Stock corporate email security settings

[sillyrabbitt123]

I was setting up an exchange account and the stock app asked for so much control / or better yet the app was saying my company could remote wipe my phone, have access to this that and the kitchen sink. why does the stock app give so much control? anyone to not give all that permission. i did download touch down instead and it didnt ask for such measure. crazy! I just dont want my client/employer to have that access to my phone. you?

 

[Unicorn56]

I was setting up an exchange account and the stock app asked for so much control / or better yet the app was saying my company could remote wipe my phone, have access to this that and the kitchen sink. why does the stock app give so much control? anyone to not give all that permission. i did download touch down instead and it didnt ask for such measure. crazy! I just dont want my client/employer to have that access to my phone. you?

Security is required by your company's server. Remember, you are asking them to risk their corpate assets to allow you access. The least you can do is respect that!

 

[Unicorn56]

You are a silly rabbit if you think your employer cares one fig for your little phone, what they care about is protecting servers worth more than you make in a year and the loss of data that could cost them their entire company. Your phone is a huge security hole that they don't have to allow. If your phone is stolen and you haven't secured it, and have been stupid enough to save your passwords on it, they would be doing themselves and you a favor by wiping it!

 

[sillyrabbitt123]

You both are totally missing my Point. I understand and respect security.

The question at hand is why is the Samsung App asking for so much when the touchdown app which i installed and my old phones HTC app that I used prior did not.

The Samsung up was saying my employer would have the ability to record my voice video tape me excetera excetera. Should I Give them the ability to do that. No I shouldn't. I will go back to using fax or stop working altogther.

So again is touchdown app granting my employer the same ability?

Thank s
Sent from my SCH-I605 using Android Central Forums

 

[Unicorn56]

You are missing the point. Because people try to circumvent their company's security thus endangering their networks, companys are forced to increase security measures up to and including removing your ability to connect at all. Your employer may have the ability to look at anything in your phone in order to protect themselves (remember that some companies must protect corporate secrets or loose their shirts) it does not mean that they will. You, as an employee are extended the privilege to access their network with your phone with the understanding that you accept their right to secure said phone! By seeking to circumvent those security measures, you endanger yout own job. Most companies limit you to simple Exchange mail access fortunately. Most require a login plus a passcode protected phone. I have no idea if or how touchdown handles that security requirement. It may create an internal passcode or security certificate. It may also be that Touchdown queried your exchange server and found that it was not set up with security requirement, which is bad.

 

[sillyrabbitt123]

You are missing the point. Because people try to circumvent their company's security thus endangering their networks, companys are forced to increase security measures up to and including removing your ability to connect at all. Your employer may have the ability to look at anything in your phone in order to protect themselves (remember that some companies must protect corporate secrets or loose their shirts) it does not mean that they will. You, as an employee are extended the privilege to access their network with your phone with the understanding that you accept their right to secure said phone! By seeking to circumvent those security measures, you endanger yout own job. Most companies limit you to simple Exchange mail access fortunately. Most require a login plus a passcode protected phone. I have no idea if or how touchdown handles that security requirement. It may create an internal passcode or security certificate. It may also be that Touchdown queried your exchange server and found that it was not set up with security requirement, which is bad.

I appreciate the dialog I do! However you are missing the point again.

So in your scenario HTC software is bad because it doesnt ask for the same permission as Samsungs software does and samsungs is good because it does? I am not trying to circumvent anything I am asking why SAMSUNGs app is asking and HTC isnt.

Your employer may have the ability to look at anything in your phone in order to protect themselves...it does not mean that they will.

POWER corrupts and ABSOLUTE POWER corrupts ABSOLUTELY!

thanks

 

[Unicorn56]

I suspect that the exchange server you are connecting to does not have the requirement of a security code protected phone because that is determined by the server, not the app. The warning you received from the samsung app was just that, s general warning telling you that a corporate connection can expose your phone to those various permissions depending upon how your server's security is configured. If you are connected to an exchange server without that server asking you for a security code to lock the phone with, that means the server does not require one. As far as corruption goes, as a DBA I'm more concerned with my server getting corrupted than your employer finding your porn ;-)

 

[MobileMadness002]

TouchDown? Features

-- Snip --
TouchDown Features

The following is a subset of features that TouchDown? supports
General
Widgets Y
SSL Support Y
PIN Enforcement Y
Remote Data Wipe Y
Email-initiated Data Wipe Y
SMS confirm on Wipe Y
Manual and Scheduled Sync Y
Data Encryption at rest Y
Encrypt Attachments on SD card Y
-- Snip --

By the looks of it, you accepted the ability to remote wipe anyways if the IT issues the command.

 

[sillyrabbitt123]

I suspect that the exchange server you are connecting to does not have the requirement of a security code protected phone because that is determined by the server, not the app. The warning you received from the samsung app was just that, s general warning telling you that a corporate connection can expose your phone to those various permissions depending upon how your server's security is configured. If you are connected to an exchange server without that server asking you for a security code to lock the phone with, that means the server does not require one. As far as corruption goes, as a DBA I'm more concerned with my server getting corrupted than your employer finding your porn ;-)

Thanks! Haha its not my more its them making porn out of me lol that i dont like!

All three servers I connect too do not ask for a pin and yet the samsung app give a general warning while TD and HTC apps didnt.

TouchDown? Features

-- Snip --
TouchDown Features

The following is a subset of features that TouchDown? supports
General
Widgets Y
SSL Support Y
PIN Enforcement Y
Remote Data Wipe Y
Email-initiated Data Wipe Y
SMS confirm on Wipe Y
Manual and Scheduled Sync Y
Data Encryption at rest Y
Encrypt Attachments on SD card Y
-- Snip --

By the looks of it, you accepted the ability to remote wipe anyways if the IT issues the command.

Thanks I figured it had the same or more but not a real stark warning like Sammy!