Posted by Charles Edge on July 15th, 2015

We’ve all been there, or spoken with someone who’s been there: you’re looking at a locked device and someone doesn’t know the PIN to unlock the device. On an iPad, iPhone, iPod Touch a Mobile Device Management product such as Bushel can unlock that device by resetting the PIN and allowing you to configure a new PIN. It’s kinda’ awesome when someone forgets a PIN they assigned a device, leaves the company or just plain forgets. But, there are a few things we should probably mention about this feature of Bushel:

  • The device must be online in order to accept our command to reset the PIN. By default, when locked, it should still be on your networks if it remembers them.
  • If no remembered networks are nearby, you could create a new wireless network (e.g. using Internet Sharing on your laptop) and spoof the name and password of a stored network.
  • Wi-Fi information is stored in the secure enclave. If you restart the device then the device will not re-attach to a wi-fi network.
  • You can use a thunderbolt to USB adapter and then a USB to Ethernet adapter in order to physically plug the device into a network and allow the unlock command to process.
  • You can always wipe a device while in the locked state, but most don’t want to do this, so if possible try all the above options first.

Posted by Charles Edge on January 22nd, 2015

There are many an Exchange environment that requires people to add a domain setting when configuring ActiveSync settings on mobile devices. This may be due to the fact that there are multiple forests or domains in an Exchange environment, this may be due to the fact that Autodiscover isn’t working properly or something it may be a configuration problem with how IIS (Internet Information Services) are configured on a server. You probably don’t really care why you need to throw the domain in the Email Settings, just maybe how you go about it.

The first step is to know what the domain is in the form of an annoyingly technical acronym: UPN Suffix. To find that, open up Active Directory Domains and Trusts. Then right-click on Active Directory Domains and Trusts in the Tree window pane. Then click on Properties. Look at the UPN Suffixes tab. This is what you’ll need to enter. You can provide a new UPN suffix if you’d like, but this could break existing configurations so do so with care if you must. Many of our customers could also just call whoever stores their email and ask for the UPN Suffix to use for Email Settings…

When you add new users to a forest, you can then use the new UPN suffix to complete the user’s logon name. That allows you to use the UPN in the Enroll This Device screen so Bushel will send it to devices enrolled. In the following screenshot, note that we enter this as Bushel\. It will be different for most environments.

Screen Shot 2015-01-22 at 10.59.01 AM

Eventually we’ll likely offer a domain option, so you can enter the UPN Suffix as a standalone variable and your users won’t have to type it in manually, but this should help you understand what it is and how to use it for now. Thanks for being a customer!