Help S3 requires security update for email account

[buck351]

I had my personnel and work email working fine on my S3. I found I had incorrectly entered the work email address that shows up in emails and I could not find any where to edit. I deleted the exchange email account and added it back. After adding it back a message popped up at the end of the creation saying I needed to do a security update to use the email account. It gave a long list of adminisrative controls it wanted on my phone. The amount of control made me nervous so I didn't accept it. The account won't work without accepting this. I was not asked this on the initial setup and never saw this the entire time I used the initial setup of emails on the S3.

I'm also started getting this security update request on the other pop mail account I have setup even after I deleted the exhange account. On this pop account I can hit cancel when it pops up and the account still works. I asked one of our IT guys and he said this happened on an Android tablet of his when he tried to setup the exchange email.

I had been running these email accounts for months without every seeing this security update request. Anyone know how to fix this? I don't think it's and exchange issue from our server.

 

[SUroot]

Erm, as an exchange administrator I can tell you these permissions are industry standard and come from the exchange server.

Either you somehow didn't see but accidentally accepted the premissions before or IT have plugged a ridiculous oversight shaped security-hole since.

Anyway, if you want corporate email, you must accept your company's policy. If you prefer not to accept their company policy, fair enough but no email.

The policy simply makes the exchange admin a device administrator of your device. It means they can force you to have a PIN or wipe the device if needs be. This is beneficial for you too. But its only fair. It's your company's data so they have the right to control it

 

[rcsrich]

Erm, as an exchange administrator I can tell you these permissions are industry standard and come from the exchange server.

Either you somehow didn't see but accidentally accepted the premissions before or IT have plugged a ridiculous oversight shaped security-hole since.

Anyway, if you want corporate email, you must accept your company's policy. If you prefer not to accept their company policy, fair enough but no email.

The policy simply makes the exchange admin a device administrator of your device. It means they can force you to have a PIN or wipe the device if needs be. This is beneficial for you too. But its only fair. It's your company's data so they have the right to control it

What he says ^. You won't be able to have an Exchange account on the phone without allowing the admin controls. I personally don't mind it- I see it as another method to lock/wipe my phone if it gets lost or stolen, so it seems to make good security sense.

 

[buck351]

Erm, as an exchange administrator I can tell you these permissions are industry standard and come from the exchange server.

Either you somehow didn't see but accidentally accepted the premissions before or IT have plugged a ridiculous oversight shaped security-hole since.

Anyway, if you want corporate email, you must accept your company's policy. If you prefer not to accept their company policy, fair enough but no email.

The policy simply makes the exchange admin a device administrator of your device. It means they can force you to have a PIN or wipe the device if needs be. This is beneficial for you too. But its only fair. It's your company's data so they have the right to control it

Ok but why is it still asking me for it when I open my personnel PoP email account after I deleted the exchange email account?

 

[SUroot]

No idea. Probably need to clear data on the application.

 

[buck351]

No idea. Probably need to clear data on the application.

Thanks to everyone for replying. Funny how it didnt' ask for this the first time I setup the exchange account. Maybe they changed there policy.

Clear data on the app?? Do you mean delete the last email account and reinstall the pop mail account?

 

[SUroot]

Essentially, however you can do it through Android settings > applications manager > Email > Clear data. It will wipe the entire email app (Accounts, files etc).

Its like factory reset but of the email app only.

 

[buck351]

Essentially, however you can do it through Android settings > applications manager > Email > Clear data. It will wipe the entire email app (Accounts, files etc).

Its like factory reset but of the email app only.

Thanks.

I checked with the help desk at work and they said the security admin request was correct for the exchange server. Guy said I may not have seen it the first time because sometimes it just sits up on top and doesn't go full screen. Thing is the account worked the first time without accepting the security admin rights list.

 

[SUroot]

Somehow your s3 must have communicated back to exchange that you accepted them. That's the only way it would work. As to how the phone "decided" to accept the permissions in the first place, I wouldn't want to guess

 

[_Aardvark]

You may want to look into Touchdown, a 3rd party email app. It is not free but I think it implements exchange's security policies differently then the stock email application. Most of the control they allow the exchange server to have is limited to just the application, not the entire device. Like the PIN lock requirement isn't forced to the lock screen, just the application itself.