Skip to Content

Free TUAW iPhone app -- try it now!
AOL Tech

exchange posts

Filed under: Enterprise, iPhone, iPod touch

iPhone OS 3.1 now enforces Exchange encryption policy, may block pre-3GS iPhones

The Apple Support forums are a'buzz with reports of several users upgrading to iPhone OS 3.1 and discovering a new "feature" which was not available previously. As mentioned in our comments, after upgrading to 3.1, some original iPhone and iPhone 3G owners with Exchange accounts are having trouble accessing their email. Apparently the server-side encryption policy option for mobile devices (only available as of Exchange 2007 SP1) is now being appropriately enforced.

This is not affecting owners of the iPhone 3GS, due to the newer device's support for Exchange encryption. Prior to iPhone OS 3.1 the encryption policy was ignored for all models. Now that 3.1 is available, users are seeing this policy being correctly enforced and older iPhones without encryption support are left without access to Exchange services.

I have yet to find any reports of issues with the iPod touch, but I suspect that it will also be affected by this software change. We're awaiting confirmation from Apple on whether this will impact the newly announced iPod touch models as well.

While many are reacting to this issue as though it's a bug, and are reporting it as such, the reality is that the Exchange encryption requirement is a feature and the fact that it was not being correctly enforced was actually a security hole. IT administrators with Exchange 2007 SP1 servers and iPhone clients are probably going to be fielding an above-average level of incoming questions, but at least they can rest easy knowing that Exchange encryption is now working correctly. Cold comfort for their users, though.

If you are running into this issue, the straightforward (though pricey) solution is to upgrade to the iPhone 3GS; or consider bribing your IT guy with Red Bull so he will disable the encryption requirement for mobile devices. But we want to hear from you; are you using an Exchange account? Can you still access it following the upgrade to 3.1? Which device are you using, iPhone or iPod touch; 3G or 3GS? Is this a little thing that means a lot to you from a security perspective or have you been left high and dry without access to critical email?

Update: MacRumors points out that Apple has now covered this situation in a new KB article.

[Via Broadband Reports]

Filed under: Enterprise, Software, Switchers, Odds and ends, Snow Leopard

Tired of those winmail.dat files? Letter Opener 3 can help

If there's anything that drives Mac users into a frenzy, it's those winmail.dat files that can show up in Apple Mail when they receive email from colleagues or friends using Microsoft Outlook. Winmail.dat files can either files that are attached to the message, or they can contain information such as embedded documents, meeting requests, address card info, notes, or forwarded messages sent as attachments. Regardless of the content, they're just plain annoying on the Mac.

restoroot, a Mac development firm out of Millstatt, Austria, has the solution for you. Letter Opener 3 (€19.99 or €9.99 upgrade for version 2.0 owners) is an Apple Mail plugin that can ease winmail.dat frustrations. Letter Opener has been recently updated for compatibility with Mac OS X 10.6 Snow Leopard, and it can:
  • Convert Outlook schedules, appointments, and tasks to iCal
  • Convert Outlook contacts to Address Book
  • Open nested messages in winmail.dat files
  • Translate notes from Outlook
  • Let you read delivery status and read receipt messages
Especially for Mac users who are the "lone rangers" in a Windows environment, Letter Opener 3 can make life a little bit smoother. It's great to see that this plugin has been made compatible with Snow Leopard.

Filed under: Enterprise, First Look, Snow Leopard

Snow Leopard and Microsoft Exchange first impressions

One of the things touted in this latest incarnation of Mac OSX was its ability to work with Microsoft Exchange using Apple's Mail, Address Book and iCal applications. Well, I'm happy to report that Snow Leopard does, in fact, work pretty well with Exchange 2007.

Granted, this is only after limited testing, and it doesn't, as yet, work as well as Outlook for Windows, but it is a step in the right direction. One thing to consider before we go on is the fact that Snow Leopard will only play nicely with Exchange 2007 so if you don't have it or are not planning on having it, these new Exchange features in Snow Leopard won't work for you. You'll have the same access to Exchange 2003 from Mail (via IMAP) and Address Book that you did under Leopard.

That said, these new features of Snow Leopard offer a nice alternative to using the previous version of Entourage or the new Web Services Edition. Fortunately, if you are running Snow Leopard and Exchange 2007, setup could not be easier. All you need to do is launch Apple's Mail and select "Preferences" from the "Mail" menu.

Read on for more...

