Re: Is anyone forcing active sync controls on their smart phone users?

[Matthew Giannetto <MGiannetto () MC3 EDU>]

We've been discussing this issue over the past few months.  We've been planning to only support ActiveSync-compatible 
devices, including iPhone.  One of the big problems we found was that BlackBerry users were using OWA to sync their 
email.  We have a solution to get around that, but this speaks to the issue that "users will always find a way."

The long term goal is to have users sign off before they connect to Exchange, allow us to push ActiveSync policies to 
their smart phones.  This way we can enforce PINs, locks, encryption, remote wipe, etc.  That's still down the road, 
though.

I'm interested to hear if anyone is doing it now as well.

Thanks,

Matt Giannetto
Manager of IT Security
Montgomery County Community College
mgiannetto () mc3 edu | (215) 619-7442

From: John Rasmussen [mailto:rasmusse () OHSU EDU]
Sent: Thursday, April 22, 2010 5:32 PM
Subject: Is anyone forcing active sync controls on their smart phone users?

We are currently considering our options for securing information on smartphones that include iPhones.

Is anyone using the Active Sync controls in Exchange to push security controls to these devices?
Some controls would include an automated timeout, required pin or password, and enabling remote wipe for lost or stolen 
devices.

Are these controls applied to all university owned devices ?  Do controls apply to personally owned devices?

We are an academic medical center but I am very interested to find out what other colleges and universities are doing.
Thanks
John

John Rasmussen
Information Security Officer & Associate Privacy Officer
OHSU Integrity Office
4-8480


________________________________
Montgomery County Community College is proud to be
the #1 ranked technology-savvy community college in the nation,
as determined by the Center for Digital Education and Converge magazine.