Mar 12

Written by: CIO/G-6
3/12/2013 3:17 PM  RssIcon

What a difference a year makes! This time last year, the Secretary of the Army had just certified that the Army's approach to Enterprise Email acquisition was in the best technical and financial interests of the Army.

Today, The Army is in the final phase of its migration to Defense Enterprise Email (DEE), and we're now focusing our attention on Army Knowledge Online (AKO) and SIPRNET migrations. With the ongoing support of our mission partners, Defense Information Systems Agency (DISA) and Defense Manpower Data Center (DMDC), we have migrated over 1 Million DEE users to date.

As of February, NIPR migrations are complete for Army Accessions Command, Military Entrance Processing Command, Army Material Command Headquarters, South West Asia, and Africa Command/Horn of Africa. We are currently in the process of migrating the Army Medical Command (MEDCOM). Migrations are complete for Army National Guard and Army Reserve using government-provided computers. We started migrating Army Reserve AKO only users in February and will start Army National Guard AKO only users in March.

We recently began the full-scale migration of 650,000 AKO users, which affects Soldiers, Army civilians, and contractors. At the same time, we're accelerating migrations to DEE on SIPRNet, where we've already migrated 36,000 (out of 86,000 total) Army users.

As planned, some organizations will complete migrations after 31 March—the target date for most of the Army. Once DEE migrations conclude, our long-term focus will shift to the continuous improvement of the DEE managed service.

Many users, especially in the National Guard and Army Reserve, have voiced concerns about losing access to AKO mail on their personal mobile devices. In addition some of the 6,000 Beta Mail users in a Microsoft program have voiced concerns about losing access to AKO mail via the Beta Mail’s more relaxed security.

We are working with our DISA partner to understand the policy and security issues with personally owned devices and are working on approaches to provide access to DEE and other Army data in ways that will not put Army data at risk of loss on these devices. To date we have successfully addressed the issue of access to DEE on personally owned desktops and laptops using OWA, and will continue to work the issue of access on smartphones and tablets.

Meanwhile, DISA and the Army are aggressively working mobile solutions for DEE. There are currently several hundred government-owned iOS and Android devices securely using DEE via DISA-hosted Good Technology Corporation mobile servers. The number of mobile devices is scheduled to expand to several thousand over the next several months. DISA will continue to roll out secure mobility enhancements to extend access to more mobile devices.

As always, I am thankful to the entire DEE team for their commitment to seeing this critical effort through to completion.

Mike


 

 

Tags:
Categories:

115 comment(s) so far...


Re: Army NOWHERE Near Completion of Migration to Defense Enterprise Email

Look CIO/G6 folks,

You guys are totally blowing it for the Reservists/National Guard. Get with OSD/DA/DISA/IA/TRADOC whomever you need, but please fix this festering boil of a EE migration. It is a utter failure to plan and more importantly, a failure of imagination. In 3-5 years when it is obvious leaders will be accessing their AKO via mobile devices, will you be a contributor to its effectiveness and security? Or will you be scrambling to meet way overdue suspenses and long neglected end-user requirements?

The choice is up to you. Senior Colonels, Flag rank, and SES's, I'm looking at you. FIX THIS PROBLEM, and if possible, be more transparent about it, with better communications and training/FAQs/instructions!

Thanks.

V/R,

SSG Deployed
RC-S

By SSG Deployed on   3/17/2013 5:57 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Although SSG Deployed's comments are a little harsh, I concur with his feelings that the DEE migration neglected to plan for the majority of the user population. BETA Mail was the test bed for DEE and proved very succesful. However, when the DEE migration happened many of the features were not included. Including the ability to BYOD, connect to the exchange from a personal system Outlook, and LDAP into the GAL.

The first step in any process is identification of the requirements. If you don't ask the majority of the users what they need, then you haven't identifed the requirements. Where the majority of the users access their official email from a non-DOD system, off NIPR access should be the priority. DEE is simply not ready for the mainstream. Also, pulling the email out of AKO makes AKO irrelevant. Moving to Enterprise SharePoint and milSuite will further attenuate the user groups. We need a combined capability platform in the vision of AKO, but with the horsepower to support the massive amounts of users and data. Finally, TRAINING! Train the users on how to use the capabilities so they aren't doing things like attaching documents to emails. This one step will eliminate the prbolem of PII spillage.

