Windows 10 tries to enforce security policies

Page 2 of 2 FirstFirst 12

  1. Posts : 29,078
    Windows 10 21H1 Build 19043.1023
       #11

    Kari said:

    This is a problem and it is absolutely not a third party program causing it. This is most definitely either a Mail App or Office 365 / Exchange issue.

    I have the same pop up since I tried to add an Office 365 for Business Exchange email to Windows Mail app:
    I just got a reply from Microsoft Sr. Support Escalation Engineer Abdias Ruiz:

    "Hi *Wynona*.

    This is a known issue that should be addressed in a later build of Windows 10."

    Not what you wanted to hear, Kari, but at lease now we know.
      My Computer


  2. Posts : 17,661
    Windows 10 Pro
       #12

    Thanks :).
      My Computer


  3. Posts : 17,661
    Windows 10 Pro
       #13

    OK, I think I have solved this.

    You need to sign in to Windows 10 either with a domain or Azure AD account to use the Mail App with an Exchange Office 365 for Business or Enterprise email.

    There's none whatsoever issues in enforcing the security policies (subject to these policies being set by your Azure AD / domain admin) and setting up the email accounts when your Windows 10 sign-in account is either a domain or Azure AD account.
      My Computer


  4. Posts : 438
    Win 10 pro 1803
       #14

    weird, its always been working for me
      My Computer


  5. Posts : 29,078
    Windows 10 21H1 Build 19043.1023
       #15

    Kari said:
    OK, I think I have solved this.

    You need to sign in to Windows 10 either with a domain or Azure AD account to use the Mail App with an Exchange Office 365 for Business or Enterprise email.

    There's none whatsoever issues in enforcing the security policies (subject to these policies being set by your Azure AD / domain admin) and setting up the email accounts when your Windows 10 sign-in account is either a domain or Azure AD account.
    I've shared this with the Microsoft Sr. Support Escalation Engineer Abdias Ruiz in hopes it may send their devs in the right direction, Kari.
      My Computer


  6. Posts : 17,661
    Windows 10 Pro
       #16

    OK, got this earlier resolved with signing in to Windows 10 with an Azure AD / Office 365 workplace account instead of a local or Microsoft account, now found the solution when signing in with a Local Account or an MS Account.

    It's quite simple, in fact: all you have to do is first add a workplace account by joining the computer to an Azure Active Directory. On your account page in Settings, select Work access:

    Windows 10 tries to enforce security policies-2015-06-07_17h00_57.png

    Select Join or leave Azure AD:

    Windows 10 tries to enforce security policies-2015-06-07_16h55_31.png

    Select Join Azure AD:

    Windows 10 tries to enforce security policies-2015-06-07_16h56_21.png

    Now add your account normally. Notice that your organisation's Azure admin must first have granted you a permission to join new devices.

    Set up the Mail App Exchange email account normally, select Enforce these policies when prompted and you are done. The Exchange email syncs now and works without any issues.

    Kari
      My Computer


  7. Posts : 5
    Windows 10
       #17

    This is the same problem I am having, which I posted under browser and email "mail exchange 2010 activesync policy not applied" I have been able to get it to work on the windows 10 pro 64 bit version by applying the default exchange active sync policy, this install is using a domain account joined to our organisation domain, but the windows 10 tablet is home version, which cannot be joined to a workplace therefore ruling out your solution above.
    On the Pro version it fails if I try to enforce the windows 8 policy that requires a password making it incompatible with our current organisation configuration as all windows 8 phones require a password for security
    A post on the microsoft community has suggested editing the EAS policy settings in the registry I am in the process of trying this but not fully tested but will updated with any further information
      My Computer


  8. Posts : 5
    Windows 10
       #18

    I confirm that I have been able to get a windows 10 pro laptop that is joined to the corporate domain to sync with exchange activesync that has a mailbox policy applied that requires a password and will accept a simple password, by editing the local security policy settings using gpedit under computer configuration - admin templates - system -logon
    1. Turn on PIN sign-in - enabled
    2. Turn off picture password sign in - enabled
    and add the following
    REG_DWORD registry settings in HKLM\software\policies\microsoft\windows\system
    DisallowConvenienceLogon value 1

    However this did not work on the windows 10 home tablet that is not joined to the domain
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 19:09.
Find Us




Windows 10 Forums