Continue readingSnow Leopard and Microsoft Exchange first impressions

Filed under: Enterprise, iPhone

Inside iPhone 3.0: Fix too-strict passcode lock settings for Exchange users

If your iPhone was connected to an Exchange server for email, contact or calendar synchronization prior to your upgrade to the 3.0 software, you may have run into the same problem that was bugging me for a day or so: the timeout on the passcode lock gets set to "Immediate," forcing you to enter the code almost every time you pick up the phone. Secure, sure, but very annoying. Going to the usual settings location to adjust the timeout shows no choices other than the insta-lock; what to do?

A thread on the Apple discussions boards points to the answer. Since the ActiveSync link to the Exchange server controls some security policies on the phone, you need to refresh those controls; the easiest way to do that, short of deleting and recreating the Exchange account, is to turn off all three sync modes and the Push setting. Once that's done, you can go back to the passcode lock screen and disable the lock or adjust the timeout. Put your sync settings back the way they were and your changes to the passcode config should remain in place.

While this is an annoying quirk, it's not all gripes and grimaces in the Exchange support department. At long last, users of Exchange calendars can send meeting invitations (hallelujah!); Exchange 2007 users can even view the reply status of attendees. Users can specify additional mail folders for sync, and Exchange 2007 users can search server-side mail from their devices.

For a full rundown on the enterprise-friendly features of iPhone OS 3.0, check out the Enterprise Integration guide via Apple's enterprise features page.

Thanks to everyone who sent this in.

Filed under: Software, Security

Government / Military Mac users get PIV single sign-on from Thursby

Thursby Software is a longtime Mac development firm (since 1986) that has always had a mission: integrating Macs as full players in mixed-OS environments. While Mac OS X has gone a long way toward improving the situation of Mac users in predominantly Microsoft environments, there are still situations where third-party software may be required. Thursby's ADmitMac line of software is specifically designed to ease Mac integration into Microsoft Active Directory (AD) environments.

Thursby's ADmitMac for PIV integrates US Government FIPS 201 Personal Identity Verification (PIV) with Macs. ADPIV, as the product is known, allows single sign-on with a PIV card. It verifies the PIV card against a centralized authority, obtains Kerberos tickets using PIV certificates and then makes those tickets available to Kerberized applications, and securely locks the Mac upon removal of the PIV card.

ADPIV also allows password-free access to Exchange servers by providing authentication to those servers. ADPIV is currently available at the introductory price of US$149, with discounts available for larger quantities.

Filed under: Features, Troubleshooting, Ask TUAW

Ask TUAW: Preventing automounting, Exchange support, printing selections, and more

For this edition of Ask TUAW we've got questions about preventing an external partition from automounting, printing text selections, getting email from an Exchange server, syncing the Address Book with Google contacts, and more.

As always, your suggestions are welcome. Questions for next week should be left in the comments. When asking a question please include which machine you're running and which version of Mac OS X (we'll assume you're running Leopard on an Intel Mac if you don't specify). And now, on to the questions!

Continue readingAsk TUAW: Preventing automounting, Exchange support, printing selections, and more

Filed under: Rumors, Leopard, Snow Leopard

AI: 'Snow Leopard' to include rewritten Finder

AppleInsider claims that Mac OS X 10.6 Snow Leopard will feature (among other things) a Finder re-written entirely in Cocoa. The Finder has remained Carbon-based for the entire history of Mac OS X so far, but the long journey from those frameworks towards Cocoa seems to be reaching its end for Apple's homegrown apps.

Test versions of the new Finder are being seeded to select developers in revisions of Snow Leopard with build numbers beginning with 10A. AppleInsider notes that seeds could be more broadly available to the developer community as early as tomorrow.

As Ars Technica noted in June, Apple apps will also apparently come "wrapped" in Cocoa. Further deprecation of some Carbon APIs seems likely as well, but it's unclear yet as to how Snow Leopard's support for Carbon apps will differ from plain-ol' Leopard's.

In addition to the Finder, improvements to support for Microsoft Exchange are expected for Mail, iCal, and Address Book. Also included is a new option for booting a Mac called ImageBoot. ImageBoot takes NetBoot a step further, allowing administrators to boot a workstation into Mac OS X directly from an image on a local disk.

Filed under: iPod Family, Software Update, iPhone, App Store, SDK

iPhone 2.0 firmware goes golden master

Gizmodo and GearLive are reporting that the iPhone 2.0 firmware will go golden master (locked for shipping) this week. Golden master does not necessarily mean that Apple will ship the firmware this week (after all, Steve said that it would ship in "early July") but it does mean that the firmware and all the features are complete and ready to head out the door.

