How to disable Exchange Security Policy for Windows Mobile Devices

Direct Push pushes email into your Windows Mobile device and it’s good. However it pushes you security policy as well, that sometimes make you unable to set password that you want and sometimes, lock your device after one minute of inactivity. How to disable this useful feature? How to cancel autolock feature of your WM machine, connected to Microsoft Exchange server?

As everything in WM, you should patch registry, but what to patch? Well, it’s simple

  • Enable/Disable the Exchange security policy – HKLM\Security\Policies\00001023: 0 = Enabled; 1 = Disabled
  • Inactivity time
  • HKLM\Comm\Security\Policy\LASSD\AE\{50C13377-C66D-400C-889E-C316FC4AB374}\AEFrequencyType: 0 = No inactivity time; 1 = Activity time enable
  • HKLM\Comm\Security\Policy\LASSD\AE\{50C13377-C66D-400C-889E-C316FC4AB374}\AEFrequencyValue: number of minutes before timeout
  • Password strength
    • Minimum number of characters: HKLM\Comm\Security\Policy\LASSD\LAP\lap_pw\MinimumPasswordLength
    • Password complexity: HKLM\Comm\Security\Policy\LASSD\LAP\lap_pw\PasswordComplexity: 0 = Require Alphanumeric; 1 = Require numeric (PIN); 2 = No restriction
  • Wipe settings
    • Number of failed attempts before all your information will go: HKLM\Comm\Security\Policy\LASSD\DeviceWipeThreshold: -1 = disabled; other failed attempts
    • Number of failed attempts before displaying codeoword: HKLM\Comm\Security\Policy\LASSD\CodewordFrequency: number of failed attempts

    Well, that all. After you’ll fix it, just go to Lock settings in your device manager and you’ll be able to unmark and change whatever you want. I hate, when program denies me from doing anything in my device.

    If you are not feeling comfortable with changing registry settings, I create simple program, that do it instead of you. You can download and use it for free, but notice, I’m not responsible if it will brick your device (this is system hack)

    image

    Download Exchange Police Patch >>

    • Digg
    • del.icio.us
    • Facebook
    • Google Bookmarks
    • DotNetKicks
    • DZone
    • Live
    • Reddit
    • TwitThis
    • email
    • Slashdot
    • StumbleUpon

    You may also be interested with:

    1. Windows 7 – dry run or how things should be done to correct old mistakes

    23 Responses to “How to disable Exchange Security Policy for Windows Mobile Devices”

    1. martin Says:

      I’ve run the program, but now I cannot connect to the Exchange server or the internet at all. A connection to GPRS is set, but their seems to be no data traffic. Any suggestions on how to fix this?

    2. tommy Says:

      … um … how about just contact your exchange admin … have him/her remove the policy PER ACCOUNT … um … yeah … dumbasses …

    3. Registry key of GPO template voor ActiveSync - Pocketinfo forum Says:

      Pingback from  Registry key of GPO template voor ActiveSync – Pocketinfo forum

    4. Tony Says:

      Also when I try to modify the reg settings I get access denied..Anyone have any tips on this?

    5. Tony Says:

      There’s a lot of write ups that exchanges pushes the security back on the device. Does anyone…anyone have an answer to make this permeant.. WB

    6. subject: exchange Says:

      Microsoft Outlook: 9 Things You Didn't Know You Could Do Exchange 2003 servers with build numbers

    7. the new cube 2.0 » Blog Archive » Modifying Microsoft Exchange Security Policy on Windows Mobile Says:

      Pingback from  the new cube 2.0  » Blog Archive   » Modifying Microsoft Exchange Security Policy on Windows Mobile

    8. Nick Says:

      I altered the registry ((changed 0001023 from 0 into 1) and it worked. Just when I reconnect to the exchange server, it is set back to 0.

      This means after every connection to the exchange server I have to alter the registry.

      Isn’t there a more definite sollution?

