exchange
Latest
Exchange/iOS "meeting hijack" history goes back well before iOS 6
Yesterday, in discussing the new reports of meeting invitation issues between Microsoft Exchange and iOS 6 devices using ActiveSync, I mentioned that I recall having seen these sorts of problems in prior versions of iOS and OS X, albeit infrequently. The issue manifests as one recipient declining an invitation which mistakenly cancels the meeting for everyone, "hijacking" the meeting out from under the original organizer. My recollection was probably accurate, given the report below from a TUAW reader who prefers not to identify his former employer. The full rundown is worth reading, but here's the summary: iOS's implementation of ActiveSync, in iOS 6 and well before, may be doing some things (asserting ownership of meetings that in fact do not "belong" to the Exchange account on the iPhone) that theoretically should not be allowed under the protocol specification. Exchange, in turn, is not enforcing the spec and refusing these inappropriate requests as it ought; it's taking them at face value. The end result: meetings get dropped but neither vendor is apparently willing to take point on the issue. Our reader's story: The problem with iOS and Exchange is something that we discovered at my previous place of employment. It's a nasty bug and I'm sad to see that it persists. Before I sat down to write you, [I checked with] those folks to see if iOS 6.0 had made it better at all. They reported it was worse. With that in mind... We had a term for the problem. It was "meeting hijacking." It describes a scenario in which an iOS device could "hijack" a Microsoft Exchange meeting. The hijacking would make an attendee the organizer of the meeting and if they declined or deleted the meeting, Exchange would then send a decline to [all the other invitees] and cause fairly major issues. We first witnessed this problem around iOS 4.3, if I remember correctly. We were running Exchange 2007 for tens of thousands of users. We had the latest service packs and cumulative updates installed. (The problem also occurred in iOS 5.0 and higher, and apparently it's not fixed in iOS 6.0 either. It has also been verified against Exchange 2010, but more on that in a minute). To reproduce the issue, here's what we did: Using Outlook for Windows, create a meeting and add attendees. Make one of the attendees an email list that is EXTERNAL to the Exchange organization. That means it cannot be a distribution group in Active Directory. It needs to be a Mailman or majordomo list that is outside the Exchange org. The members of the external email list receive the invitation and accept it. The acceptance is written back to Exchange and put on the calendar. The iOS device owned by a member of the email list picks up the meeting and places it on the calendar. All is happy. At some point, the iOS device syncs the calendar via ActiveSync and suddenly becomes confused about who the owner of the meeting should be (the organizer, in Exchange-speak). The iPhone decides that its owner should become the organizer, since it has no idea who the real owner is, and syncs this property change back to the Exchange server. Exchange 2007 now has a disconnected copy of the meeting with a different owner. Exchange is agnostic about this. Now the iPhone owner declines the meeting for whatever reason. Exchange automatically generates a cancellation or decline notice and sends it out to everyone since the disconnected copy of the meeting has a different owner. This results in mass confusion and sometimes will delete the meeting from the other calendars. We verified this problem against iOS 4, 5 and 6 with Exchange 2007 and 2010. In Exchange 2010, Microsoft introduced a "calendar repair agent" that is supposed to detect this problem and resolve it. This calendar repair agent is a daily timer job. Microsoft did release patches on Exchange 2007 SP2 and up to correct some of the issues that are similar to this, but this particular problem was never resolved. Now for the dirty laundry. We worked for about two years with Microsoft and Apple on this issue. It may have been longer, I don't recall. We had a major support contract with Microsoft and reported this issue to them. I'll spare you the gory details. But the end result was this: The root cause is that iOS is able to convince ActiveSync to manipulate properties on meetings that it should not be able to manipulate (namely, the organizer of the meeting). Sometimes, it will make these decisions because for whatever reason it believes [these changes are] in the best interest of the user. Microsoft has an ActiveSync specification that calls out what properties should and should not be used during EAS communication. In our troubleshooting it was determined that Apple's manipulation of the organizer field is against the ActiveSync specification. However, ActiveSync will not stop iOS from doing this regardless of the fact that it is "against the specification." ActiveSync will happily accept the change and write the properties from the mobile device even if the ActiveSync spec says that Exchange explicitly should not do this. The end result: Apple claims that it's Microsoft's bug because ActiveSync lets it happen. Microsoft claims it's Apple's bug because they wrote code that makes it happen. Microsoft says they "told Apple not to do this but they did it anyway." Ultimately, we were of the opinion that it was Microsoft's bug to fix since the specification laid down rules of this nature yet is unwilling to enforce them. We pointed out to them that this seemed to be a security issue. They disagreed. Like I said, I spoke to my old colleagues and they confirmed that the problem still exists and with iOS 6, the meeting hijacks appear to have worsened. They are still in the planning stages of Exchange 2010 so I cannot comment on whether or not the calendar repair agent helps this issue in that particular environment. Thanks to our reader for contributing his experience. If you've got specific details on troubleshooting this issue or have run into it yourself, please let us know.
Exchange calendar oddity in iOS 6 may trigger meeting cancellations [Updated]
The iPhone's support for Microsoft's dominant email and calendaring Exchange platform is an essential part of iOS's appeal to business users. Integrating MS's ActiveSync mobile device connectivity into Apple's gear, which started back with iPhone OS 2.0 in 2008, helped make the upstart smartphone into a viable alternative to the dominant BlackBerry ecosystem (and look how that worked out). Update: See Thursday's post for more firsthand information on how Exchange and iOS have a history of not playing nicely. Unfortunately, ActiveSync has always been a mite quirky on iOS. While the core email sending and receiving functionality usually does as it should (with sustained support for push email a sometime exception), calendaring doesn't always fare as well. Delegation of calendar rights, access to third-party calendars and meeting invitation handling are among the sore spots that may cause issues for power users. It now looks like iOS 6 may be exacerbating some of these challenges. MacRumors highlights an internal memo from a "very large company" asking employees specifically not to upgrade their devices, as there may be some situations where declining a meeting invitation inadvertently sends a full cancellation notice to all the other attendees. In fact, I've seen this behavior before, only very rarely -- it came up once or twice on both iOS 5.1 and from iCal under OS X Lion over the course of a few months, while working with Exchange 2007 meeting invites -- but the current instantiation seems to be easier to trigger. Meetings with large numbers of attendees may be more problematic, and/or meetings where the organizer and the recipient are not part of the same Exchange organization. What can make this sort of issue more frustrating for both IT and device users is that these issues are usually intermittent, hard to reproduce and may hinge on very particular combinations of circumstances and Exchange microversions. There's a reason Microsoft sells expensive service and support contracts with its infrastructure products, and also plenty of reasons why hosted Exchange and alternatives like Google Apps are gaining ground on traditional in-house installations. You may be eager to try out the latest and greatest version of iOS, but if you're depending on your company's IT department to support your connectivity to the enterprise calendar system (to say nothing of VPN, file services, email and all the rest) then please do yourself a solid and check with your local gaggle of geeks before you upgrade -- not afterward.
Early iOS 6 adopters report problems getting Exchange push email: are you affected?
We all know about the central issue surrounding iOS 6. For the suits and ties among us, however, there's a potentially more glaring problem with Exchange support. Some users quick to upgrade to Apple's latest mobile OS report losing automatic push delivery of their email, requiring that they check for themselves to get any fresh messages. The issue isn't carrier- or device-specific, and attempts to reboot, reconfigure or restore devices are at best temporary fixes: what flows smoothly at first runs dry several hours later. Apple technicians are aware that the flaw exists, but it's tough to know if and when engineers will have a fix -- the company typically waits until it has a solution in hand before it goes on the record. We've reached out to Apple for a possible comment all the same. In the meantime, let us know if your Exchange access (or push data as a whole) is going awry. [Thanks, Daniel] %Poll-78044%
Apple posts OS X 10.8.1 update, mends your Mountain Lion
There's a special moment in every operating system's life when it loses its innocent .0 status and grows up. It's OS X Mountain Lion's turn to mature, as Apple has just pushed out the 10.8.1 update for early adopters. Most of the fixes are for issues that plague specific use cases, such as audio output from a Thunderbolt Display or crashes in Migration Assistant. There are a few remedies that a wider audience might appreciate -- a fix for iMessages that don't send and an improvement to Exchange compatibility in Mail, for example. We don't yet know of any surprises lurking underneath, but it can't hurt to have a smoother-running Mac while we investigate.
