Disable forced remote wipe, while still enforcing PIN unlock code

Take your Zimbra with you!
PhD
Advanced member
Advanced member
Posts: 68
Joined: Sat Sep 13, 2014 2:03 am

Disable forced remote wipe, while still enforcing PIN unlock code

Postby PhD » Sun Jun 19, 2011 8:35 am

Hi there,
As the per the subject - is there any way to disable wiping the mobile, while still enforcing the use of a pin number?
We're allowing users to have their mobiles provisioned with our server, and one of the security provisions (as mandated by our CEO) is that the enforcing of PIN's is adhered to.
This is all good, but the feature of a forced local wipe when the pin code is enforced is something that is causing a bit of a stir.
Ive read a few other articles/posts - about setting the max number of pin tries to 0, and/or to something ridiculously huge, and other information saying only valid numbers are between 4 and 16...
Without wanting to "try" a setting of 0 or something larger to "see what happens" is there any way around this? Or does someone actually know what happens if you set it to 0?
I looked for any existing bugs submitted for this but couldnt see one.
Cheers,

PHD


12237Dirk
Outstanding Member
Outstanding Member
Posts: 902
Joined: Fri Sep 12, 2014 10:10 pm

Disable forced remote wipe, while still enforcing PIN unlock code

Postby 12237Dirk » Mon Jun 20, 2011 7:28 am

To which type of device to you refer?

Setting the value to -- in IPCU for iOS 4+ will leave the remote wipe under user control, for instance.
PhD
Advanced member
Advanced member
Posts: 68
Joined: Sat Sep 13, 2014 2:03 am

Disable forced remote wipe, while still enforcing PIN unlock code

Postby PhD » Mon Jun 20, 2011 8:16 am

sorry? set the value to --? 0? where....

so, if theres a setting in the iphone config util, what happens then when the pin unlock failed limit is reached - does a provisioned iphone overrule the zimbra settings?
12237Dirk
Outstanding Member
Outstanding Member
Posts: 902
Joined: Fri Sep 12, 2014 10:10 pm

Disable forced remote wipe, while still enforcing PIN unlock code

Postby 12237Dirk » Mon Jun 20, 2011 8:26 am

As per the attached image.

Dont set it at all in zimbra, let the configuration profile do the work.
That said of course, an automatic wipe of the phone after multiple incorrect pin attempts is a good thing, I dont know why you'd want to disable it.

Clipboard01.png

PhD
Advanced member
Advanced member
Posts: 68
Joined: Sat Sep 13, 2014 2:03 am

Disable forced remote wipe, while still enforcing PIN unlock code

Postby PhD » Mon Jun 20, 2011 8:48 am

Ah I see, downside is if the user has an android or other smartphone that the policy can be enforced by zimbra. Force pin=good, forced local wipe = bad if you have ever given your phone to a kid for 10 minutes while locked, only to find it wiped when you get it back.. So I guess I can use your method for our iPhone users. But the other phones is still an issue. The Max number of failed attempts needs allowance to be set to 0 in zimbra, or really high:(
12237Dirk
Outstanding Member
Outstanding Member
Posts: 902
Joined: Fri Sep 12, 2014 10:10 pm

Disable forced remote wipe, while still enforcing PIN unlock code

Postby 12237Dirk » Mon Jun 20, 2011 9:08 am

Good point, I'd suggest not having android phones....... or kids.
Zimbra does support a value of zero for pin attempts end if you enable the enforce policy option it will send that to the device. How the device interprets that value may be up for grabs by each version of the android OS though. I can see it being anything other than 'dont do it' rather than 'do it right away' but I suggest testing it on a few handsets if possible.
ewilen
Elite member
Elite member
Posts: 1429
Joined: Fri Sep 12, 2014 11:34 pm

Disable forced remote wipe, while still enforcing PIN unlock code

Postby ewilen » Sat Aug 13, 2011 12:05 pm

Please consider voting for Bug 50270 - RFE: allow policy to force password without imposing time-based lockout or wipe after N failed PIN inputs
tobias.dinse
Posts: 46
Joined: Sat Sep 13, 2014 1:44 am

Disable forced remote wipe, while still enforcing PIN unlock code

Postby tobias.dinse » Thu Jan 19, 2012 4:54 am

Hi,
yesterday we integrated a iphone from our customer to zimbra. After that we cant disable the Code. I have installed the Configuration Utility but I cant find anything about disable code. How I can disable that? I cant use the function "disable code" on the Iphone because its grey and cant be used :(
amatteo78
Posts: 3
Joined: Fri Sep 12, 2014 11:50 pm

Disable forced remote wipe, while still enforcing PIN unlock code

Postby amatteo78 » Sat Apr 27, 2013 12:11 pm

Hi,
have you found solution, also on my iphone, after setup zimbra account as exchange, i can't disable code.

Thanks
M.

Return to “Mobility”

Who is online

Users browsing this forum: No registered users and 2 guests