    9. Tamir Khason Says:

      Hi, Ted

      Please assure, that CF 3.5 in actually installed and soft reset your phone after the installation of Cf and running this patch

    10. Ted Says:

      I have a Dash running WM6. I tried to run the patch and I too get the error about needing a new version of .Net, so I installed 3.5 and now when I try to run the patch I get "Error. An unexpected error has occurred in ExchangePolicyPatch.exe. Select Quit and then restart this program, or select Details for mor information." Under details, it says "Error. EchangePolicyPatch.exe NotSupportedException" and then a bunch of locations. I can provide the info, but it will take a lot of typing, or I can post the error as screen shots if that will help.

      Thanks,

      Ted

    11. Chris Says:

      Thanks!

      Setting HKLM\Security\Policies\Policies\00001023 to 1 fixed the problem for me.

      Note the path is different from what you have in your post (two Policies).

    12. E.Swart Says:

      How do I disable the file coding option (also enabled during exchange mail push)

      It now shows enabled and greyed out "company policy)

    13. Edwin Says:

      I’m having the same problem too, "This application requires a newer version of the Microsoft(R) .NET Compact Framework than the version installed on this device".

      I reomoved activesync for the exchange and the pin is still required. How frustratin.

    14. John Christensen Says:

      Just applied your registry changes to my AT&T Tilt (HTC)

      Yesterday is when Exchange pushed the crummy security policy to me.

      Worked like a charm!  Thanks for your help.

      JCC

    15. Manoj Rathour Says:

      Hi All,

      I forgot security code of E51, now i want to format for viruses but i cant beacause of security code, just help me out.

      i m tired of searching & searching

      thanks

      manojrathour@yahoo.com

      rathour.manoj@gmail.com

    16. Treo Pro owner Says:

      Thank you! However MinimumPasswordLength does not work. Tried with 0 & 2 but system still insists on minimum of 7 in alphanumeric. Help.

    17. geszhu Says:

      My PPC is running WM 6.1. ALthough the suggested registry settings work, Exchange Server reinforces settings after every automatic connect.
      Is there any workaround?

    18. James Says:

      This utility would be great for me, but I get the same error as Ted. I have rebooted the device (HTC S620 running Windows Mobile 6.0) after installing .NET Compact Framework 3.5.

      Any help would be greatly appreciated.

      “Error. An unexpected error has occurred in ExchangePolicyPatch.exe. Select Quit and then restart this program, or select Details for more information. Error. EchangePolicyPatch.exe NotSupportedException” followed by a list of locations.

      Thanks!

    19. Martijn Says:

      Hi,

      I used your appl in the past to patch the policy and i worked for a long time. Last week ik received a update to the policy and i think it’s because of a migration to exchange 2007. I rerun the app but it didn’t work anymore. The policy stays.

      I used a regeditor to find the HKLM\Security\Policies0001023 key, but that doesn’t seem to be there anymore, it now hase an extra key HKLM\Security\Policies\ Policies 0001023.

      Setting the value of 0001023 here to 1 does not help.

      Do you have any idea about new settings that come with Exchange 2007 that need to be set to remove the policy.

      Regards,

    20. Eric Wong Says:

      HKLM\Comm\Security\Policy\LASSD\DeviceWipeThreshold: -1

      Cannot seem to change the value to -1. Got an error message stating invalid value.

    21. Simon Collingridge Says:

      I found this article doesn’t quite have everything as I also needed to edit the same settings in this registry folder too:

      HKLM\Comm\Security\LASSD\AE\{50C13377-C66D-400C-889E-C316FC4AB374}\AEFrequencyType

    22. Lawerence Pitarresi Says:

      Schönes Blog. Das Design gefaellt sehr gut, wo kann ich das denn downloaden?

    23. Frusciante Says:

      I altered the registry ((changed 0001023 from 0 into 1) and it worked. Just when I reconnect to the exchange server, it is set back to 0.

      Isn’t there a more definite sollution?

    Leave a Reply

    Recommended

     


    Sponsor


    Partners

    WPF Disciples
    Dreamhost
    Code Project
    Switched to Better Place

    Together