Verizon adds Office 365 to Small Business Essentials, gives small businesses more mobile productivity tools
Fresh off unveiling Office 365's cloud app model last month, Microsoft has teamed up with Verizon to add the productivity suite to Big Red's Small Business Essentials service. Similar to the Governmental version of Office 365, small businesses can gain access to Office web apps, SharePoint website design tools, Exchange email and calendar service, plus Lync messaging. Best part is, it's just six bucks a month per user, and most all enterprise customers are taken care of: the tools are available on Android, BlackBerry, iOS and Windows Phone. Want to know more? PR awaits after the break.
Microsoft details the People app, its cloud-connected address book for Windows 8
If you've yet to try the Release Preview of Windows 8 for yourself, fear not, because along with our detailed impressions, Microsoft is catering to your trepidation with a series of blog entries on its MSDN site that explore the nitty-gritty details of its latest OS. In the latest installment, we're given an in-depth preview of the People app, a cloud-connected address book that promises to be one of the many centerpieces in the Metro environment. For starters, Windows Phone users are bound to feel right at home, as the address book relies on cloud services to populate the entries from sources such as Facebook, Google, LinkedIn, Microsoft and Twitter. Not only does this ensure that one's address book is always accessible and up-to-date -- friend removals come to mind -- it also brings quick access to social feeds via the "What's new" section and lets you keep tabs on specific contacts via live tiles on the home screen. By leveraging APIs known as contracts, Windows 8 makes the address book available to other apps such as Mail and Messaging, along with other programs written to take advantage of the service. One of the hurdles Microsoft is working to overcome with its cloud-connected services are the inevitable duplicate contacts. Currently, Windows 8 does a pretty good job of identifying and linking multiple accounts to one individual, but for the rare exceptions, the company will soon add the ability to manually edit and link various accounts to specific contacts. Naturally, with such a connected approach, security could be an issue for businesses, and for this reason, one's Exchange contacts will not be synced with their Microsoft account. In this scenario, users must manually add their Exchange accounts for each device they use. Take one look at the length of the MSDN blog entry and you'll be left wondering how Microsoft employees find time to code, but it makes for a worthwhile read.
Samsung announces Galaxy Note 10.1 at MWC (update: hands-on photos!)
Samsung's announced another 10.1-inch tablet to join its burgeoning collection of slates. The Galaxy Note 10.1 is an S-Pen toting variant of the similarly sized-and-named Galaxy Tab. It's running Touchwiz-infused ICS on a 1.4GHz dual-core CPU with 1GB of RAM, but here's the answer to the question on everyone's lips: nope, you can't use it as a phone. Sadly you'll only have access to HSPA+, WiFi and Bluetooth 3.0, dashing our hopes of using this as our primary cellphone to annoy people on the train. The 10.1-inch WXGA (1280 x 800) display is nestled opposite a 3-megapixel rear-facing camera and beside a 2-megapixel one for video conferencing. S-Pen specific features include S Note for scrawling text, Shape Match and Formula Match (to digitize images and mathematical formulae) -- but more importantly is the ability to use Adobe's new Photoshop Touch and Ideas, which will both come pre-installed.If you'd rather use the slate as one of the world's largest sat-navs, you'll be relieved to know it's packing both GPS and Glonass. For the businesspersons of you out there, there's Exchange ActiveSync, on-device encryption, Juniper Junos Pulse and Cisco VPNs. It'll come in 16, 32 and 64GB variations, with a microSD slot for you to add up to a further 32GBs into the mix. It's clear that Samsung's bisecting its tablet business: purely touch-driven devices will now be branded as a "Tab" and anything with a stylus S-Pen will be suffixed with "Note." Pricing and availability are currently unspecified, but we'll do our best to shanghai that information out of a passing company rep when we see one.Update: We've added a gallery of hands-on photos just below.%Gallery-148870%Brad Molen contributed to this report.
