the authenticating software (Duo Mobile) is looking for two things on the device. One is that full disk encryption is explicitly enabled. The other is that the setting to "Require password at Startup" is enabled. Neither of these options are availalble on the Honor 8. Their support says that encryption is on by default and therefore there is no setting for it.

akatti said:
Thanks for the response. However in order to enable Corporate Email, Outlook asks for a password to be in place. Therefore I cannot remove all screen locks.
The problem seems to be that the authenticating software (Duo Mobile) is looking for two things on the device. One is that full disk encryption is explicitly enabled. The other is that the setting to "Require password at Startup" is enabled. Neither of these options are availalble on the Honor 8. Their support says that encryption is on by default and therefore there is no setting for it.
Click to expand...
Click to collapse
Further, I looked at turning on the new File Based Encryption that is part of Nougat. There are how-to's that discuss this, where you have to turn on Developer Options to do so. However, on the Honor 8, even after turnin on Developer Options, there is no option to "Convert to File Based encryption" available. If you search in Settings, it shows this option, but upon clicking on that option from the Settings Search results, it just takes you into Developer Options and there is no setting to enable File Based encryption.

Nvm this, poor reading comprehension on my part

I have no issues using Gmail's Exchange client to connect to my corporate email. It sounds like it's not a Nougat or Android problem, it's a Duo Mobile problem

I had the same problem.
Switched to the app Nine. It is a one-time purchase and its security model is app-wide instead of device-wide.
Have you tried it yet?

Telperion said:
I have no issues using Gmail's Exchange client to connect to my corporate email. It sounds like it's not a Nougat or Android problem, it's a Duo Mobile problem
Click to expand...
Click to collapse
The company whose email I need to get to has only enabled Outlook as a client - therefore using other email clients (such as the Gmail app) is not an option unfortunately.

akatti said:
The company whose email I need to get to has only enabled Outlook as a client - therefore using other email clients (such as the Gmail app) is not an option unfortunately.
Click to expand...
Click to collapse
To the best of my knowledge as long as you have the correct server credentials, you can use any client. For example, my credentials:
Server: subdomain.website.com
Domain\Username: test\Telperion
Port: 443
Security type: SSL/TLS
I can connect using Gmail's Exchange client, Outlook for Android, Nine, native Huawei email client, etc. While everyone's setup is different, if you're able to log in using the Outlook client, theoretically there's nothing to prevent you from using the same credentials in a different client.

That was my not my experience.
My company's Outlook server is configured to require device-level encryption for mobile devices with complex passwords. On my Nexus 6p, Outlook for Android did not work, with the error that it "did not support the encryption required". Also, I could not use fingerprint authentication on the device, and required a 8-digit unlock code. Not just for Outlook, mind you -- any time I wanted to unlock the phone.
OWA (Outlook Web App) for Android worked fine, but it supports neither push nor notifications, rendering it utterly useless. OWA is, as far as I can tell, just a shell containing an HTML rendering engine that reflows the web app.
The only reason CloudMagic (and potentially Nine) worked for me is that CloudMagic (and I think Nine) have device-level encryption on their server (?). The end-user provides credentials for their server to log in, download the email, and act as an intermediary.
Telperion said:
To the best of my knowledge as long as you have the correct server credentials, you can use any client. For example, my credentials:
Server: webmail.website.com
Domain\Username: test\Telperion
Port: 443
Security type: SSL/TLS
I can connect using Gmail's Exchange client, Outlook for Android, Nine, native Huawei email client, etc. While everyone's setup is different, if you're able to log in using the Outlook client, theoretically there's nothing to prevent you from using the same credentials in a different client.
Click to expand...
Click to collapse

biogon said:
That was my not my experience.
My company's Outlook server is configured to require device-level encryption for mobile devices with complex passwords. On my Nexus 6p, Outlook for Android did not work, with the error that it "did not support the encryption required". Also, I could not use fingerprint authentication on the device, and required a 8-digit unlock code. Not just for Outlook, mind you -- any time I wanted to unlock the phone.
OWA (Outlook Web App) for Android worked fine, but it supports neither push nor notifications, rendering it utterly useless. OWA is, as far as I can tell, just a shell containing an HTML rendering engine that reflows the web app.
The only reason CloudMagic (and potentially Nine) worked for me is that CloudMagic (and I think Nine) have device-level encryption on their server (?). The end-user provides credentials for their server to log in, download the email, and act as an intermediary.
Click to expand...
Click to collapse
When adding my corporate exchange email to Gmail, Gmail is activated as a device administrator with permissions to:
Erase all data
Set password rules
Monitor screen-unlock attempts
Lock the screen
Set lock-screen password expiration
Set storage encryption
Disable cameras
I'm not using webmail, I'm using Exchange ActiveSync. Device policy forces me to have a lock screen pin or password, but I can still fingerprint unlock it. It sounds as if your respective Exchange servers aren't configured properly, because all of the security that they're requiring can be mandated through ActiveSync and Gmail's device administration service.

t
Telperion said:
It sounds as if your respective Exchange servers aren't configured properly, because all of the security that they're requiring can be mandated through ActiveSync and Gmail's device administration service.
Click to expand...
Click to collapse
Is Exchange ActiveSync different from Office 365's Exchange?
When I asked IT about local ActiveSync, they said that they don't support it, just Office 365 on Shibboleth.
Then again, I couldn't get a Chromebook to connect to the WiFi network here due to some misconfiguration in their Cisco router's PEAP setup, so I wouldn't be surprised.

biogon said:
Is Exchange ActiveSync different from Office 365's Exchange?
When I asked IT about local ActiveSync, they said that they don't support it, just Office 365 on Shibboleth.
Click to expand...
Click to collapse
Different back end, same capabilities. Exchange ActiveSync is a site-hosted server, Office 365 is a cloud-hosted version. On a local Exchange server, your IT department will have set up a local domain and you will have a user account in Active Directory (domain\Telperion). In Office 365, your user account is your email address ([email protected]) and there is no domain mapped that you have to configure. Once you know this, you can piece together the way to configure it.
The biggest challenge is that IT typically won't mess around with supporting mobile device configuration ("I don't know Android"), and Microsoft tutorials don't give clear instructions ("I don't know Android"). Android tutorials say "I don't know Microsoft" so you end up having to piece things together from multiple sources online.
See attached tutorial, it's very easy once you know what to do.
Add new account from device Accounts menu
Choose 'Exchange' with the Gmail logo
Enter your corporate email address, don't hit next, hit "Manual Setup"
Choose 'Exchange' as the account type
Make sure your email is entered in "domain\username" field
Enter password
Server for Office 365 is "outlook.office365.com"
Port 443
Set security to "SSL/TLS"
From there it should handle all the rest of the configuration.

biogon said:
I had the same problem.
Switched to the app Nine. It is a one-time purchase and its security model is app-wide instead of device-wide.
Have you tried it yet?
Click to expand...
Click to collapse
Thanks. Tried Nine. Works the same way as Outlook so far. In other words, setting its policy to only apply to the app doesn't make a difference in how Duo Mobile (the two factor authentication checker) continues to insist the device be encrypted and have the setting "Require password on startup" be turned on.

Telperion said:
Different back end, same capabilities. Exchange ActiveSync is a site-hosted server, Office 365 is a cloud-hosted version. On a local Exchange server, your IT department will have set up a local domain and you will have a user account in Active Directory (domain\Telperion). In Office 365, your user account is your email address ([email protected]) and there is no domain mapped that you have to configure. Once you know this, you can piece together the way to configure it.
The biggest challenge is that IT typically won't mess around with supporting mobile device configuration ("I don't know Android"), and Microsoft tutorials don't give clear instructions ("I don't know Android"). Android tutorials say "I don't know Microsoft" so you end up having to piece things together from multiple sources online.
See attached tutorial, it's very easy once you know what to do.
Add new account from device Accounts menu
Choose 'Exchange' with the Gmail logo
Enter your corporate email address, don't hit next, hit "Manual Setup"
Choose 'Exchange' as the account type
Make sure your email is entered in "domain\username" field
Enter password
Server for Office 365 is "outlook.office365.com"
Port 443
Set security to "SSL/TLS"
From there it should handle all the rest of the configuration.
Click to expand...
Click to collapse
Thanks for the detailed message. Tried the above.
When I left the server be the default server name (derived from my email address), I got a "Certificate is not valid" error. I had "None" as the certificate.
After I changed the server name to be outlook.office365.com as mentioned in your instructions above, I now get a "Can't connect to server" message.
I did recheck my steps. Not sure why Gmail fails to connect. Any suggestions on where to look?

akatti said:
Thanks for the detailed message. Tried the above.
When I left the server be the default server name (derived from my email address), I got a "Certificate is not valid" error. I had "None" as the certificate.
After I changed the server name to be outlook.office365.com as mentioned in your instructions above, I now get a "Can't connect to server" message.
I did recheck my steps. Not sure why Gmail fails to connect. Any suggestions on where to look?
Click to expand...
Click to collapse
Those instructions are for Office 365, it sounds like yours is hosted.

Telperion said:
Those instructions are for Office 365, it sounds like yours is hosted.
Click to expand...
Click to collapse
I checked the settings for Outlook Web on my PC and it is an Office 365 account. I updated by Gmail settings to match (Server: outlook.office365.com, Port: 993 and Security: SSL/TLS although on the PC it was just TLS). Get a message saying "Couldn't open connection to server".