SBS2008 - Activesync - Maximum inactivity time lock 15mins

Just put a whole bunch of users onto SBS2008 today and configured their
mobiles.

They really *hate* that their mobile handsets are locking after a short
period of inactivity.

Is it down to this policy setting ?

Activesync - Maximum inactivity time lock 15mins

They either want this lengthening considerably or want it disabling
altogether.

They want to choose when they want to lock their phones.

What's the score regards this ?

They want it to work the same as it did on their old SBS2003 server.

Jim wrote:
> Just put a whole bunch of users onto SBS2008 today and configured their
> mobiles.
>
> They really *hate* that their mobile handsets are locking after a short
> period of inactivity.
>
> Is it down to this policy setting ?
>
> Activesync - Maximum inactivity time lock 15mins
>
> They either want this lengthening considerably or want it disabling
> altogether.
>
> They want to choose when they want to lock their phones.
>
> What's the score regards this ?
>
> They want it to work the same as it did on their old SBS2003 server.
Exchange 2007
Org configuration
Client access
Windows SBS Mobile policy
hack it up to how you want it

Hi Jim,

Thanks for your post and Susan's input.

Yes, you can follow Susan's instruction to modify or create a new Exchange ActiveSync Mailbox policy. The setting you refer to is indeed the "Maximum inactivity time lock"(-
MaxInactivityTimeDeviceLock) and default value is 15 minutes. You can either increase or disable it (set as 'unlimited') by Exchange Management Console or Exchange
Management Shell.

For more information and steps, please refer to below TechNet articles:

Maximum inactivity time lock This setting specifies the length of time that a device can go without user input before it locks.

Understanding Exchange ActiveSync Mailbox Policies
http://technet.microsoft.com/en-us/l.../bb123484.aspx

White Paper: Deploying Exchange ActiveSync in Exchange Server 2007
http://technet.microsoft.com/en-us/l.../bb508904.aspx

Hope this helps.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

================================================== ================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/...i/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/...i/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
================================================== ================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ================
This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ================

Would I be correct in assuming that the default policy as installed *does
not * have a 'Refresh interval (hours)' set ?

And if we have deployed the default policy, including the default 'Maximum
inactivity timeout password lock', to mobiles without the 'Refresh interval'
being set then the mobiles will *never* refresh their policy and we'll be
stuck with the default policy with the default 'Maximum inactivity timeout
password lock' set like this even if we change the 'Refresh interval on the
server', unless we do a factory reset on the mobile and start over ?

This is what I think we have discovered....

We seem to have found an article alluding to this :-(

I cannot find the article at the moment...trying to locate it again..




""Robbin Meng [MSFT]"" <v-> wrote in message
news:...
>
> Hi Jim,
>
> Thanks for your post and Susan's input.
>
> Yes, you can follow Susan's instruction to modify or create a new Exchange
> ActiveSync Mailbox policy. The setting you refer to is indeed the "Maximum
> inactivity time lock"(-
> MaxInactivityTimeDeviceLock) and default value is 15 minutes. You can
> either increase or disable it (set as 'unlimited') by Exchange Management
> Console or Exchange
> Management Shell.
>
> For more information and steps, please refer to below TechNet articles:
>
> Maximum inactivity time lock This setting specifies the length of time
> that a device can go without user input before it locks.
>
> Understanding Exchange ActiveSync Mailbox Policies
> http://technet.microsoft.com/en-us/l.../bb123484.aspx
>
> White Paper: Deploying Exchange ActiveSync in Exchange Server 2007
> http://technet.microsoft.com/en-us/l.../bb508904.aspx
>
> Hope this helps.
>
>
>
> Best regards,
> Robbin Meng(MSFT)
> Microsoft Online Newsgroup Support
>
> ================================================== ================
> Please post your SBS 2008 related questions to the SBS newsgroup on
> Connect website:
> https://connect.microsoft.com/sbs08/...i/default.aspx
>
> Please post your EBS related questions to the EBS newsgroup on Connect
> website:
> https://connect.microsoft.com/ebs08/...i/default.aspx
>
> If you want to use a newsreader other than a web forum to access these
> newsgroups,
> please refer to the following blog to apply NNTP password and configure a
> newsreader:
> http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
> ================================================== ================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> ================================================== ================
>
>
>

Hi Jim,

Thanks for your reply.

Based on my research, the default policy is automatically applied when a new user is created through the Exchange Management Console or the Exchange Management
Shell. You do not have to assign a user to an Exchange ActiveSync mailbox policy. The following table summarizes the policy settings that are used if you do not assign a
user to a policy.

