Windows Phones are powerful tools that enable you to work remotely by synchronizing to your corporate email and the corporate network. More and more employees work remotely and use Windows Phones and other mobile devices. However, protecting them is a challenge, because they are small and easily lost or stolen. This guide provides information on securing your Windows Phone.
Topics in this guide include:
•Configuring Microsoft® Outlook® Mobile to Sync with Microsoft Exchange
•Setting the Time-Out Period for the Lock Screen
•Finding a Lost Phone
•Reporting a Lost or Stolen Phone
Customization note: This document contains guidance and/or step-by-step installation instructions that can be reused, customized, or deleted entirely if they do not apply to your organization’s environment or installation scenarios. The text marked in red indicates either customization guidance or organization-specific variables. All of the red text in this document should either be deleted or replaced prior to distribution.
Important
The directions and information in this guide may vary based on the device manufacturer of your Windows Phone and the Windows Phone version that you are using. For information about Windows Phone, see
Before You Begin
To use Microsoft Office Outlook Mobile to access your corporate email, calendar, and contacts on your Windows Phone:
•The phone must be supported by <organization>.
•The phone must have Internet connectivity or a wireless (Wi-Fi) connection.
•You must establish a four-digit PIN.
Customization note: The above bullets represent the prerequisites currently referenced in this guide; this list should be updated based on requirements specific to your organization.
Configuring Microsoft Outlook Mobile to Sync with Microsoft Exchange
Exchange ActiveSync® is aMicrosoftExchange synchronization protocol based on HTTP and XML. Exchange ActiveSync enables you to access and synchronize, in real time, with your corporate Exchange data using any supported Windows Phonethat has an Internet or wireless connection.
To synchronize your corporate email with Exchange, you must subscribe to a data service through your mobile operator and be able to open Windows® Internet Explorer® on your Windows Phone. If you can open Internet Explorer and browse to Web sites, your phone has a data connection. If not, contact your mobile operator for help with establishing an Internet connection.
To configure your phone and create a password:
1If your Windows Phone is connected to your desktop computer, disconnect it.
2If it is a new Windows Phone or a recently wiped phone, tap Email setup on the Home Screen. Otherwise, flick left to the App list, and then tapSettings.
3Tap email & accounts, and then tapOutlook.
4In the User name field, enter your User Principal Name (UPN) found at <URL>. Your UPN may be in the format, but you should use this site to confirm before attempting to sign in.
5In the Password field, enter your corporate password, and then wait while your device discovers the server and begins to sync.
6When prompted, tap Set to begin the device password process.
7Choose a four-digit numerical PIN and then enter it when prompted. If you previously set up a four-digit PIN from an earlier Exchange partnership, you will not be prompted to create a new one. Your old PIN will remain the same. Only a hard reset (wipe) will clear the device of the original PIN. Use the following guidelines when selecting a PIN:
•Do not use your employee number, telephone number, or similar personal information.
•Do not use a simple password that a hacker could easily guess, such as “1 2 3 4”.
•Use at least four numbers, if not more, that have some significance to you or that you can remember easily.
8Confirm the PIN by typing it again.After you create the PIN, the device will begin to sync.
Note
The default timer is set to lock the device after 1 minute of inactivity. You can change this in Settings > lock & wallpaper.
1Slide up the Lock screen to reveal the PIN unlock keypad.
2Type your four-digit PINto unlock the device.
Note
The phone will be wiped after five incorrect PIN attempts. There is no “a1b2c3” safety feature before the fifth incorrect PIN attempt as found in earlier Windows Mobile versions.
Important
•The <organization>Helpdesk cannot recover passwords, device settings, applications, or files on your mobile device. If you lose or forget your password, you must do a hard reset of the device (wipe) before you can use it again.
•Synchronizing with Exchange will not synchronize Notes, Tasks, Favorites, or files. You must establish a partnership between your computer and your mobile device so that you can synchronizeMicrosoft Office documents,pictures, music, and video using the Zune® software. To download the Zune software, go to For more information on syncing files, see “Sync files with my phone” at
Setting the Time-Out Period for the Lock Screen
If your Windows Phone is inactive for 1 minute, by default, Exchange will lock it. You can change this setting so that your phone will lock after a longer period of inactivity. You can choose from 30 seconds, 1 minute, 3 minutes, or 5 minutes.
1Go to Settings, and then tap lock & wallpaper.
