Mail App and Activesync Policies
I've added my corporate Exchange Activesync account to the Mail App on my Surface Pro 3 Windows 8.1
It's OK, but enforced a lot of policies. I'm OK with all except that it's enforcing a complex password to unlock my computer. The same server is enforcing only 4 digit pin lock on other platforms like iPhone or Android.
Why is this the case? Why doesn't Mail App only enforce 4 digit pin? It becomes very inconvenient to use Mail app for Activesync with this.
February 19th, 2015 1:54pm
Its due to policies as you said (device specific). I would suggest you to check this with the admin taking care of policies / deployment.
February 19th, 2015 9:24pm
Indeed it looks like so. There's also password policy enforcement for domain membership on my other computer. I was considering "SP3" 's tablet side, that's why it was surprising to me. I guess the exch admins rightfully don't see it as tablet
but rather a full computer.
February 20th, 2015 2:55pm
Hi,
Have you check if you still could create pin password for it as below:

If this option is not available after enforce the group policy, it must be the group policy limitation like your suspicion. Contact domain admin for help.
February 20th, 2015 5:38pm
Hi Karen,
I had pin unlock before and it was working fine when I had only the MS account configured. Once I configured my Activesync EAS account of my company, and it enforces the policies, the Pin lock is disabled and greyed out, no longer usable. Only a complex
password unlocks it.
Note that this Surface Pro 3 computer is NOT a member of domain, that's why I was surprised that it does not behave like any other Android or iOS tablet or phone.
Is it possible that the Mail App enforces the security policy more than requested? Ie it's getting pin unlock but enforcing complex password instead?
February 20th, 2015 6:21pm
Hi,
Please give us more patience. We need more time to do research.
February 23rd, 2015 5:07am
Thanks, waiting impatiently.
FYI, our domain admin stated to me that "The ActiveSync policy is to use a password, it is the device that implements the details of that and it is Windows 8.1 that interprets that to mean a complex password"
February 23rd, 2015 6:11am
Hi,
Since this issue occurred after you configure the ActiveSync EAS account, it's the requirement of this type of acco
February 23rd, 2015 1:06pm
Hi,
Since this issue occurred after you configure the ActiveSync EAS account, it's the requirement of this type of acco
March 1st, 2015 8:45pm
Hi,
About this part, it's recommend you contact Exchange forum for professional help:
https://social.technet.microsoft.com/Forums/exchange/en-US/home?category=exchangeserver
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn
from your interaction with us. Thank you for your understanding.
March 3rd, 2015 7:10am
This is a client side issue of Mail App, not an Exchange issue. So we need the experts who wrote Mail App implementation of Activesync Policies and its enforcement onto Windows.
March 9th, 2015 1:11pm