6 ms·

The best feature about Acompli is that when your corporate IT goon tries to remote wipe your device from the Exchange server, they can only wipe your email, not

by orand 12y ago

The best feature about Acompli is that when your corporate IT goon tries to remote wipe your device from the Exchange server, they can only wipe your email, not your entire device. Most people don't realize that by using the default iOS and Android mail clients to connect to an Exchange server, they're implicitly giving it the ability to remotely wipe their entire mobile device.

arthurcolle 12y ago
No way! you serious? Source?
- benjarrell 12y ago
  Any Exchange admin can confirm that. It is interesting the array of devices people add to their 'work' email.
  - arthurcolle 12y ago
    how is that legal?
    - chrisBob 12y ago
      How is it illegal to give someone permission to remote wipe your device?
    - pc86 12y ago
      There is no question of legality, you are granting the user that access/ability by connecting to Exchange.
      - Osmium 12y ago
        > you are granting the user that access/ability by connecting to Exchange Does iOS present a warning to this effect when you add an Exchange account? If not, they should. I have an Exchange account set up from my university and don't recall ever seeing anything. Also, didn't Gmail used to have Exchange support? If this is true, does that mean Google had the ability to remotely wipe any iOS device that was using Gmail through Exchange?
        bentcorner 12y ago
        It's an exchange server thing and probably part of the sync protocol used. You'll see a warning when you set up mail for the first time. I think if the server has this policy you are forced to add a pin lock to your device. If you don't remember seeing anything, then AFAIK your device cannot be wiped.
        MichaelGG 12y ago
        The administrator can set all sorts of policies, like if a PIN is required, or a password, length, etc. It's not a bad thing and can be used to potentially limit some damage. Of course, requiring a fully encrypted device with strong lockout policies that are hardware enforced (TPM) is the best. I've had my phone stolen and it was pretty nice to remote nuke it. IIRC, Google offers this same feature if you connect it to Device Manager.
spinchange 12y ago
I wish there were more publicized about this. I was setting up my wife's exchange-based work email with the default mail app in Android and was prompted with some really crazy permissions that were to the basic effect you mention. She decided that she didn't want her corporate office to have that much power over her own personal device just for the added convenience of being able to check work email on it. I'm going to mention this app to her and give it a try instead.
- sp_nster 12y ago
  Yep. Probably a MDM application like MobileIron or Airwatch. Your wife made a decision most people miss because they are so used to skipping to yes. And wouldn't it suck if your IT department wiped your entire personal device including those vacation pictures of your recently deceased grandma. This happens way more often then you know. This total control decision is why a container approach (give power to wipe what is the container only) to enabling corporate data is one I favor.
  - ams6110 12y ago
    You're as likely if not more so to lose those vacation pictures when your phone falls into the toilet and shorts out. If it's important, back it up.
- jacalata 12y ago
  There are plenty of other apps available already - TouchDown [0] and Nine [1] are the two I've heard the most positive reviews about (I don't know anyone who uses Accompli). [0]: http://www.techrepublic.com/blog/smartphones/review-touchdown-mail-client-for-android/ http://www.techrepublic.com/blog/smartphones/review-touchdow... [1]: http://www.androidpolice.com/2014/02/12/hands-on-nine-is-a-clean-and-attractive-email-client-aimed-at-exchange-users-and-very-few-others/ http://www.androidpolice.com/2014/02/12/hands-on-nine-is-a-c...]
- sandymcm 12y ago
  If your company has a BYOD policy, it should include the FYI that IT might wipe your device if you quit or get fired. That's the bad news. The good news is this feature of Exchange also gives you the ability to remote wipe your personal device from Outlook Web Access (i.e. Exchange webmail) if it gets lost or stolen.
valevk 12y ago
And that's the reason I still fight everyday with non-mobile owa interface...
- tracker1 12y ago
  I just favor IMAP...
y0ghur7_xxx 12y ago
That's why I use davmail¹ -> owa to access my corporate mail over imap instead of exchange directly. ¹http://davmail.sourceforge.net/ http://davmail.sourceforge.net/
what_ever 12y ago
Does it support notifications for emails which go into a folder? I have seen only 9folders supporting it till date.
Osmium 12y ago
> Most people don't realize that by using the default iOS and Android mail clients to connect to an Exchange server, they're implicitly giving it the ability to remotely wipe their entire mobile device. Is there a way to disable this, e.g. using Apple Configurator or otherwise?
grinich 12y ago
Just to be a bit more clear-- the difference here is with device provisioning using Mobile Device Management (MDM) services, not necessarily the default OS apps. The user enrollment process doesn't necessarily require giving permissions beyond mail/contacts/calendar access. But many organizations take advantage of the opportunity to use pre-baked profiles which restrict behaviors, auto-configure VPN with client certs, activate features like remote wipe, etc. We dealt with a lot of this when building the ActiveSync module for the Inbox[1] sync engine, which works with all Exchange servers and offers a modern REST API. (ie: like Twilio/Stripe for email) https://www.inboxapp.com/ https://www.inboxapp.com/ [1] Google stole our name last month. :(

by orand 12y ago

arthurcolle 12y ago

No way! you serious? Source?

