Share via

Company argues Outlook app a security risk

Anonymous
2015-06-29T14:45:08+00:00

Having received the announcement that Outlook for Android was available, I installed it on my mobile.  I tried to add my companys email and it didn't work.  There was a message in my inbox saying that access was blocked by the server.  So I then put in a request at IT at the company to unblock.  What happened next was unbelievable.

My company then blocked my email account, arguing that I had engaged in a serious security risk by allowing my credentials to be held on a 3rd party server.  This is crazy I said, this is Microsoft and its an official app just like the Outlook app on Windows PC.

But they pointed me first to the privacy policies of the app:  https://www.acompli.com/privacy-policy/

  which they argued I should have read (yeah right).  And then to a blog in which some people are ranting about the IOS version of the app:

https://blog.winkelmeyer.com/2015/01/warning-microsofts-outlook-app-for-ios-breaks-your-company-security/

 and saying its a security risk.  Is there something I can inform them so that I can get my email account back?  This is most unpleasant and most unexpected to a loyal Microsoft customer.

Outlook | Outlook for mobile | Outlook for Android | For business

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

7 answers

Sort by: Most helpful
  1. Brian Tillman [Outlook MVP 2007-2019] 25,895 Reputation points Volunteer Moderator
    2015-06-30T17:25:09+00:00

    Typically, using Outlook on a PC to access company email is done from within the company network or via secure VPN. Moreover, you can't compare Outlook.exe to the Outlook for Android app. The former is very well known and was, indeed, produced by Microsoft. The latter is not originally a Microsoft product. They bought it from Acompli and it really is anyone's guess how secure it is. In addition to that, the connection methods are probably different.

    What bothers me a little about the company stance, though, is that if they don't want people to connect to their Exchange server with mobile devices, they shouldn't be offering the connection.

    Nevertheless, they make the rules. The employees must abide by them.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments No comments
  2. Brian Tillman [Outlook MVP 2007-2019] 25,895 Reputation points Volunteer Moderator
    2015-06-29T19:10:03+00:00

    Well, your company has the right to make whatever policy they wish. You'll have to take it up with the people who make those policies. They should have an appeal process. This is not an issue with any Microsoft product. It's an issue of how your company wishes to protect its mail system.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments No comments
  3. Brian Tillman [Outlook MVP 2007-2019] 25,895 Reputation points Volunteer Moderator
    2015-06-30T20:35:11+00:00

    You can argue anything you like, and I certainly think accessing your mail from Outlook on your home PC is no more secure than the Outlook for Android app, but are you using Outlook on the desktop or are you using Outlook Web App via a web browser to your Exchange mailbox?

    No matter what you argue, though, our opinions won't count for much. We're not Microsoft, we're just users of the products like yourself. This is an issue you'll need to hash out through your management at work.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  4. Anonymous
    2015-06-30T19:05:38+00:00

    Typically, using Outlook on a PC to access company email is done from within the company network or via secure VPN. Moreover, you can't compare Outlook.exe to the Outlook for Android app. The former is very well known and was, indeed, produced by Microsoft. The latter is not originally a Microsoft product. They bought it from Acompli and it really is anyone's guess how secure it is. In addition to that, the connection methods are probably different.

    What bothers me a little about the company stance, though, is that if they don't want people to connect to their Exchange server with mobile devices, they shouldn't be offering the connection.

    Nevertheless, they make the rules. The employees must abide by them.

    The "rules" are unclear.  For instance there is no restriction on using Outlook from "home" without a VPN.  Can I argue that the outlook app is no more insecure than doing this? 

    I am really under the gun, because the IT folks are shutting down my email with serious consequences.  Like I did something wrong.  Trusting Microsoft is like trusting the Federal Reserve.  Their security is impermeable, whether they originated the software or not - whats wrong with acquiring a company? 

    Or another way of putting it, isn't the Android mail app just as "insecure"?  Please help because I need to get my email access back.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  5. Anonymous
    2015-06-29T20:22:09+00:00

    OK, but I tried to argue that the use of the Outlook mobile app is no more risky to the company security than is the use of Outlook.exe on a Windows PC.  Am I correct?  Thanks.

    Was this answer helpful?

    0 comments No comments