Tag Info

Hot answers tagged

9

Per RFC952, hostnames are: A "name" (Net, Host, Gateway, or Domain name) is a text string up to 24 characters drawn from the alphabet (A-Z), digits (0-9), minus sign (-), and period (.). Note that periods are only allowed when they serve to delimit components of "domain style names". Microsoft in the usual "Embrace, Extend and ...


8

Encryption will never be "seamless" - particularly in a mixed environment. Similarly the idea that you'll be able to get outside agencies to adhere to your encryption policy is a noble goal, but may be difficult in practice (My company has been trying to get this to happen since before I came here. Some outside personnel are simply not going to be able to ...


8

UPDATED (again) The short answer to your question is NO. Outlook/Exchange clients either are capable or aren't capable of Remote-wipe. The Exchange policy simply expects that they support that feature.. If the phone supports Remote-wipe and you've accepted the policy (by being a so-called "Provisional Device"), then Exchange may send a request to wipe ...


5

This is pretty similar to how to disable remote wipe for Exchange 2010 ActiveSync? The short answer is - No. Android will prompt for those permissions regardless of whether Exchange's ActiveSync policies specifically allow or deny Exchange's ability to do those actions. As far as I can tell, Android's ActiveSync apps have to require that you approve all ...


5

Here's a fairly straight forward L2TP/IPSEC tutorial, but I don't think iphone can use certs, so you will have to go PSK. It also gets into domain authentication, so your users only have to remember one set of credentials. That is, if you have a domain... ...


5

Take a look at your DHCP server, are you supplying the option for a search suffix to your scopes?


4

The aforementioned NitroDesk TouchDown should do the job, but HTC and possibly other Android phones have the ability to sync onboard already. Setting up can be a little tricky, but here is a massive tip that will almost certainly help you get it working: use https://www.testexchangeconnectivity.com/ to test for ActiveSync connectivity, if it fails it often ...


4

man tcp - look for tcp_retries[1,2] for Linux machines. I have no idea what to do for Android and given Apples attitude to system-level tweaking there is probably absolutely no way to do this on iOS except when you jailbreak. TCP socket timeouts put aside, most applications will implement their own timeouts which are probably considerably shorter than the ...


4

It's not possible. The way to solve this problem is with a layer on top of the TCP layer that provides the semantics you need. This layer would have to add an identifier to each message, implement message acknowledgements, re-establish the TCP connection if it broken, and re-send all unacknowledged messages.


4

Well it has to be 1 of 3 things. Something changed in the AD account, something changed in the Exchange account or something changed on the phone itself. Can you enable debugging on the phone to ascertain why exactly the phone is throwing an error. Follow these steps to enable debugging: 1. On the android phone go to menu -> email. You will need to have ...


4

AirWatch has an MS Exchange client for iOS and Android. They support encryption and have a number of other security features as well. http://www.air-watch.com/solutions/apple-ios


4

Erik Fair has answered this extensively over at Quora: The keyboard of the Teletype (TTY) ASR-33 (a very common terminal interface of the period from whence this standard hails) doesn't have underscore on it: http://www.pdp8.net/asr33/pics/k... which gives one a nasty problem: how do you type (input) a hostname if the hostname in question ...


3

Microsoft Windows does not prohibit the underscore in the name of a computer. Some system administrators, either not knowing or not caring about RFC952, use underscores in the name of a computer that is connected to the internet, and either put this name in the DNS explicitly or allow it to be published via dynamic DNS. There's nothing particularly strange ...


3

It's not abnormal. I had this discussion before with someone building custom Android distros. You will need a lot more memory than 8 GB. IIRC they used a 32 GB ram machine.


3

No-one's voted to close, so I'll make my comment into an answer: Why not run the check-out on the devices? Since you write apps, write one that locks the device until a user logs in. I wouldn't think it needs to be very secure, since it's being used in-house. To check a device out, the user simply takes it, logs in, and the app can transmit the fact that ...


