Prompt to change password within 60 minutes

Gian245 wrote:

Thank you both for your fast responses. She has a university email account set up in mail but I have the same university email set up and I’ve never had this problem, furthermore, how does this let administrators enforce such policies?

To answer the “how” question, when you install an ActiveSync account it installs a security profile in Settings/General/Device Management Or Settings/General/Profiles, depending on which management process they have set up. As long as that profile is on the phone the administrator has control of most of the security features of the phone. It does not give them access to content, only to settings.

One of the features of Exchange ActiveSync is that administrators can enforce policies on devices accessing the corporate (or university) server to ensure compliance with their security policies.

Requirements for encrypted backups, minimum passcode length, frequency of passcode changes, etc. They can also do things like disable the camera and completely erase the device if needed.

It works whether you have an Android device, or an iPhone.

Lawrence Finch wrote:

To answer the “how” question, when you install an ActiveSync account it installs a security profile in Settings/General/Device Management Or Settings/General/Profiles, depending on which management process they have set up.

That's not necessarily true. Installation of a profile is not necessary for ActiveSync to be used to enforce policies on the device.

I have dozens of users with the company email set up on their phones. I enforce passcode length, maximum timeout to lock the device, required passcode changes, encrypted backups, and I can and have forcibly erased their personal devices when they lose them, or terminate and refuse to comply with policy to have IT verify that all protected health data has been removed from the device.

Profile give many more abilities, such as the ability to push apps, delete apps, limit data sync with cloud services, etc.

She probably has a work email account set up on the device, which allows the administrators to enforce policies regarding passcode length and changes, etc.

I agree with KiltedTim. She must have a device which has managed device management from a work or school situation. On their own, iPhone doesn't ask you to change your Passcode at all.