[41154] in Resnet-Forum
Re: Exchange and ActiveSync
daemon@ATHENA.MIT.EDU (Christina Webster)
Thu Apr 14 16:02:10 2016
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=001a11c2e55818b92b0530775ebd
Message-ID: <CAGcptaRj_85LhdQHNvrzZaQuKe_oo=fCDQ=m5OcDgdFMAVBbcw@mail.gmail.com>
Date: Thu, 14 Apr 2016 16:01:32 -0400
Reply-To: Resnet Forum <RESNET-L@LISTSERV.ND.EDU>
From: Christina Webster <cwebste1@swarthmore.edu>
To: RESNET-L@LISTSERV.ND.EDU
--001a11c2e55818b92b0530775ebd
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Hi Sandy,
How did your clients change their passwords before?
Our clients have been changing their passwords via a Fischer web portal for
a few years - they change them every 180 days. For us, it was a matter of
educating our clients to update all their devices after they change their
passwords - and changing the number of failed attempts that lead to an
account lock. We use the same account credentials for wifi, so turning it
off and then back on will usually prompt for new password, and then
updating the saved password in mail settings. For web browsers, you have
the option of: (1) trying to train people to not save passwords, so that
they always have to log in, (2) updating the saved password in all web
browsers, and/or (3) completely clearing the web cache of everything, for
all browsers.
The one place our students usually miss is Windows Credential Manager,
which is where our networked printers are saved.
I also advise clients to turn off all other devices so that they can update
one at a time - when they finish updating saved passwords on one, then they
turn on the next one to update.
Good Luck!
Christina Webster
Technical Support Specialist
Information Technology Services
Swarthmore College
500 College Avenue
Swarthmore, PA 19081
(610) 957-6155
Web Site: http://www.swarthmore.edu/its.xml
*Swarthmore College ITS staff will never ask you for your password,
including by email. Please keep your passwords private to protect yourself
and the security of our network.*
On Thu, Apr 14, 2016 at 12:26 PM, Sandy Verhoef <VERHOEFS@central.edu>
wrote:
> We are looking for a reason/solution to the following problem:
>
>
>
> Our campus uses an Exchange server, and we allow users to connect their
> mobile devices to Exchange to receive their email, and Active Directory t=
o
> authenticate. In the past few months, we are getting users locked out of
> their accounts, and we have traced it back to their mobile devices using
> ActiveSync. It =E2=80=98looks=E2=80=99 like their mobile devices are usin=
g old passwords.
> We know this because if the user reenters the current password, then the
> =E2=80=98locked=E2=80=99 issues stop. SO, are there cached passwords that=
are being used,
> and if so, where are these stored. We are seeing this on Android devices,
> and iPads and iPhones. HOWEVER, not all users are affected.
>
>
> Other items: Around the same time these items started, we implemented a
> self serve password management program called PortalGuard. Also, we start=
ed
> work on implementing Office 365.
>
>
>
> Thank you to any that can offer ideas or solutions!
>
>
>
> *SANDRA* *VERHOEF*
> Director of Computer Support Services | Central College
> 812 University Street |Campus Box 5500 |Pella, Iowa 50219
>
> verhoefs@central.edu |www.central.edu
>
> Office: 641.628.7692|Fax: 641.628.5316
>
>
> ___________________________________________________ You are subscribed to
> the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--001a11c2e55818b92b0530775ebd
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Hi Sandy,<div><br></div><div>How did your clients change t=
heir passwords before?</div><div><br></div><div>Our clients have been chang=
ing their passwords via a Fischer web portal for a few years - they change =
them every 180 days.=C2=A0 For us, it was a matter of educating our clients=
to update all their devices after they change their passwords - and changi=
ng the number of failed attempts that lead to an account lock.=C2=A0 We use=
the same account credentials for wifi, so turning it off and then back on =
will usually prompt for new password, and then updating the saved password =
in mail settings.=C2=A0 For web browsers, you have the option of: (1) tryin=
g to train people to not save passwords, so that they always have to log in=
, (2) updating the saved password in all web browsers, and/or (3) completel=
y clearing the web cache of everything, for all browsers.</div><div><br></d=
iv><div>The one place our students usually miss is Windows Credential Manag=
er, which is where our networked printers are saved.</div><div><br></div><d=
iv>I also advise clients to turn off all other devices so that they can upd=