3

AWS will work for what you intend without any problem, things to be aware though of an EC2 implementation You'll lose CPU cycles when the underlying node is under high load, be ready for your machines to sometimes not deliver enough CPU juice Disk I/O will be a bit slower than a regular machine Apart from that Openfire does have a clustering solution, ...


3

I've got an HTC Touch Pro (Windows Mobile OS), and it will pass the MicroSD through as a USB disk. I can boot off it, though I haven't tried Linux I don't see why it would be that much different.


3

You'll need to take a few steps here. First may well be user education. Explain to your users that email is like writing on a postcard, anyone along the way can see the message. You'll want to find a PGP (GPG) client that integrates with each mail client in use on your network. Start with the most widely used client. I'd guess that is Outlook so take a ...


2

You need to provide the entire certificate chain in order for it to show up as trusted. Here's the link I got for comodo's instructions on installing the cert chain in apache: https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/637/37/certificate-installation-apache--mod_ssl I got this from ...


2

Android has had issues downloading files from password protected sites. You can browse just fine but downloads fail and don't give any indication as to why. For a long time I had to use firefox on android to download them. Recently that broke for sites using NTLM. The latest google chrome on my Samsung Note 2 (android 4.1.2) does work with password ...


2

Security inheritance is not set by selecting a specific permission. It's a global setting per user object. The step about "select exchange servers" is pointless, you're doing this for all ACL's. Every AD user should have security inheritance enabled. A ton of software that utilizes these security attributes (especially Exchange and Lync) rely on them. The ...


2

Concatenate the files provided manually, in the following order: site.com.crt intermediate.crt (one or more, the order of these doesn't matter) ROOT.crt you can do this from a shell with the cat command cat site.com intermediate.crt ROOT.crt > site.chain.pem or copy/paste them, no whitespace between, make sure certificates are on different lines ...


2

From a bit of research it looks like the port that google uses for its push service (GCM) is TCP port 5228. That is what the firewall will have to allow out for push notifications to work.


2

I have a Motorola droid that I use as a bootable AV disk. Mine acted just fine as a usb stick, however I have seen it not work on other phones. I know that the samsung galaxy S was having problems acting as a mass storage device on windows 7 64 bit, I needed to find a driver for it. However I have not tried booting to the samsung.


2

You can create any number of ActiveSync policies (with different settings) and apply those policies to different sets of users. My opinion is that if these devices are personal devices then you probably shouldn't force a password policy on them, but you need to determine the risk/response regarding company email on the devices if they're lost or stolen. If ...


2

Since Android v2.0 you can log into multiple Google accounts on your Android phone. So, if your friend's phone uses Android 2.0+ he can simply add a new account (his Google Apps one) to the calendar application (assuming he currently uses his personal account for the phone). I myself have my personal and Google Apps calendars synced to my phone and ...


2

I believe this is actually forced from the Droid side, not from your Exchange server and is a part of the mobile OS by design. The good news is that it's a terrific security practice and should be used by most people. I'm sure however that doesn't satisfy your needs. One alternative is to not use the embedded exchange client, but an alternative such as ...


2

Local copies of emails are NOT encrypted, however it does use ssl to send and receive from the exchange server. Also as PMGoldstein said it allows you to wipe devices remotely. Here is a link to the current issue on the android request board for this feature, it states that it is currently not available in Froyo 2.2. I have also personally tested if data on ...


2

Are these administrative accounts by any chance? We ran into an odd bug when doing the upgrade to Windows 2008 domain and Exchange 2010 at the same time. Here's the issue we had: check the user account in Active Directory Users and Computers, go to the security tab, and make sure "inherit from parent the permissions that apply to child objects" is checked. ...


2

I have my Android connected to a SonicWall appliance using IPSec. I have not been asked for user name and password when connecting, but I have to enter a password to protect the PSK. Did you happen to enable the L2TP password on the phone? This option should be left unchecked if you do not have an L2TP enabled firewall. EDIT I had a look at the setup on the ...



Only top voted, non community-wiki answers of a minimum length are eligible