Both sites seem to agree with the build number on the new firmware: 345. Gizmodo is reporting that 2.0 will boast code signing and a new encryption feature. The iPhone firmware 2.0 is definitely something on every iPhone owner's wishlist, and here's mine (you have one of these, right?):
  1. Super Monkey Ball (AppStore)
  2. New Mail features
  3. iWork support in Mail
  4. Exchange support
  5. MobileMe support
  6. Super Monkey Ball (did I mention this one already?)
  7. Scientific Calculator (would it be too hard to add a graphing calculator? c'mon, Apple!)
While we wait around the virtual campfire for the next version of the iPhone software, what are you most looking forward to in the new firmware? I think everyone can guess what my favorite feature will be; although I am still waiting for Final Cut Studio 2 for iPhone (we've been hearing rumors that it will be in the 10th generation device).

Filed under: OS, Rumors, Software, Snow Leopard

New screenshots of Snow Leopard appear, show desktop web apps

A German site, Apfeltalk.de has posted screenshots of the forthcoming version of Mac OS X, 10.6 (a.k.a "Snow Leopard"). Most of the screenshots show off the Safari 4 developer preview that will include the "Save as Web Application" option in the File menu.

The website also shows off the next version of Address Book.app that will bring Microsoft Exchange support to the Mac platform. We do however have to speculate about the System Preferences.app screenshot that shows two Time Machine icons with one labled "Dock" and another labeled "Time Machine" -- this seems out of place and unlike Apple.

You can see all of the screenshots (before Apple's legal team gets a hold of them) on the Apfeltalk.de site.

[via Engadget]

Filed under: Enterprise, iPhone

Gartner acknowledges iPhone enterprise mojo in new report

CIOs and IT pros pay money -- a lot of money -- for the opinions of the Gartner Group. Since I'm not shelling out $95 to buy "Gartner Changes It's iPhone Enterprise Recommendations," even though I'm sure it would be worth a giggle or two, I'll just point you to some folks who have read the new report. Short summary: author Ken Dulaney acknowledges that the circumstances leading to Gartner's original "burn it, it's a witch!" stance on the iPhone for enterprise use have changed, and with the additional support for Exchange and ActiveSync coming in June there are far fewer reasons to take a strict stand against iPhones in corporate settings.

Since Dulaney was the principal author of Gartner's first report, we commend him for sticking with the issue and setting the record straight. Now, about all those C-suite folks who already have iPhones... well, as Gartner describes the support levels required to handle idiosyncratic devices, there's "concierge," "appliance" and "platform" levels of support, with "concierge" being the most hands-on and resource-intensive (the iPhone is moving from "concierge" to "appliance" status with the June 2.0 update). How much do you want to bet that CEOs, CFOs and CIOs who go off the reservation and buy themselves iPhones and MacBook Airs are already getting, and will continue to get, "concierge"-level support from their IT departments? Yeah, that's what I thought too.

Filed under: Enterprise, Apple, iPhone

Apple/Microsoft in talks for ActiveSync before iPhone launched

Exchange support in the iPhone has been rumored almost as long as the iPhone itself was rumored to exist. Much as the iPhone turned out to be real, so has ActiveSync on the iPhone. Microsoft released an interview with Terry Myerson, corporate vice president for Exchange, which includes a very interesting tidbit. Mr. Myserson says that Apple and Microsoft were in talks about licensing ActiveSync before the iPhone was announced. Furthermore, he was in daily contact with Apple VP Phil Schiller (when Schiller wasn't making up Apple rumors, of course) for two weeks while they set the details of the agreement between the two tech giants.

This isn't a revelation, since it stands to reason that a company in the business of selling a smart phone and another company in the business of selling technology for smart phones would work together but it is interesting nonetheless.

Filed under: Apple, iPhone

Apple licenses ActiveSync for the iPhone

Today Apple announced that they have licensed ActiveSync from Microsoft to enable full Exchange integration with the iPhone. The first thing you think of with ActiveSync is Push Email (that's when email is sent to your iPhone as soon as it is received, as opposed to on a schedule like every 15 minutes). ActiveSync includes that as well as:
  • Wireless calendar syncing
  • Wireless contact syncing
  • Remote wipe of the device if it is lost
This goes way beyond simple email, folks. This only works when you're connected to an Exchange backend though, so don't be afraid that someone can randomly wipe all the data from your iPhone.

ActiveSync will be included in the iPhone 2.0 software, available sometime in late June.

Filed under: Software, Internet Tools

Entourage Exchange Accounts Optimizer 1.0


Just the other day a co-worker of mine wondered if there was a way to have Entourage (she's using 2008) automatically archive messages like Outlook does (we run Exchange on the job, which stores all your messages on the server; you run the risk of going over your quota if you don't archive things to a local mail store from time to time). I had to report that Entourage does not automatically archive (though it really should), and sadly I knew of no other automatic solution for her.