By MAJ TPU on   3/21/2013 4:25 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I agree with SSG Deployed and MAJ TPU on all of their points but there is an even bigger problem lurking.

DEE WILL DIRECTLY CONTRIBUTE TO SECURITY ISSUES!

I have migrated to EE recently and can see that there are several major issues that are going to directly contribute to security issues. The first 2 are issues that will cause users to be unhappy which will cause issue 2 the security issue to happen.

Issue 1: NG/AR Have in the past used AKO email which could be accessed by password and on mobile devices this allowed mail clients and mobile devices to automatically notify users of messages. This is no longer possible and will result in missed critical communication sooner or later.

Solution: Assuming that having full mail access on a mobile platform is out there is an urgent need for Windows, OSX, iOS, Android, BB, and Windows mobile notification applications. This would allow a notice of new messages to remind the Soldier to check. Ideally the notice would include sender and subject.

Issue 2: Overly aggressive link and attachment removal. AKO attached "blocked" to url's in messages so if you really wanted to use it you could. The new blocking strips the url entirely. This will cause issues with some training sites that are used for important additional training that happens to not be on a .mil domain. I'm hoping .gov is also white listed but I've seen those url's blocked on AKO. This is really problematic for those of us in the Intelligence branch as the more sources of information we have access to the better so we have networks of sites across .mil, .gov, and several open source sites. The last of these will be highly problematic.
The other main issue, as reference by MAJ TPU in all caps TRAINING! I can't accurately tell how much of a problem this will be because I can't fine a list of what links or files will actually make it through.

Solution: There needs to be a way to add sites to a white list, possibly with approval, possibly by taking additional anti-fishing training. I would jump through a few extra hoops to have email I can use. File filters need to be reasonable.


Issue 3: Here is the security issue: Due to issue 1 & 2 Soldiers will increasingly uses personal free email in place of mail.mil. There is no way around it. Good security is a balance of security and usability. On this balance mail.mil has messed it up about as bad as possible.

Solution: If you want the part time force to use mail.mil you need to make it usable. Addressing the first 2 issues would be a major start. Figuring out some other type of authentication to allow mobile and client access use would be even better. Possibly a DoD VM that can be run and uses CAC authentication basically emulating a DoD computer for personal use.

I understand the need to centralize and improve the security of email, this however was not the solution. It is URGENT that these be addressed quickly before a large portion of the NG/AR stop using mail.mil and use gmail.com. Once they do it will be nearly impossible to force them back.

By SSG R on   3/27/2013 8:21 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

If you sacrifice convenience for security you only add to the security problem...

In my battalion we have already started to implement a civilian email address roster. As the battalion S6 how am I supposed to communicate to commanders that they have to use this system for their soldiers? If they don't have CAC readers personal computers or Windows OSs.

You have effectively cut off their army secure communication and now they have to rely on third-party providers. Since they can't access their email from Library computers, cell phones, tablets, non-Microsoft OS!

If this was the civilian sector someone would have been fired, but instead they get a bullet on their OER, and helped contribute to making it that niche easier to security breaches when an email is sent outside the network!

You have to use silverlight, S/MIME with Internet Explorer to communicate in OWA. How about Safari, Chrome? No now your stuck with IE in windows only! Get off the Microsoft ban wagon and start adopting truly secure open platforms!

Implementing SMTP, IMAP, or exchange like Beta mail would fix the problems overnight!

By BN S6 on   3/27/2013 12:49 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Full disclosure, I was never a big fan of AKO, but over the years we learned to use AKO and they added a few features (although the search is still ridiculous). We got along.

So, as a reservist, I had very good access to my email through AKO. With EE I have lost the ability to check my email on mobile devices (like Iphone). EE asks me to enter my CaC pin multiple times per session. The GAL and my contacts often crash when doing a lookup. Right now I am trying to send something to my UA and the systems seems to be down. We have become so dependant on email for communications and the new enterprise email does nothing but degrade this capability. It's just plain unstable and not ready for prime time.

