Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 12 subscribers
  • Views 70411 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IOS users constantly asked for Exchange password

tjhia

Hi Guys,

I have been working with Sophos Support on this case for months now without any near resolution, so i thought to post it here, with hope if anyone else running Sophos Cloud and deploy IOS with exchange active sync also had similar issue.

Bottom line is, i believe that any modification, addition of policies that have relation with exchange active sync aspect, will cause all users running IOS and had the email installed via sophos cloud enrolment will get prompted to have exchange password keyed in. They also need to go to the back setting to key the password or else the system does not likes it.

Previously, we had similar case happened when Sophos Cloud launched new updates.

For more information, i have 2 types of policy. first one, only manage the computer AV. second one manages the mobile MDM aspect.

I managed to replicate the problem by  doing the Exact steps that I did was as per follow: [I mask some part the policy name for privacy and security reasons].

  1. Cloned a policy that managed the mobile phone. (“XXX Mobile – BYOD IOS”)
  2. Rename the cloned policy as “YYY Mobile – BYOD IOS”. Retain all other settings.
  3. Remove all users that was part of the policy “YYY Mobile – BYOD IOS”.
  4. Add another exchange server settings “remote.YYY.com.au” and the domain information “YYY”.
  5. Enable the policy and save the setting.

The problem afterwards:

  1. ALL users, who are using IOS device, get prompted to enter exchange password.
  2. When the users typed the pop up for exchange password, nothing happened, it keep popping up.
  3. The user have to go to the password from “Settings -> Mail, Calendar, Contacts -> the exchange account -> accounts -> retype the password” . Once the IOS verified the account, it all back working again.

perhaps anyone would like to try the steps above and let me know if you encouter similar problem? if you dont, would you be able to share with me how do you setup the policy for users with IOS/BYOD ? Thanks.

:55277


This thread was automatically locked due to age.
Parents
  • 0

    Hi tjhia,

    I had a look at your described behavior and tried to reproduce it, therefore thank you for providing the detailed steps which made the test a little bit easier for me :smileywink:

    Adding a new email configuration to my cloned policy did not cause any issues on my email account and the existing iOS devices.

    However, if I cloned the policy and updated / changed the already configured email server the same behavior was observed.

    This is however explainable but not very clear in the GUI.

    The email settings are some kind of "central" and can be used in all different mobile policies. They are not valid per policy.

    Therefore, if you updated the emal settings in one policy (not having users assigned) it will also be updated for all other users which have these email settings applied. However, updating an exchange account is more or less a recreation on the device which then results in a reappearing password prompt.

    Please note that this is just my assumption of what you are doing, but maybe you can provide an answer whether I am right with it or not.

    I will also get in touch with the supporter and provide this post, so you can perhaps also sent an answer to the support address.

    Thanks & Regards

    Stefan

    :55349
Reply
  • 0

    Hi tjhia,

    I had a look at your described behavior and tried to reproduce it, therefore thank you for providing the detailed steps which made the test a little bit easier for me :smileywink:

    Adding a new email configuration to my cloned policy did not cause any issues on my email account and the existing iOS devices.

    However, if I cloned the policy and updated / changed the already configured email server the same behavior was observed.

    This is however explainable but not very clear in the GUI.

    The email settings are some kind of "central" and can be used in all different mobile policies. They are not valid per policy.

    Therefore, if you updated the emal settings in one policy (not having users assigned) it will also be updated for all other users which have these email settings applied. However, updating an exchange account is more or less a recreation on the device which then results in a reappearing password prompt.

    Please note that this is just my assumption of what you are doing, but maybe you can provide an answer whether I am right with it or not.

    I will also get in touch with the supporter and provide this post, so you can perhaps also sent an answer to the support address.

    Thanks & Regards

    Stefan

    :55349
Children
No Data
Unfiltered HTML