I am running Exchange 2007 using ActiveSync to a Motorola Q smartphone and
I'm trying to understand my exposure when a device is lost. If I'm using an
Active Sync policy that requires a strong password, encrypts storage cards
and enable remote wiping of the device, is that all I can do? If so, there
is a gap when a device is lost while logged in, and not reported immediately,
is that right?

In other words, the data (mail, contacts, etc) on the smartphone itself, not
on a storage card, is not encrypted and therefore accessible, is that right?

"Chris" <Chris@discussions.microsoft.com> wrote in message
news:160C67BC-44AB-445C-A36F-5371883AB6C6@microsoft.com...
> I am running Exchange 2007 using ActiveSync to a Motorola Q smartphone and
> I'm trying to understand my exposure when a device is lost. If I'm using
> an
> Active Sync policy that requires a strong password, encrypts storage cards
> and enable remote wiping of the device, is that all I can do? If so,
> there
> is a gap when a device is lost while logged in, and not reported
> immediately,
> is that right?
>
> In other words, the data (mail, contacts, etc) on the smartphone itself,
> not
> on a storage card, is not encrypted and therefore accessible, is that
> right?


I think it's worse than that. If the device is lost/stolen whilst unlocked
everything is accessible.
Although it doesn't help in that case, I use a registry modification to
store mail on the encrypted storage card.

Can you share with me the registry modification to make that happen? Were
you working off a Microsoft article by chance?

In your case then, the data is encrypted, but would still be accessible if
the device was not locked with a password.

"pugwash" wrote:

>
>
> "Chris" <Chris@discussions.microsoft.com> wrote in message
> news:160C67BC-44AB-445C-A36F-5371883AB6C6@microsoft.com...
> > I am running Exchange 2007 using ActiveSync to a Motorola Q smartphone and
> > I'm trying to understand my exposure when a device is lost. If I'm using
> > an
> > Active Sync policy that requires a strong password, encrypts storage cards
> > and enable remote wiping of the device, is that all I can do? If so,
> > there
> > is a gap when a device is lost while logged in, and not reported
> > immediately,
> > is that right?
> >
> > In other words, the data (mail, contacts, etc) on the smartphone itself,
> > not
> > on a storage card, is not encrypted and therefore accessible, is that
> > right?
>
>
> I think it's worse than that. If the device is lost/stolen whilst unlocked
> everything is accessible.
> Although it doesn't help in that case, I use a registry modification to
> store mail on the encrypted storage card.
>
>

"Chris" <Chris@discussions.microsoft.com> wrote in message
news:E0B18768-EF06-45B5-8D2E-2AD3531BDF15@microsoft.com...
> Can you share with me the registry modification to make that happen? Were
> you working off a Microsoft article by chance?
>
> In your case then, the data is encrypted, but would still be accessible if
> the device was not locked with a password.
>
> "pugwash" wrote:
>
>>
>>
>> "Chris" <Chris@discussions.microsoft.com> wrote in message
>> news:160C67BC-44AB-445C-A36F-5371883AB6C6@microsoft.com...
>> > I am running Exchange 2007 using ActiveSync to a Motorola Q smartphone
>> > and
>> > I'm trying to understand my exposure when a device is lost. If I'm
>> > using
>> > an
>> > Active Sync policy that requires a strong password, encrypts storage
>> > cards
>> > and enable remote wiping of the device, is that all I can do? If so,
>> > there
>> > is a gap when a device is lost while logged in, and not reported
>> > immediately,
>> > is that right?
>> >
>> > In other words, the data (mail, contacts, etc) on the smartphone
>> > itself,
>> > not
>> > on a storage card, is not encrypted and therefore accessible, is that
>> > right?
>>
>>
>> I think it's worse than that. If the device is lost/stolen whilst
>> unlocked
>> everything is accessible.
>> Although it doesn't help in that case, I use a registry modification to
>> store mail on the encrypted storage card.
>>
>>


I found the method somewhere on the web, can't remember where. Works fine
on my 6.1 devices.

Edit registry as follows:

HKLM\\System\Inbox\Settings\PropertyPath Value \Storage
Card\Messaging
HKLM\\System\Inbox\Settings\AttachPath Value \Storage
Card\Messaging\Attachments

then MOVE the entire Messaging folder under \Windows to \Storage Card and do
a SOFT RESET

I use SmartReg to edit the registry.

Beware: if you remove the storage card and run messaging the device will
recreate the Messaging folder back under \Windows and undo the registry
changes.