benjarrell 12y ago
Any Exchange admin can confirm that. It is interesting the array of devices people add to their 'work' email.
- arthurcolle 12y ago
  how is that legal?
  - chrisBob 12y ago
    How is it illegal to give someone permission to remote wipe your device?
  - pc86 12y ago
    There is no question of legality, you are granting the user that access/ability by connecting to Exchange.
    - Osmium 12y ago
      > you are granting the user that access/ability by connecting to Exchange Does iOS present a warning to this effect when you add an Exchange account? If not, they should. I have an Exchange account set up from my university and don't recall ever seeing anything. Also, didn't Gmail used to have Exchange support? If this is true, does that mean Google had the ability to remotely wipe any iOS device that was using Gmail through Exchange?
      - bentcorner 12y ago
        It's an exchange server thing and probably part of the sync protocol used. You'll see a warning when you set up mail for the first time. I think if the server has this policy you are forced to add a pin lock to your device. If you don't remember seeing anything, then AFAIK your device cannot be wiped.
        MichaelGG 12y ago
        The administrator can set all sorts of policies, like if a PIN is required, or a password, length, etc. It's not a bad thing and can be used to potentially limit some damage. Of course, requiring a fully encrypted device with strong lockout policies that are hardware enforced (TPM) is the best. I've had my phone stolen and it was pretty nice to remote nuke it. IIRC, Google offers this same feature if you connect it to Device Manager.

spinchange 12y ago

I wish there were more publicized about this. I was setting up my wife's exchange-based work email with the default mail app in Android and was prompted with some really crazy permissions that were to the basic effect you mention. She decided that she didn't want her corporate office to have that much power over her own personal device just for the added convenience of being able to check work email on it. I'm going to mention this app to her and give it a try instead.

sp_nster 12y ago
Yep. Probably a MDM application like MobileIron or Airwatch. Your wife made a decision most people miss because they are so used to skipping to yes. And wouldn't it suck if your IT department wiped your entire personal device including those vacation pictures of your recently deceased grandma. This happens way more often then you know. This total control decision is why a container approach (give power to wipe what is the container only) to enabling corporate data is one I favor.
- ams6110 12y ago
  You're as likely if not more so to lose those vacation pictures when your phone falls into the toilet and shorts out. If it's important, back it up.
jacalata 12y ago
There are plenty of other apps available already - TouchDown [0] and Nine [1] are the two I've heard the most positive reviews about (I don't know anyone who uses Accompli). [0]: http://www.techrepublic.com/blog/smartphones/review-touchdown-mail-client-for-android/ http://www.techrepublic.com/blog/smartphones/review-touchdow... [1]: http://www.androidpolice.com/2014/02/12/hands-on-nine-is-a-clean-and-attractive-email-client-aimed-at-exchange-users-and-very-few-others/ http://www.androidpolice.com/2014/02/12/hands-on-nine-is-a-c...]
sandymcm 12y ago
If your company has a BYOD policy, it should include the FYI that IT might wipe your device if you quit or get fired. That's the bad news. The good news is this feature of Exchange also gives you the ability to remote wipe your personal device from Outlook Web Access (i.e. Exchange webmail) if it gets lost or stolen.

valevk 12y ago

And that's the reason I still fight everyday with non-mobile owa interface...

tracker1 12y ago
I just favor IMAP...

y0ghur7_xxx 12y ago

That's why I use davmail¹ -> owa to access my corporate mail over imap instead of exchange directly. ¹http://davmail.sourceforge.net/ http://davmail.sourceforge.net/

what_ever 12y ago

Does it support notifications for emails which go into a folder? I have seen only 9folders supporting it till date.

Osmium 12y ago

> Most people don't realize that by using the default iOS and Android mail clients to connect to an Exchange server, they're implicitly giving it the ability to remotely wipe their entire mobile device. Is there a way to disable this, e.g. using Apple Configurator or otherwise?

grinich 12y ago

Just to be a bit more clear-- the difference here is with device provisioning using Mobile Device Management (MDM) services, not necessarily the default OS apps. The user enrollment process doesn't necessarily require giving permissions beyond mail/contacts/calendar access. But many organizations take advantage of the opportunity to use pre-baked profiles which restrict behaviors, auto-configure VPN with client certs, activate features like remote wipe, etc. We dealt with a lot of this when building the ActiveSync module for the Inbox[1] sync engine, which works with all Exchange servers and offers a modern REST API. (ie: like Twilio/Stripe for email) https://www.inboxapp.com/ https://www.inboxapp.com/ [1] Google stole our name last month. :(