Exchange ActiveSync mailbox policy settings with a standard CAL

Policy refresh interval This setting defines how frequently the device updates the Exchange ActiveSync policy from the server.

Default Exchange ActiveSync settings
=======================================

Policy refresh interval Unlimited
Maximum inactivity time lock 15 minutes

To disable Refresh Interval on the Exchange 2007 server, you can use:

Set-activesyncmailboxpolicy -identity Default -DevicePolicyRefreshInterval unlimited


More information:

Understanding Exchange ActiveSync Mailbox Policies
http://technet.microsoft.com/en-us/l.../bb123484.aspx

Hope this helps.


Sincerely,
Robbin Meng
Microsoft Online Newsgroup Support




Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

================================================== ================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/...i/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/...i/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
================================================== ================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ================
This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ================

Here we are...this is what I was referring to....see below:


http://www.amset.info/exchange/mobile-eas.asp


>Exchange 2007 - Change the ActiveSync policy to check for updates every 7
>days.

>By default, the ActiveSync policy on Exchange 2007 is set never to look for
>an update. That means that after the device has got a policy it will not
> >look for an updated policy. Therefore change the default policy to check
>for updates every seven days before you begin deployment, so that if you
> >change the policy at a later date, the clients will receive that updated
>policy. Failure to set that could mean the handheld device needs to have
>the >Exchange account removed to get the new policy settings.


Is the above information correct ?

Jim.




""Robbin Meng [MSFT]"" <v-> wrote in message
news:...
>
> Hi Jim,
>
> Thanks for your reply.
>
> Based on my research, the default policy is automatically applied when a
> new user is created through the Exchange Management Console or the
> Exchange Management
> Shell. You do not have to assign a user to an Exchange ActiveSync mailbox
> policy. The following table summarizes the policy settings that are used
> if you do not assign a
> user to a policy.
>
> Exchange ActiveSync mailbox policy settings with a standard CAL
>
> Policy refresh interval This setting defines how frequently the device
> updates the Exchange ActiveSync policy from the server.
>
> Default Exchange ActiveSync settings
> =======================================
>
> Policy refresh interval Unlimited
> Maximum inactivity time lock 15 minutes
>
> To disable Refresh Interval on the Exchange 2007 server, you can use:
>
> Set-activesyncmailboxpolicy -identity Default -DevicePolicyRefreshInterval
> unlimited
>
>
> More information:
>
> Understanding Exchange ActiveSync Mailbox Policies
> http://technet.microsoft.com/en-us/l.../bb123484.aspx
>
> Hope this helps.
>
>
> Sincerely,
> Robbin Meng
> Microsoft Online Newsgroup Support
>
>
>
>
> Best regards,
> Robbin Meng(MSFT)
> Microsoft Online Newsgroup Support
>
> ================================================== ================
> Please post your SBS 2008 related questions to the SBS newsgroup on
> Connect website:
> https://connect.microsoft.com/sbs08/...i/default.aspx
>
> Please post your EBS related questions to the EBS newsgroup on Connect
> website:
> https://connect.microsoft.com/ebs08/...i/default.aspx
>
> If you want to use a newsreader other than a web forum to access these
> newsgroups,
> please refer to the following blog to apply NNTP password and configure a
> newsreader:
> http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
> ================================================== ================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> ================================================== ================
>
>
>

Hi Jim,

Thank you for the update information.

Yes, "By default, the ActiveSync policy on Exchange 2007 is set never to look for an update." which means the default value of " Policy refresh interval " is Unlimited as we
said before. You can change it to whatever you want by following the below method:

"organization configuration" node->"client access "->"Microsoft SBS Mobile Mailbox Policy SBS2008" ->"General" tab, find the "Refresh internal (hours)" box. Select this
option to specify how often the policy settings should be refreshed. Refreshing the policy settings sends a fresh copy of the policy down to the device. If this option is
selected, you can specify how often the policy should be refreshed (in hours).

Or you can use the following command in EMS:

Set-activesyncmailboxpolicy -identity <identityname> -DevicePolicyRefreshInterval <X>

Note, here X is X days, not hours.


Exchange ActiveSync Mailbox Policy > General Page
http://technet.microsoft.com/en-us/l.../bb123994.aspx

Security Considerations on the Exchange Server (see "Refresh settings on the device (hours)" part)
http://technet.microsoft.com/en-us/l.../cc182279.aspx

Hope this helps.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

================================================== ================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/...i/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/...i/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
================================================== ================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ================
This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ================