{"id":866,"date":"2010-11-22T08:50:21","date_gmt":"2010-11-22T08:50:21","guid":{"rendered":"http:\/\/refraction.co.uk\/blog\/?p=866"},"modified":"2010-11-23T09:35:03","modified_gmt":"2010-11-23T09:35:03","slug":"windows-phone-7-and-exchange-activesync","status":"publish","type":"post","link":"https:\/\/refraction.co.uk\/blog\/2010\/11\/22\/windows-phone-7-and-exchange-activesync\/","title":{"rendered":"Windows Phone 7 and Exchange ActiveSync"},"content":{"rendered":"<p style=\"text-align: center;\"><a href=\"http:\/\/modmyi.com\/forums\/attachments\/iphone-4-new-skins-themes-launches\/481268d1289526227-release-windows-phone-7-hd-mail-2x.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter\" src=\"http:\/\/modmyi.com\/forums\/attachments\/iphone-4-new-skins-themes-launches\/481268d1289526227-release-windows-phone-7-hd-mail-2x.png\" alt=\"Windows Phone 7 Email Icon\" width=\"243\" height=\"243\" \/><\/a><\/p>\n<p style=\"text-align: left;\">One of the big topics for Enterprises at the moment is the security of mobile devices and the ever increasing amount of data stored on them. The explosion of smartphone use that has followed the rise of the iPhone and iPad has lead many organisations to look at how best to apply and enforce security configurations to devices accessing corporate email.<\/p>\n<p style=\"text-align: left;\">Fortunately out the box MS Exchange has the ability to push and enforce policies using it&#8217;s Exchange ActiveSync (EAS) protocol. \u00a0This is supported by most smartphones these days including the iPhone, iPad, Windows Mobile and Google Android (to a limited extent, but better support is due in Gingerbread). \u00a0The polices allow you to configure the same sort of settings that Blackberries tout, pass codes, encryption and all that good stuff. \u00a0I wrote a <a title=\"Exchange ActiveSync Policy Compatibility\" href=\"https:\/\/refraction.co.uk\/blog\/wp-content\/uploads\/2010\/11\/Exchange-ActiveSync-Policies.pdf\" target=\"_blank\">table<\/a> showing all the options and device compatibility whilst <a title=\"Android and iPhone Exchange ActiveSync Policies\" href=\"https:\/\/refraction.co.uk\/blog\/2010\/07\/19\/android-and-iphone-exchange-activesync-policies\/\" target=\"_blank\">looking into it<\/a> a few months ago.<\/p>\n<p style=\"text-align: left;\">With MS practically owning the corporate email market with Exchange, you&#8217;d have expected its new Windows Phone 7 platform to lead the field when it came to integration with Exchange and it&#8217;s security options. Unfortunately they seem to have missed that bit out the spec. \u00a0As it turns out WP7 has less support and integration than the Windows Mobile 6 platform it replaced. \u00a0Whilst it uses EAS to connect to Exchange and sync email, it&#8217;s only aware of a subset of the policies that can be applied.<\/p>\n<p style=\"text-align: left;\">Only the following are supported:<\/p>\n<ul>\n<li>Password Required<\/li>\n<li>Minimum Password Length<\/li>\n<li>Idle Timeout Frequency Value<\/li>\n<li>Device Wipe Threshold<\/li>\n<li>Allow Simple Password<\/li>\n<li>Password Expiration<\/li>\n<li>Password History<\/li>\n<li>Disable Removable Storage<\/li>\n<li>Disable IrDA<\/li>\n<li>Disable Desktop Sync<\/li>\n<li>Block Remote Desktop<\/li>\n<li>Block Internet Sharing<\/li>\n<\/ul>\n<p>Whilst this subset offers very basic core security options there are far more important ones that are not there &#8211; support for encryption for example. Indeed I have an open question with MS about whether there is support for\u00a0encryption\u00a0at all in WP7.<\/p>\n<p>So what happens if you have any of the more detailed policies already configured? \u00a0Well there&#8217;s a good chance WP7 devices won&#8217;t be allowed to connect at all. \u00a0There&#8217;s a policy called &#8216;Allow Non-provisionable Devices&#8217; which unless enabled will block any device that doesn&#8217;t comply with your polices from connecting. \u00a0This will almost always be set to prevent non-compatible devices gaining access so if you&#8217;re enforcing encryption for example WP7 phones will just be blocked.<\/p>\n<p>This leaves you with a few options&#8230;<\/p>\n<p>First you can turn on the &#8216;Allow Non-provisionable Devices&#8217; on whatever policies you currently use. \u00a0But, to be honest that pretty much opens up your exchange system to any and all devices that claim Activesync support, personally I wouldn&#8217;t do it.<\/p>\n<p>Second you could create a new policy which only uses the WP7 supported settings. \u00a0While that might sound easy, you have to remember that EAS policies are applied to users not devices, so you&#8217;d have to keep track of which users have WP7 phones and ensure they are allocated the correct policy applied. \u00a0Of course you then have to hope that that person does not also have say an iPad alongside their phone.<\/p>\n<p>In all honesty I find this all very odd. \u00a0MS could easily have\u00a0positioned\u00a0WP7 as the smartphone of choice for organisations using Exchange. \u00a0Instead it has provided limited support similar to Android and\u00a0significantly\u00a0less support than Apples iPhone. \u00a0Whats worse is that if it turns out WP7 doesn&#8217;t support encryption it will almost certainly be ruled out of many companies lists of permissible\u00a0phones. \u00a0These days organisations just <a title=\"Information Commissioner fines\" href=\"http:\/\/www.scmagazineuk.com\/two-months-of-increased-enforcement-by-the-information-commissioners-office-but-why-are-we-yet-to-see-the-first-fine\/article\/171917\/\" target=\"_blank\">can&#8217;t take the chance<\/a> of having email and data transported around unencrypted.<\/p>\n<p>I can only imagine that full support was skipped in the urgency to get WP7 out to market. \u00a0If that&#8217;s so I&#8217;d hope that an update will arrive sometime soon to fix the problem. \u00a0Until it does I can&#8217;t see many companies allowing, let alone adopting WP7 in the same way they have iPhones.<\/p>\n<p><em>Update:\u00a0 I&#8217;ve added some more information in a follow up <\/em><a href=\"https:\/\/refraction.co.uk\/blog\/2010\/11\/23\/more-on-windows-phone-7-security-policies\/\" target=\"_self\"><em>post<\/em><\/a><em>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft&#8217;s new Windows Phone 7 platform supports Exchange ActiveSync policies, but like Google Android only a subset and far fewer than the Apple iPhone or iPad.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[129,178,106,412,121,447],"class_list":["post-866","post","type-post","status-publish","format-standard","hentry","category-tech","tag-activesync","tag-android","tag-exchange","tag-ipad","tag-iphone","tag-windows-phone-7","entry"],"_links":{"self":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts\/866","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=866"}],"version-history":[{"count":7,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts\/866\/revisions"}],"predecessor-version":[{"id":871,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts\/866\/revisions\/871"}],"wp:attachment":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=866"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=866"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=866"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}