Solved

Exchange Activesync Biometric Policy

Posted on 2013-11-19
1
1,413 Views
Last Modified: 2014-12-01
Android has several devices in the pipeline that will offer fingerprint authentication to the device as well as apps and services (think fingerprint for paypal login).  I am wondering if ActiveSync password/passcode policies will work.  We have a passcode requirement, so for example the Android Pattern lock/unlock does not work and users must enter the passcode after entering the pattern to view their email.

The iPhone 5s seems to have skirted the ActiveSync passcode requirement by effectively converting the fingerprint data to the pre-set passcode and passing it along to be checked for policy compliance.

http://technet.microsoft.com/en-us/library/dn282287.aspx

The above mentioned TechNet article describes policies which, if enabled,  allow biometrics to be a valid authentication mechanism.  The base Exchange 2010 Activesync Mailbox Policies do not offer it as an option.  Is it event possible ?

Has anyone attempted/implemented biometrics in relation to ActiveSync?

Thank you for reading.
0
Comment
Question by:collabsvcs
1 Comment
 
LVL 37

Accepted Solution

by:
Jamie McKillop earned 500 total points
ID: 39662384
Hello,

The only way biometrics will work is if it is converted to a passcode, as the iPhone 5S has implemented. Currently, the ActiveSync protocol does not have a mechanism for accepting biometric authentication directly.

You can still use biometrics on your devices but there is no way for ActiveSync to enforce their use and you would need to set your ActiveSync policy to not require a passcode. This would rely on you trusting users to setup the biometrics and could result in some users not having any authentication on their device. There may be third party MDM solutions you could look into that would enforce the use of biometric authentication but MDM solutions are generally quite expensive.

-JJ
0

Featured Post

Do email signature updates give you a headache?

Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Join & Write a Comment

Utilizing an array to gracefully append to a list of EmailAddresses
Resolve DNS query failed errors for Exchange
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
This video is in connection to the article "The case of a missing mobile phone (https://www.experts-exchange.com/articles/28474/The-Case-of-a-Missing-Mobile-Phone.html)". It will help one to understand clearly the steps to track a lost android phone.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now