Applies to: Exchange Server 2007 SP3, Exchange Server
2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-08-27
This topic explains how to use the Exchange Management Console or the Exchange Management Shell to configure device password locking. You can require users to lock their devices by using a password. You can also enforce a variety of policy settings that guide the usage of device passwords. The settings that you can configure include the following:
- Enforcing an alphanumeric password.
- Enabling password recovery.
- Requiring encryption on the mobile device.
- Specifying a minimum password length.
- Specifying a period of inactivity before you must reenter a
device password. This is known as device password locking.
This topic explains how to configure the device password locking setting.
Before You Begin
To perform this procedure, the account you use must be delegated the Exchange Recipient Administrator role.
For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.
Also before you perform the following procedures, make sure that you have created an Exchange ActiveSync Mailbox policy. For information about how to create an Exchange ActiveSync Mailbox policy, see How to Create an Exchange ActiveSync Mailbox Policy.
Procedure
To use the Exchange Management
Console to configure device password locking
-
In the console tree, expand Organization Configuration, and then click Client Access.
-
In the work pane, right-click an existing mobile mailbox policy, and then click Properties.
-
Click the Password tab.
-
Click to select the Require password check box.
-
Click to select the Time without user input before password must be entered (in seconds) check box.
-
Enter the inactivity time-out value in seconds.
-
Click OK.
To use the Exchange Management
Shell to configure device password locking
-
Run the following command:
Copy CodeSet-ActiveSyncMailboxPolicy -Identity "PolicyName" -DevicePasswordEnabled: $true -MaxInactivityTimeDeviceLock: 00:15:00
For more information about syntax and parameters, see Set-ActiveSyncMailboxPolicy.
For More Information
For more information about Exchange ActiveSync Mailbox policies, see Understanding Exchange ActiveSync Mailbox Policies.