What is this policy?

Posted Dec 16, 2022, 11:05 AM UTC

Posted Dec 16, 2022, 11:05 AM UTC
If you have access to your work email on your phone then they can force you to have more complex passcodes without even installing company profiles on your device.
Does uninstalling it disable it?
Hello. Please go the following location in settings to see what profiles your work may have installed on your iPhone:
Settings -> general -> VPN & device management
What do you see (if anything) under the “mobile device management” section of that settings pane?
Yes generally
Yes but you probably installed a work profile because you needed/had to. This would undo that.
I use Outlook on my iPhone for work emails specially to get around this.
If you are signing into an office 365 account it doesn’t matter what app you use. Your company can still enforce a password policy and remotely wipe data.
Intune is not required. No MDM will show up on your phone, all of that can be done directly through office 365.
Edit: When testing this I had added the work email to the Accounts tab in system settings and had selected calendar sync only.
What app you use does matter and I forgot I took this step. It is possible though that the outlook app will refuse to download content unless a certain password requirement is met.
This states that only Outlook data can be wiped remotely:
The Account Only Remote Wipe Device command is therefore redundant and is not supported by Outlook for iOS or Android.
Not sure. I just know I had to change my iOS password when I used my company email on my phone and then I switched to the Outlook app and that stopped happening.
This is the way
In order to disable you need to sign out. Uninstalling should do that.
It’s because you have your work email on your phone.
The real answer
Whats your spaghetti policy?
Are they well versed in bird law to get a new passcode
Sorry, I’m not sure what that is?
Never mind, I’ve got it 😂
If you’re using the Microsoft Outlook-app, with your company e-mail configured, the IT team can force you to set a complex pincode on your phone and Apple Watch by policy.
[deleted]
My Watch & iPhone do this too and it is due to MDM. It’s annoying but they pay for part of my bill in exchange for having email/cal/etc on it.
I’ve seen that when a company has an internal policy applied. Is this a personal Apple Watch and iPhone combo? Or a company owned one.
It has to be from something company related on your phone I used to have this happen to me when I was a manager before and had work apps and email on my phone it would force a passcode change on the phone and watch after a couple months.
you see, that’s why I avoid installing/setting anything work related in my personal phone
I need to downloaded work email to my phone and access company info. To be allowed to do so by my company , it causes my phone and watch to require a complex password.
Do you have a passcode on you Apple Watch before? If yes it was a simple passcode?
Yes, it was a simple password.
Now it let you create another simple passcode or it force you to create a complex one?
Forced to create a complex one
Or maybe a corporate email account?
Do you have something corporate work related installed in your iPhone? Anything like device management or security related?
Work email. I never dealt with this as I always have complex passcodes on my phone but a coworker dealt with this as their passcode for Watch was 1234 and phone was unlocked
It is likely that in order to use the company's apps you had to install a certificate from the company and through this the phone is managed by the organisation.
Luckily my work doesn't require password/passcode changes. They said its proven to make the user lazy and generate weak passwords. We just have MFA
Settings -> General -> VPN & Device Management. Look at the configuration profiles installed.
Had to do it a couple weeks ago. The Watch is mine, but the iPhone is from Corporate, which uses Microsoft Intune MDM.
Ditto. My company makes us change our passcodes every 3 months. Annoying.
It might be related to your work email. If you’re using secure mail it forces you to put a password on your watch. You most likely work in healthcare it’s a HIPAA security measure
As others have said, it's almost certainly a work-related policy. My employer, since I connect to the work email/calendar server, requires a 6-digit passcode. This is because the watch can be used to authenticate you for your phone, and a weaker passcode could permit someone to access the work info in that manner.
Check your iPhone under settings , general and then VPN & device management.
What do you see there?
Does your company perhaps have device management on your linked iphone? Could be that their passcode policy affects your watch aswell.
Nope
Is it your own phone? Did you buy it new? Do you have a corporate email in it?
Yes, it’s my personal phone.
I had 3 apps, sharepoint, workday and yammer. Do these apps give them authorization for such things?
I would say SharePoint? Absolutely! That’s typically company files, yes? Not sure what Workday is, but Yammer is just a chat client type thing, right? I wouldn’t think that one would be as restricted.
Share point and Workday are probably the cause, my money would be on Sharepoint..
But if your company has allowed access to Workday via your phone… possible as well
SharePoint or Yammer are probably configured with MAM in your company’s Intune. This means they let you access company Microsoft 365 data with your own device (BYOD) but you have to comply with certain policies.
This is normally how BYOD is implemented in Microsoft 365. You don’t requiere the entierre device to be enrolled in Intune but policies still apply.
Go to settings then General and VPN & Device Management and see if there is anything there.
You probably have a compliance policy in place from the company that requires the reset of your passcode x days to keep company acces. The compliance policies are probably managed through Microsoft Intune.
Yeah it is, it is likely being managed by Intune, or JAMF And that will force the passcode as a security measure.
SharePoint and possibly yammer may have corporate policies pushed via intune, too.
Lol why tf were you downvoted for answering this.
I’m not sure
How would you know? Thank you