ate one at a time - when they finish updating saved passwords on one, then =
they turn on the next one to update. =C2=A0</div><div><br></div><div>Good L=
uck!</div><div class=3D"gmail_extra"><br clear=3D"all"><div><div class=3D"g=
mail_signature"><div dir=3D"ltr"><div><span style=3D"font-family:comic sans=
ms,sans-serif"><span style=3D"color:#000066;font-size:small" color=3D"#000=
066" size=3D"2"><span style=3D"color:#000066;font-size:small" color=3D"#000=
066" size=3D"2"><span style=3D"color:#000099" color=3D"#000099">Christina W=
ebster<br><span style=3D"font-size:small" size=3D"2">Technical Support Spec=
ialist</span><br>I<span style=3D"font-size:small" size=3D"2">nformation <sp=
an style=3D"font-size:small" size=3D"2">T</span>echnology <span style=3D"fo=
nt-size:small" size=3D"2">S</span>ervices</span><br>Swarthmore College<br><=
span style=3D"font-size:small" size=3D"2">500 College <span style=3D"font-s=
ize:small" size=3D"2">Avenue<br><span style=3D"font-size:small" size=3D"2">=
Swarthmore, PA 19081</span><br></span>(610) 957-6155</span><br>Web Site: <a=
href=3D"http://www.swarthmore.edu/its.xml" target=3D"_blank">http://www.sw=
arthmore.edu/its.xml</a><br></span></span></span></span></div><div><span st=
yle=3D"font-family:comic sans ms,sans-serif"><br></span></div><div><b><font=
size=3D"2"><span style=3D"font-family:comic sans ms,sans-serif"><span size=
=3D"2"><span size=3D"3"><span style=3D"color:rgb(153,0,0)" color=3D"#990000=
"><i>Swarthmore
College ITS staff will never ask you for your password, including by=20
email. Please keep your passwords private to protect yourself and the=20
security of our network.</i></span></span></span></span></font></b></div></=
div></div></div>
<br><div class=3D"gmail_quote">On Thu, Apr 14, 2016 at 12:26 PM, Sandy Verh=
oef <span dir=3D"ltr"><<a href=3D"mailto:VERHOEFS@central.edu" target=3D=
"_blank">VERHOEFS@central.edu</a>></span> wrote:<br><blockquote class=3D=
"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding=
-left:1ex">
<div lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div>
<p class=3D"MsoNormal">We are looking for a reason/solution to the followin=
g problem:<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Our campus uses an Exchange server, and we allow use=
rs to connect their mobile devices to Exchange to receive their email, and =
Active Directory to authenticate. In the past few months, we are getting us=
ers locked out of their accounts,
and we have traced it back to their mobile devices using ActiveSync. It =
=E2=80=98looks=E2=80=99 like their mobile devices are using old passwords. =
We know this because if the user reenters the current password, then the =
=E2=80=98locked=E2=80=99 issues stop. SO, are there cached passwords
that are being used, and if so, where are these stored. We are seeing this=
on Android devices, and iPads and iPhones. HOWEVER, not all users are affe=
cted.<u></u><u></u></p>
<p class=3D"MsoNormal"><br>
Other items: Around the same time these items started, we implemented a sel=
f serve password management program called PortalGuard. Also, we started wo=
rk on implementing Office 365.
<u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal">Thank you to any that can offer ideas or solutions!<=
u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:14.0pt;color:#c00000">SA=
NDRA</span></b><b><span style=3D"font-size:14.0pt;color:red">
</span></b><b><span style=3D"font-size:14.0pt;color:gray">VERHOEF</span></b=
><span style=3D"color:gray"><br>
Director of Computer Support Services </span><span style=3D"color:#7f7f7f">=
| </span>
<span style=3D"color:gray">Central College<br>
812 University Street </span><span style=3D"color:#7f7f7f">|</span><span st=
yle=3D"color:gray">Campus Box 5500</span><span style=3D"color:#7f7f7f"> |</=
span><span style=3D"color:gray">Pella, Iowa 50219<br>
<br>
</span><span style=3D"color:#2e74b5"><a href=3D"mailto:verhoefs@central.edu=
" target=3D"_blank">verhoefs@central.edu</a> |<a href=3D"http://www.central=
.edu/" target=3D"_blank"><span style=3D"color:#2e74b5">www.central.edu</spa=
n></a><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"color:gray">Office: <a href=3D"tel:64=
1.628.7692" value=3D"+16416287692" target=3D"_blank">641.628.7692</a></span=
><span style=3D"color:#7f7f7f">|</span><span style=3D"color:gray">Fax: <a h=
ref=3D"tel:641.628.5316" value=3D"+16416285316" target=3D"_blank">641.628.5=
316</a><br>
<br>
</span><u></u><u></u></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
</div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
</p></blockquote></div><br></div></div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
--001a11c2e55818b92b0530775ebd--