On the civilian side I am a software engineer. My customers would NEVER accept such horrible service. Unfortunately we are forced to live with it (along with a ton of other shody applications DoD buys).

Finally, I'm not surprised that the army chose Exchange. It works fine in small deployments and has all the bells and whistles DoD looks for (like good proposal writers). But, as many in the IT industry will tell you it's lousy in large scale deployments.

By TPU Transporter on   3/27/2013 2:20 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

"To date we have successfully addressed the issue of access to DEE on personally owned desktops and laptops using OWA, and will continue to work the issue of access on smartphones and tablets."

Sir, please direct me to the information on how to access OWA on Apple OS X laptops so we can direct the soldiers that use other than Windows machines to the correct ref. site

By John Wayne on   3/29/2013 12:36 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

National Defense University IRMC (iCollege) students mustn't use DEE for their primary email for course registration due to the "link buster" web link blocking. Had to resort to gmail. Attempts to have the EE support team fix the issue resulted in a punt to the service component who must be blocking the sites. The frustration level rises after the transition from AKO (where the links had worked) to DEE where links meant to support soldier MWR and DoD sanctioned education are blocked.

By NDU student on   4/2/2013 3:18 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Firstly, as the CIO/G6 for the Army National Guard it is more imperative today than ever to ensure our networks and government information are secure. "The Army cannot afford the risk and vulnerability of unsecured personal mobile devices accessing Army email…” All users must be on a .mil domain, whether that means migrating to DoD EE, or using Web Mail (OWA.mil) or opting to remain on AKO temporarily. Most importantly is ensuring government information is protected.

Further, in accordance with Army Regulation the use of non .mil email for conducting Army business is a violation of AR 25-2 and spillage of data into the.com domain carries Fiscal and Legal penalties that the individuals involved may be held liable for.

However, from a RC and part-time soldier’s stand point I believe we are seeing the beginning of an on-going issue and that is why we are seeing the same message over and over again. Again, not from my stand point but from a part-time Soldier stand point, it is too difficult for them to access their DOD EE email thus they find a work around. I witness this fact with a personal friend of mine who is a part-time soldier in the USAR who no longer had AKO email and didn't have a CAC reader as hers was still packed from her deployment. We in the ARNG do not support work around answers but it is a bit like me as a teacher enforcing a no gum policy. I continue to educate the populace, I put out policy to support security of the network, and I can only correct the individual when I see it. I suggest we consider ways to make it easier for our part-time soldiers to accesses their email. I believe we will need to have a multi pronged approach because there are four things that a soldier must have to get to DoD EE email; broadband access, CAC reader, CAC, and a PC. Perhaps we should consider providing either a CAC reader or a Thursby read, as not all soldiers have broadband but most have a smart phone/data plans. I believe this is just the beginning of a larger issue. And more work needs to be done to address user concerns.

Reminder: Soldiers they can opt out of migration and/or get a CAC reader from their unit or even buy one off-the-shelf.

By COL Mary Henry on   4/6/2013 11:51 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

COL Mary Henry,
Mam, this statement
Reminder: Soldiers they can opt out of migration and/or get a CAC reader from their unit or even buy one off-the-shelf. Just goes to show how far the disconnect is, guardsmen and reservists should not having to be purchasing one off of the shelf. Should not be having to do a work around, it should be user friendly. I hope this clears it up a little.

By Motorcycle on   4/11/2013 5:29 AM

Defense Enterprise Email--Links in Emails Stripped

Aloha CIO/G6:

As you have heard already above, the new Defense Enterprise Email (DEE), has a lot of issues. One of the most frustrating for me is that the DEE is completing removing any hyperlinks embedded in emails. I receive a variety of military, education, training, personal emails that contain links that I can no longer access via this email system.

Further, if I had the sender direct those emails to my personnel email account, I cannot access my Google Gmail as now those sites are blocked per our organization's CIO policies. So now, if effects my productivity and ability to communicate with a variety of legitimate parties. Frankly, this whole email system has become worthless to me and I don't see any value in using it, as I do have an email account with Defense Logistics Agency, where I work that I will use to receive all my work related emails.

