Securing Windows Mobile devices from the Exchange server

[irblinx]

Oh and the reg ed I used wasn't signed, I'll dig it out, very simple and functional but also very small and free

[windows]

Ouch that is dangerous in that case I'd have thought it had to be signed at the least!

[waveydavey]

Originally Posted by irblinx

Oh and the reg ed I used wasn't signed, I'll dig it out, very simple and functional but also very small and free

The first thing I always do with my Smartphones is use the signed regeditSTG.exe file to unlock the security on the device to enable unsigned cabs.

It's possible that being an HTC device the security was more lax. I'll bet money you can't do it without a signed registry editor on a Tmob branded device,

[irblinx]

Haven't got any T-Mobile branded smartphones cos they don't do them anymore

The S710 allowed cab files as standard but the S310 didn't, having checked my files I think I might possibly have used regeditSTG2.exe on the S310 as I can't see the other one that I had in the folder that I used for updating the certs on the phones.

[bydandie]

The lack of a decent candy bar WM6 Smartphone from T-Mob is indeed puzzling. I'm more concerned that it's so easy to disable the security on devices. It does, however, prove one point though - that you have get the balance between security and usability right otherwise people will find a way to circumvent the controls.

[irblinx]

They are adamant that the Nokia smartphones provide a better option, admittedly some of them do allow you to apply MSFP security policies but I just don't want to have to support more than one OS.