In most cases, this will also prevent any programmatic access from a computer like using iTunes or the Android File Transfer app. Locking-Mobile devices should have a screen lock to prevent unauthorized users from gaining access. In order to fully protect mobile devices, there are a number of best practices that should be utilized. Samsung, similarly, has a location function for their devices that also includes the ability to remotely lock or remotely wipe a device. This is also becoming possible with manufacturer functionality like the Find My iPhone feature that’s available with Apple’s iCloud. You can also perform a remote wipe at any point you believe the device has been lost or stolen. This is a common preference setting on smartphones, though with EAS, you can require that it be set. This is not to say that you need EAS to perform a device wipe after a number of failed passwords. This could of course be a laptop connected via VPN, but it's not quite as flexible as the standard method of using simply a username and password.īesides bringing the mobile devices into the domain and applying flexible group policy, Microsoft System Center Mobile Device Manager enables over the air (OTA) certificate provisioning, which makes multiple-handset provisioning considerably easier, particularly for larger companies. While certificate authentication on mobiles provides greater security, it does require the device to be connected via ActiveSync to a desktop that is a part of the domain. No input is required from the administrator apart from perhaps adding the user to whatever list of mobile users they have, but Exchange can provide this information and no interaction is required with the user. The Exchange server applies the policy, such as password settings, and the ISA server mediates the connection between client and server.
Using this method, a user can provision a device over the air without going to the office to do so. One of the nice features of Windows Mobile 6.1 and Exchange Server 2007 together is the Autodiscover process, which works in much the same way as with Outlook Anywhere. You Should Set at Least a Password Policy for ActiveSync
0 kommentar(er)