I now have a much better answer for her: Entourage Exchange Accounts Optimizer 1.0. It gives Entourage (2004 or 2008) the auto-archiving features that should be built in. You launch EEAO and tell it how old messages should be before they are archived, where to archive said messages to, and if you want it to run on a schedule. That's it.

Entourage Exchange Accounts Optimizer costs $10, though a free demo is available.

Filed under: Enterprise, Internet Tools

Kerio MailServer 6.5 poised to replace Exchange

Kerio Technologies announced version 6.5 of the Kerio MailServer -- 2 years in the making -- yesterday. We talked about version 6 recently, but this is their largest update yet and clearly shows their readiness to take a bite out of the Microsoft Exchange market. With version 6.5, Kerio is providing the groupware platform and tools needed to completely replace Exchange within a collaboration-centric organization.

The release is compatible with both server and workstation flavors of OS X with full support for Leopard, in addition to being fully Microsoft certified for Vista and Redhat certified for Linux compatibility. 6.5 also includes enhanced support for Entourage 2008, making full use of message flags and "out of office" messages which are synced on both mobile and workstation clients.

The biggest change of interest to Mac users is the addition of CalDAV support. Kerio users can look up information, share and subscribe to calendars and achieve 2-way sync whether they're on a Mac, an iPhone, a Palm or Windows Mobile handheld, a PC ... you get the idea. The server can provide a bridge between open and proprietary standards, making sure that you see the same data everywhere and allowing for smooth cross-platform interoperability.

The other major improvement, definitely of interest to users in multi-platform environments, is an upgrade to the Outlook Connector with a complete rewrite of its underlying database structure. It allows for easy data access, online and offline, with current and older versions of Outlook. And its full-text search capabilities search across messages, contacts and calendar events with support for Google Desktop search.

Not surprisingly, a release this big resulted in a pricing change. The standard package (10 users) now starts at $499 and adding additional users costs $20 per user. A version with integrated McAfee Anti-Virus for bi-directional scanning of all email starts at $599 and additional users are $24 each. Both versions include anti-spam, user management with authentication against Active Directory and Open Directory. Visit Kerio for more information.

Update: The US Apple Store is now carrying a base server (10 user) license and install media for Kerio MailServer with McAfee.

Filed under: Software

Office 11.4.0 update squashes nasty Entourage data loss bug

Among the security patches delivered with Microsoft's 11.4.0 update to Office 2004 this week, there was a fix for a subtle and deeply irritating bug that's been nipping at Exchange users for a long time. Under certain rare circumstances, Entourage users could unexpectedly and unexplainedly lose days or weeks worth of email, poof! I've personally seen this happen a handful of times over the past three years, and it's always a challenging conversation when the affected user asks "What the hell happened?" and the official reply is "Um... let me check the backups for you, mmmkay?"

TUAW reader Vermyndax, who worked with Microsoft support to track down the bug, blogged about the cause and resolution of the issue today:

The bug occurs due to a bad logic assumption. Entourage 2004 treats its local database as authoritative to the mail stored in your mailbox. As such, if the Exchange server happens to be virus-scanning your mailbox when you synchronize your mail, Exchange will refuse to allow Entourage access to the items being scanned. Since Entourage receives no information on the existence of those items, it will mark them for deletion in its local database.

On the next sync, you lose all of those items in the mailbox too. In cases we noted, users were losing large swaths of email at once (on the order of 2-3 weeks' worth all at once).

Yech. While you could recover the mail from Outlook/OWA "Deleted Items," it was a pain -- and worse if you didn't notice the problem until after your retention deadline had passed. Upgrading to 11.4.0, assuming you aren't quite ready to make the leap to Office 2008, is sounding better all the time.

Thanks Vermyndax!

Tip of the Day

Use Spotlight as a reference tool. Type any word in the Spotlight box and one of the top entries will be a definition. Click on it, and it will bring up the dictionary application to check the word in either the dictionary, thesaurus, Apple database, or Wikipedia.


Follow us on Twitter!
 TUAW [Cafepress]

Featured Galleries

DNC Macs
Macworld 2008 Keynote
Macworld 2008 Build-up
Google Earth for iPhone
Podcaster
Storyist 2.0
AT&T Navigator Road Test
Bento for iPhone 1.0
Scrabble for iPhone
Tom Bihn Checkpoint Flyer Briefcase
Apple Vanity Plates
Apple booth Macworld 07
WorldVoice Radio
Quickoffice for iPhone 1.1.1
Daylite 3.9 Review
DiscPainter
Mariner Calc for iPhone
2009CupertinoBus
Crash Bandicoot Nitro Kart 3D
MLB.com At Bat 2009
Macworld Expo 2007 show floor

 

More Apple Analysis

AOL Radio TUAW on Stitcher