[itdiscuss] Smart Phone Security

[Rob Shaw]

We do the same.  

The user may own the iPhone, but we Œown¹ the data from our Exchange server
and have the responsibility to protect it.

If a users want to access their work/church email, then they must have a
4-digit passcode which is enforced through ActiveSync (and can be remote
wiped through ActiveSync).

-- 


 




From: Jason Powell <jpowell at gccwired.com>
Reply-To: IT Discussion Forum <discuss at itdiscuss.org>
Date: Tue, 1 Dec 2009 19:55:17 -0500
To: IT Discussion Forum <discuss at itdiscuss.org>
Subject: Re: [itdiscuss] Smart Phone Security

We currently enforce passwords on all mobile devices using activesync to hit
exchange.  It¹s not that big of a deal since you can usually set the timeout
value pretty high.  Our users haven¹t complained about it (almost 40 iphone
users and 4 Pre)
 
 
Jason Powell
IT Director
Granger Community Church
630 E. University Drive
Granger, IN 46530
574.243.2022 € jpowell at gccwired.com € GCCwired.com
http://jpowell.blogs.com <http://jpowell.blogs.com/>  - yup, I've got a blog
http://twitter.com/JasonPowell - My twitter feed
http://facebook.com/jason.powell - My facebook page
 
 
 

From: discuss-bounces at itdiscuss.org [mailto:discuss-bounces at itdiscuss.org]
On Behalf Of Jay Betancourt
Sent: Tuesday, December 01, 2009 7:44 PM
To: IT Discussion Forum
Subject: Re: [itdiscuss] Smart Phone Security
 
Hi Dave,

Sorry to hear about that situation.  We tell our iPhone users to password
protect their devices in the event of loss or theft.  However, we do not
require it.  Instead, users are shown how to automatically wipe the device
from their Outlook Web Access in the event that such situation should occur.
While it¹s a hassle to have to enter the password every time, it¹s probably
well worth it in case it falls into the wrong hands.  It¹s probably not a
good idea to keep contact information on the SIM card and instead store it
on the phone locally since it¹s synchronizing with the Exchange server.

Jay

On 12/1/09 6:26 PM, "Dave Ketcham" <dketcham at northcoastchurch.com> wrote:
We recently had one of our staff's iPhones stolen and it was not password
protected and emails were deleted by the thief.  We currently aren't
implementing any "Mobile Device" security features on our Exchange 2003
server.
 
What mobile device policies do you implement?  Do you require device unlock
passwords? etc?
 
Dave Ketcham
North Coast Church


_______________________________________________
it discuss mailing list: discuss at itdiscuss.org
Mailing List: http://itdiscuss.org/discuss
Internet Relay Chat: irc://irc.freenode.net/citrt

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://optimus.thompsonic.com/pipermail/discuss/attachments/20091203/c9c9e8aa/attachment-0001.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 20867 bytes
Desc: not available
Url : http://optimus.thompsonic.com/pipermail/discuss/attachments/20091203/c9c9e8aa/attachment-0001.jpeg