Understand there are a host of security issues, but with overall restrictive policies, you have killed one of the best things AKO offered, which was the email service. DDE, while a replacement, does not provide for same level of customer support. I am not an IT guru, but I know DDE is not working to meet my expectations. Perhaps that is some of the intent of this project, no matter, I am fully frustrated with DDE and find that it does not work for me.

Respectfully,
MAJ Struse

By MAJ Struse on   4/17/2013 5:40 PM

Error Page

I am still and have been getting an error page since March. Is there a solution to this? I have used government and home computers, same issue!!

By SGT John on   4/22/2013 1:25 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I am an Army contractor in Yongsan AG Korea. I have already migrated to DEE. My question concerns what E-mail addresses are displayed in the Global Address List (GAL). The only address that is currently listed in the GAL is my xx@mail.mil address. This is also the address shown in RED in my DMDC account. Is there any way to add my xx@us.army.mil (AKO) address back into the GAL?

By Bill Hefley on   4/23/2013 1:31 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Mail.mil will be the new default email address. I recommend that if you have a CAC with us.army.mil as the default, change it to reflect mail.mil instead. This is to ensure that you do not have encryption/decryption issues, mobile issues, or certificate issues.

By SSG Smith on   4/25/2013 10:07 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

While Enterprise email is certainly streamlining jumping between accounts when PCSing, it does not work very well in the iOS realm (MAC). This causes significant problems when trying to respond to emails from home using a MAC.

By LTC Rizzo on   4/26/2013 1:37 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I won't re-state all the comments I have read because I share the frustration of everyone here. It is funny how no one in the "know" answers these post. Terrible, terrible system. Bring back AKO at least my soldiers could access email from anywhere

By Frustrated on   5/1/2013 12:23 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I am retiring soon, how will this EE transition affect me after retirement?

By JS on   5/2/2013 5:15 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

As an MDAY company commander, I've lost significant capabilities with the migration to DEE including losing email on my iPhone. The issue that creates the biggest problem for the company command team is the tiny email box of 512 MB without the ability to connect my EE account to PST for backup. As an MDAY commander, I rely on email as the primary means of communication; I can't respond to many phone calls nor emails during the day due to my civilian job. As such, MDAY commanders need to ability to see months worth of emails at any given time, however, with this tiny mailbox size, it can barely handle a few weeks worth of doucments to sign, PPTs to read and create, OPORDs to write and review, FRG newsletters, drug packets, etc. Please increase the size of the mailbox immediately so that the company commander and first sergeants are not left without the tools to accomplish our jobs. After all, email is as much a combat tool as a rifle while in garrison and this mailbox size makes us NMC.

It's difficult enough to command a 100 Soldier unit and taking away our ability to store email just makes it nearly impossible.

By National Guard Troop Commander on   5/8/2013 1:54 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Good Morning,

I thought we were getting at least 2 GIGS for our Enterprise mail, but it's only 512 MB?

Please copy my email with your response.

Please advise

Thanks.

SFC Niski

By SFC Raymond Niski on   5/9/2013 12:25 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

The 512mb limit is for basic users but some users can be upgraded to the 4GB limit based on need. This is managed through your chain-of-command and S6/G6 channels. Work with them to get upgraded.

By CIO/G-6 Staff on   5/9/2013 9:09 AM

Epic fail.

Email is a tool that is supposed to enhance the efficiency of our organization. Why is it that I am now spending all of my time, once spent training soldiers, dealing with email issues arising from your utterly incompetent implementation of this utterly unneccessary fix to a system that was working adequately? With this farce you have done more damage to our organization than any talib with an RPG could ever hope to do. Congrats, we have met the enemy and it is the G-6.

By Foreign AND domestic on   5/10/2013 9:49 AM

So much fail, so little time.

Seriously? Is there any sort of planning for reality at any level any more? Mobile access needs to be returned yesterday. Who's bullet point is this nonsense? Unreal.

"Many users, especially in the National Guard and Army Reserve, have voiced concerns about losing access to AKO mail on their personal mobile devices. In addition some of the 6,000 Beta Mail users in a Microsoft program have voiced concerns about losing access to AKO mail via the Beta Mail’s more relaxed security."

