Solved

Exchange Activesync Biometric Policy

Posted on 2013-11-19
1
1,456 Views
Last Modified: 2014-12-01
Android has several devices in the pipeline that will offer fingerprint authentication to the device as well as apps and services (think fingerprint for paypal login).  I am wondering if ActiveSync password/passcode policies will work.  We have a passcode requirement, so for example the Android Pattern lock/unlock does not work and users must enter the passcode after entering the pattern to view their email.

The iPhone 5s seems to have skirted the ActiveSync passcode requirement by effectively converting the fingerprint data to the pre-set passcode and passing it along to be checked for policy compliance.

http://technet.microsoft.com/en-us/library/dn282287.aspx

The above mentioned TechNet article describes policies which, if enabled,  allow biometrics to be a valid authentication mechanism.  The base Exchange 2010 Activesync Mailbox Policies do not offer it as an option.  Is it event possible ?

Has anyone attempted/implemented biometrics in relation to ActiveSync?

Thank you for reading.
0
Comment
Question by:collabsvcs
1 Comment
 
LVL 37

Accepted Solution

by:
Jamie McKillop earned 500 total points
ID: 39662384
Hello,

The only way biometrics will work is if it is converted to a passcode, as the iPhone 5S has implemented. Currently, the ActiveSync protocol does not have a mechanism for accepting biometric authentication directly.

You can still use biometrics on your devices but there is no way for ActiveSync to enforce their use and you would need to set your ActiveSync policy to not require a passcode. This would rely on you trusting users to setup the biometrics and could result in some users not having any authentication on their device. There may be third party MDM solutions you could look into that would enforce the use of biometric authentication but MDM solutions are generally quite expensive.

-JJ
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Samsung S5 - Bricked?? 5 49
Unified EndPoint Management 1 26
o365 Buy vs. Rent break-even: lifespan of office 2016? 6 37
Do Not Reply on Exchange 2010 1 13
Email is way too noisy, prone to hiding the important stuff, and really becoming unreliable for critical/timely communications. There are better ways to communicate.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question