RIM welcomes Office 365 users into the fold with BlackBerry Business Cloud Services
For wary Office 365 enterprises who've been reluctant to dip their toes into the beta pond, today will certainly be memorable in the IT room: Research in Motion has gone ahead and blessed BlackBerry Business Cloud Services as ready for prime time. The software, which has been in beta stage since October, allows BlackBerry users to easily integrate with their firm's Office 365 deployment. Users can expect synchronization with their Exchange email, contacts and calendars, along with the ability to remotely wipe or lock their data should the device go missing. Likewise, IT gurus may take advantage of remote administration and wireless activation of the handsets. The software is free and will work for all medium-sized and enterprise subscribers of Office 365. So go ahead and uncork that dusty bottle of champagne, or absent that, feel free to flavor up the Folgers a bit. The press release just after the break, and you'll definitely want to prepare yourself.
Doodle adds iCal connector for cloud scheduling
Mac users of the cloud-based scheduling service Doodle will be happy to learn that the company has released a beta of its iCal Connector software for Mac. Doodle is a service that lets users send out potential meeting dates to friends or clients. Those recipients see a poll with the meeting schedule options; they can vote on which date would be best for them. The tentative dates show up in that user's calendar client (Outlook, Google Calendar, etc.). Users can see what other dates people choose as well. When the original meeting organizer looks over all the dates and chooses the best one for the group, all the tentative dates are automatically wiped clean from everyone's calendar software with only the chosen one left. Until now Doodle's third-party calendar support was limited to Google Calendar or Microsoft's Exchange calendaring. With the iCal beta, now Mac users can take full advantage of the cloud-based meeting selection service, no matter what calendar service they use. If you want to learn more about Doodle, check out this short video. Doodle offers both free and premium accounts for users. The Doodle iCal Connector is a free download.
Captain's Log: A two-minute read could save you 15% or more on nerdrage insurance
Captain's Log, Stardate 65340.3... Hello, computer (and players)! Welcome to this week's edition of Captain's Log, brought to you by "Geko" Insurance. (And let's just say, you may want to purchase a policy). If you are a Star Trek Online player who watches Cryptic's official forums, you know that the game experienced an Occupy movement of its own this past weekend. Even if you don't frequent the forums, you may have seen some of the concerns raised through the #STO Twitter feed. Over the weekend, players lashed out against some of the recent changes that have made their way to the Tribble test server. It may be surprising to some of you reading this, but the commotion was not related to the economy changes. The main concern is that some of the items for purchase in the C-Store are going to be changing from account-wide unlocks to per-character transactions. While I was a little perturbed at the thought too, I was happy to see that some of the misconceptions were cleared up once we got an official statement from one of the devs. But since there is a lot more to the story, let's take a look. Ensign, warp 10! And don't forget to buckle your seatbelt...
Captain's Log: More on the economy
Captain's Log, Stardate 65303.9... Hello, computer (and players)! As I discussed last week, heated discussions surround Star Trek Online's change to a F2P hybrid model and planned game mechanics updates. While new updates are being pushed to the Tribble server for testing and feedback, many aspects are in a state of flux as such feedback is collected, evaluated, and implemented. The biggest area affected is the economy. While everyone has his own thoughts on the matter, Cryptic is leaving no feedback forum post unread -- the players will help shape these changes. Last week, we saw the push of another patch that seems to have made some giant strides toward solving some of the biggest concerns, including significant reductions in prices for most items and the return of free ship tokens for most ranks. Stephen D'Angelo, acting Executive Producer and Emergency Executive Producer Hologram (EEPH), explained: "Based on how rapidly we're getting data and revising the game, we're still probably two more weeks away from having the economy in a state that is close to good enough." Since he said a lot more in his recent dev blog post, I thought I should take some time to expound on it. Ensign, warp 10! Let's take a look at what else the EEPH had to say and break it down...
