Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Exchange Activesync Biometric Policy

Posted on 2013-11-19
1
Medium Priority
?
1,634 Views
Last Modified: 2014-12-01
Android has several devices in the pipeline that will offer fingerprint authentication to the device as well as apps and services (think fingerprint for paypal login).  I am wondering if ActiveSync password/passcode policies will work.  We have a passcode requirement, so for example the Android Pattern lock/unlock does not work and users must enter the passcode after entering the pattern to view their email.

The iPhone 5s seems to have skirted the ActiveSync passcode requirement by effectively converting the fingerprint data to the pre-set passcode and passing it along to be checked for policy compliance.

http://technet.microsoft.com/en-us/library/dn282287.aspx

The above mentioned TechNet article describes policies which, if enabled,  allow biometrics to be a valid authentication mechanism.  The base Exchange 2010 Activesync Mailbox Policies do not offer it as an option.  Is it event possible ?

Has anyone attempted/implemented biometrics in relation to ActiveSync?

Thank you for reading.
0
Comment
Question by:collabsvcs
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 37

Accepted Solution

by:
Jamie McKillop earned 2000 total points
ID: 39662384
Hello,

The only way biometrics will work is if it is converted to a passcode, as the iPhone 5S has implemented. Currently, the ActiveSync protocol does not have a mechanism for accepting biometric authentication directly.

You can still use biometrics on your devices but there is no way for ActiveSync to enforce their use and you would need to set your ActiveSync policy to not require a passcode. This would rely on you trusting users to setup the biometrics and could result in some users not having any authentication on their device. There may be third party MDM solutions you could look into that would enforce the use of biometric authentication but MDM solutions are generally quite expensive.

-JJ
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I don't pretend to be an expert at this, but I have found a few things that are useful. I hope that sharing them here will help others, so they will not have to face some rather hard choices. Since I felt this to be a topic of enough importance and…
On September 18, Experts Exchange launched the first installment of the Help Bell, a new feature for Premium Members, Team Accounts, and Qualified Experts. The Help Bell will serve as an additional tool to help teams increase question visibility.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Suggested Courses

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question