2Under Screen time-out, tap the box, and then select the time-out period that you want for your phone.
Finding a Lost Phone
If your phone is lost or stolen, you can manage your phone online to help recover it or delete personal information. You can access these features by going to Sign in using the same Windows Live IDthat you used during phone setup.
Map Your Phone’s Location
1Click Find My Phone, and then click Find My Phone again.
2Follow the instructions in the dialog box.
Your phone will automatically show up on the map.
3If your PC is connected to a printer, click Print map to make a hard copy of your phone’s location.
Make Your Phone Ring
1Click Find My Phone, and then click Ring.
2Follow the instructions in the dialog box.
Your phone will ring.
3After you find the phone, press the Power button on the phone to cancel the ringing.
Lock Your Phone and Show a Message
1Click Find My Phone, and then click Lock.
2Follow the instructions in the dialog box.
The Find My Phone service uses your current password to lock the phone so you don’t need to create a password.
3If you want, type a message that will be displayed on your phone’s screen.Typically this is information, such as an alternative phone number or email address, that someone who finds your phone can use to contact you.
Erase Your Phone
1Click Find My Phone, and then click Erase.
2Select the Yes check box, and then click Erase:
Note
All of your personal data, games, applications, and settings will be erased on the phone. This performs a remote wipe similar to that used with Outlook Web App/Exchange.
Change Settings for Find My Phone
You can change settings for the Find My Phone service that impact performance.
1On your phone, click Find My Phone.
2Select one or both of the following:
•Connect to these features faster (may use more battery). If you select this option, push notifications will be used instead of SMS. These are faster and may use more battery than SMS. They may also be cheaper if you are not on an unlimited messaging plan. My Windows Phone can only send 15 text messages to your phone in a 3 day period. Push notifications have no limit.
•Save my location every few hours for better mapping. Your phone’s last known location can be showed on a map.
Reporting a Lost or Stolen Phone
Regardless of whether your phone is issued by <organization> or not, you are responsible for protecting any company assets or intellectual property that it may contain or that may be accessed by it through the corporate network. insert organization’s “general use” policy name>details the steps that you must take if you lose your mobile device, or if it is stolen. These steps include:
1Report it immediately at <insert organizations security group website URL>.
2Contact the insert organization’s information security group name and contact information.
3Contact your mobile operator to have your device removed from the operator’s data network.
4Perform a remote wipe of data from your phone. For more information, see the next section, “Erase Data Remotely from Your Phone Using Outlook Web App.”If you are not on Exchange Server 2007 or later or do not see this option available, you can remove data from your phone using Windows Live. For more information, see “Erase Data from Your Phone” earlier in this guide. If you’re unsuccessful at wiping your phone with either method, contact <organization>Helpdesk immediately to have a remote wipe of all data performed.
5Change your domain password on the corporate network.
6Notify your manager.
Erase Data Remotely from Your Phone Using Outlook Web App
Wiping or removing data from your device tells Exchange to send an instruction to your phone to delete all data the next time your phone connects to your Exchange account.
Note
You can also erase data from your phone using Windows Live. For more information, see “Erase Data Remotely from Your Phone” earlier in this guide.
1Log on to Exchange Outlook Web App at <URL>.To see a list of server addresses, see <URL>.
2Clickthe down arrow next to Options, click See All Options, click Phone, and then click Wipe Device.
3Click Yes in the Warning dialog box to confirm that you want to wipe your device.
Exchange begins to remove all data from your device. As long as the Status column indicates Wipe Pending, you can click Cancel Device Wipe to stop the data removal.
When Exchange completes the data wipe, it restarts your mobile device automatically. The data wipe deletes all data from your device, including your Outlook email and calendar data.
In Outlook Web App, the Status should change to Remote Device Wipe Successful. Additionally, you should receive the following (or similar) email message:
4Once the wipe is complete, make sure to cancel the wipe in Outlook Web App. Otherwise, your device will wipe again each time you attempt to set it up to sync with Exchange.
Important
- Never leave your portable devices unattended, such as in a vehicle, hotel room, or office.
•Record your device’s serial, make, and model numbers to help identify the device if it is recovered.
•Protect your device’s data by keeping Bluetooth, infrared beaming, and Wi-Fi turned off except when you are using them.
For More Information
•Windows Phone
More Work Smart Content:
This guide is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. © 2012 Microsoft Corporation. All rights reserved.