The Perfect Ten: Non-vanilla server rulesets
I've always thought that rulesets are a golden opportunity for MMO developers to get creative with their products and try something fresh and exciting. Unfortunately, most every MMO these days, new and old, adheres to the four "vanilla" rulesets that have been in place since Pong. You have your default PvE, your same-as-PvE-except-we-have-a-naming-policy PvE-RP, and the two player vs. player variants: PvP and PvP-RP. Those are all well and good, but... y'know... couldn't rulesets be used to create fascinating variations on these games? It turns out that yes, yes they can. While the vanilla rulesets are the vast majority, there does exist a group of fringe rulesets that dared to walk the different patch, er, path and made versions of MMOs that are a bold and refreshing flavor. Like blue! Sometimes these new rulesets were whipped up to inject new life into an aging title, giving players a valid reason to come back and see the game from a different perspective. In this week's Perfect Ten, we're going to check out just how wild 'n' wacky server rulesets can get!
Apple exchanges iPads for iPad 2 for Rutgers class
An Apple retail store in New Jersey has taken back an order of original iPads and replaced them with iPad 2 units for a class at Rutgers' Center for Management Development, according to Forbes. In a move bound to annoy everyone who bought an iPad just before the iPad 2 was released and found that it was too late to return it, Apple isn't even charging a restocking fee even though the iPads had already been customized. The class was scheduled to start shortly before the iPad 2's release date on March 11, so the school had gone ahead and purchased the tablets (the students actually pay for them and keep them after the class is over). The article doesn't say exactly how this deal was arranged, but it's safe to say that someone at Rutgers followed my mom's perennial advice, "If you don't ask, the answer is no," and made a phone call to the local Apple Store. From the article, it is clear that Rutgers has a regular cycle of classes that use the iPads, which no doubt made it a little easier for Apple to show such extra flexibility. Of course, no good deed goes unpunished, so I'm sure there will be a whole host of people complaining that they didn't get the same offer. If you did happen to order an iPad recently, it's definitely worth a visit to your local Apple Store or a polite call to Apple support. Just remember, you're not a university sending tens of thousands of recurring dollars to Apple, so don't be too surprised if you don't get the same deal. [via The MacObserver]
iPhone passcode bypassed by security researchers
A group of German researchers at the Fraunhofer Institute for Secure Information Technology report that they've cracked the iPhone's keychain system, allowing access to the passwords saved on any phone in just six minutes. By jailbreaking the target phone and installing an SSH app on it, the hackers found they could access any information on the phone that they wanted, without the need to input a passcode or any other form of security from the user. In other words, if they can get their hands on your iPhone, they have access to everything on the keychain, which includes any Gmail or Exchange accounts saved on the phone, as well as network, Wi-Fi and voicemail passwords, as well as the passwords on some apps. You can read the full report as a PDF online. The only solution that Frauhofer lists in the report is that any lost or stolen iPhone must require its owners to assume that all passwords included on the handset are compromised, and must all be changed and replaced as soon as possible. It's hard to think what Apple might be able to do about this -- as long as the phone can be jailbroken, this seems possible, and obviously Apple hasn't been able to stop jailbreaks in the past, for a number of reasons. On the other hand, this hack needs access to the phone itself, so if you don't lose your phone, you're still good to go.
Deutsche Bank ditches BlackBerry for iPhone, Apple puts chink in RIM's enterprise armor
For years, suit-and-tie circles have bowed to BlackBerry as the king of corporate communication, but iOS has been creeping in on enterprise territory, calling into question RIM's sovereignty in the boardroom. The folks at Deutsche Bank Equity Research struck the most recent blow to RIM's enterprise dominance with the announcement that they'll buck BlackBerry for iPhone, following a trial using Good Technology's secure email app. The company tested the app in conjunction with Microsoft Exchange Server, delivering AES 192-encrypted email and calendar data to employees, and, according to the firm's research analyst, the iPhone proved an easier and faster solution to BlackBerry. Last summer, AT&T announced that 40 percent of iPhone sales are enterprise, and we just reported on RIM's possible move to devices beyond the BlackBerry. We're not saying it's off to the guillotine with the old standard bearer, but it definitely looks like there are new contenders for the enterprise crown.
Verizon outs Mobile Email 4.0: true push and Exchange support for dumbphones
We imagine that the lion's share of people that need Exchange email access are getting it on a BlackBerry or some other manner of smartphone, but Verizon's covering all its bases here today with the release of Mobile Email 4.0, a dumbphone-compatible release that lets even some of the cheapest handsets in Big Red's lineup (the Octane, Cosmos Touch, and Zeal are specifically called out) in on the corporate action. Besides Exchange support, the release includes a "true push experience," an all-new UI, and Outlook calendar synchronization -- the perfect companion to Exchange email compatibility. It's available now for free if you're on a data plan of at least $15 a month, or for $5 a month with a pay-as-you-go data option. Follow the break for the press release.
Taiwanese Apple suppliers may be forced to raise prices
While the modern global economy has allowed companies in far-flung parts of the world to get into manufacturing, one of the many issues they face is exchange rate fluctuations. Electronics manufacturers in Taiwan are currently feeling the pinch as the Taiwan dollar has climbed more than other currencies in the region, jumping 2.5 percent in the past month and 7.2 percent in the past year. Each percentage point of exchange rate increase translates to 0.5 percent of profit margin according to Wintek, which produces touch panels for many Apple devices. Suppliers like Wintek rarely manage to achieve the sort of enormous profit margins that Apple does when selling to the consumer, and losing 3 percent off the top is tough to swallow. As a result, Taiwan-based companies may have to look at increasing the prices charged to Apple and other customers. Apple's premium pricing to end customers means that it has some flexibility to absorb price increases from suppliers in the short term. That will, of course, hurt its profits, which it won't tolerate for very long. Given the competitive marketplace, Apple will be reluctant to increase prices, but if the exchange rate situation doesn't improve soon, we'll probably see some decontenting or a slow-down in the spec increases. Instead of seeing next-gen MacBooks and iPhones getting more memory or better cameras, they will probably hold steady. [Via Electronista]
5 productivity tips for Mail.app
Like Kelly Taylor from Beverly Hills 90210 and her flings with Dylan, Brandon and Colin, I've been around the block with mail clients, both on the Mac and PC side.That said, I prefer Mail.app. While Mail.app is simple enough for less advanced users, it also contains some niceties for power users. Here are five tips to help enhance your experience in Mail.app. Threaded/Grouping Messages Making sense of who said what and when they said it in relation to who in an email string can be mind numbing. Thankfully, Mail.app has the ability to organize emails by thread, lumping them together by subject. To enable this feature, select on the mail box or folder that you'd like to view messages in threaded form and then click on "Organize by Thread" from the "View" menu. Messages will then be viewed as threads on an individual folder level basis. For instance, when applied to Folder 1, in which subfolders A, B and C reside, only messages residing in Folder 1 will be threaded.
The Tattered Notebook: Six years of EverQuest II
I looked down at the dog-eared journal and shivered. As excited as I was to finally be in possession of The Tattered Notebook, I recalled the fates of its previous owners. First, seemingly out of madness, Seccia made a sudden and unexpected career change to blog about kittens. Now, Scarve, a Ratonga, has disappeared in the night, leaving behind only a wedge of cheese, this tattered notebook, and a tiny stuffed Kerran doll. Rumors spread of his appearance among a shadowy cult of Gnomish tinkerers, but it's unclear whether he's with them by choice or by force. Regardless, I took a deep breath and opened the cover. What a perfect time to begin adding my entries to the journal, right at the celebration of EverQuest II's six-year anniversary! To celebrate, the game is holding its second annual Festival of Heroes, from November 19-30. In honor of this milestone, my first entry into The Tattered Notebook is a retrospective of those past six years, with an eye towards the future.
Dell offering free Venue Pros to employees in exchange for their BlackBerrys
You'd think working for a big tech company would have its gadget-related perks and in Dell's case that's very much true. The big PC vendor has demonstrated its commitment to building up its own smartphone services by offering to trade employees' old and busted BlackBerry devices for the shiny new hotness that is the Venue Pro. If everyone takes up Round Rock on its offer, there'll be 25,000 RIM smartphones looking for new homes soon, along with a sprightly start to Windows Phone 7's time in the limelight. The Wall Street Journal reports this'll cut Dell's mobile communications bill by a quarter, thanks to no longer having to support BlackBerry servers, while also noting that Android variants will be made available in the future as well. Where there's Lightning, there's gotta be Thunder, right?