And yet there is no progress on this major issue before implementation screws hundreds of thousands in an instant.

By SGT Logic on   5/13/2013 6:42 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

As a National Guard Officer you have made my job 10x harder.
FIX THIS!

No mobile access (How am I supposed to support my COC and soldiers in a timely fashion?)
No one is going to use this. (now I constantly have to hunt down my soldiers email addresses. Nothing like sending an email to hotsoldier32@yahoo.com with the commander on copy. Also now emails are on non DOD servers)
Constant errors. This entire system is a Software Engineering FAIL.
Being prompted every 30 seconds for your CAC pin is FAIL.
But what takes the cake is STOP self signing your certificates it goes against the whole purpose of signing certificate registrars and makes this site INSECURE and UNUSABLE

By 1LT National guard on   5/17/2013 4:49 PM

HELP!

HELP! Is there ANYWAY I can get access to my old AKO betamail account? I need to get to some important information I thought I had already downloaded from that my email account.

By Robin on   5/20/2013 9:06 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Sir,

I worked in a major NEC during the Enterprise Email migration and I can tell you it is nothing short of a catastrophic failure. It is unreliable, it causes Outlook to hang and crash routinely, messages are severely delayed or outright lost with no explaination, and worst of all the GAL is an absolute crime against humanity.

The reason you and all other SES and GOs think it is a success is because somewhere a room full of guys like me are bending over backwards to make sure that you guys get the absolute best possible service and that even the slightest hint of a glitch is taken care of before you ever even think about noticing it. You guys are likely on your own dedicated servers to make sure you don't have any resource problems, or at the very minimum your accounts are moved to the Exchange servers deemed to be the most reliable. You never see any of this action, and your subordinates won't dare tell you it's happening, but you can rest assured that it is. Meanwhile, all the rest of us are left to fend for ourselves on an overworked and unreliable infrastructure that is crumbling under its own weight.

Please stop wasting taxpayer money trying to reinvent the wheel. You had AKO and it worked flawlessly, why did you abandon it? Furthermore, why waste hundreds of millions of dollars trying to build this from scratch instead of just stroking a check and hiring Google or Yahoo to come in and develop a turn key solution that would undoubtedly perform as expected the first time out?

Please try to view this from the eyes of your men in the trenches. We have a job to do and a mission to accomplish, and to have such an enormous hindrance crippling one of the most basic communication methods available to us is doing nothing more than making a hard job harder. Help us make the Army better.

By Technical Guy on   5/20/2013 10:58 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

SSDD

By ski on   5/21/2013 6:01 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

No worries here, we are now sending all unit emails and attachments - of all types - via Gmail and other commercial services now; works fine.

By TPU LTC on   6/4/2013 1:43 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Multimillion dollar failure solution. Please demand DISA enable IMAP on DEE so we can use our mobile devices to check the email and increase storage to 2GB. It is ridiculous that we can't use email clients. Security should be balanced with risk. DOD always chooses the most expensive, useless solution all in the name of security and wastes too much money. Security should be balanced with risk but DOD leadership always overestimates risk. The solution should be secure and cost effective, DISA run email is neither secure because it forces users to use non DOD means to communicate because DEE is unusable nor cost effective because users waste too much time figuring how to access OWA, CAC issues, certificate issues etc. Too complicated all in the name of security. I agree with one of the users Army should have reached out to industry and purchase a solution from Google etc. I am sure GSA and NASA users are pretty happy with their Google Apps implementation of enterprise email. The Army CIO made a mistake by going to DISA because their solution was never ready and is way too overpriced. Just my observation and analysis.

By Unhappy Reserve warrior on   6/5/2013 1:16 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I have had no issues connecting to EE using personal computer via OWA and staying in touch with my Soldiers. Followed steps on militarycac.com configuring Active Client and had no issues. Also my unit supply issued CAC readers which is allowed. As far as the use of mobile devices connecting to .mil email via IMAP or using commercial email for Army buisiness, this has always been a viiolation of DOD and Army Regulation. I always wondered how AKO was allowing it.

By Reserve LTC on   6/6/2013 11:52 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I was "transitioned" to EE about a week ago. Transitioned is in quotes because I no longer receive any new e-mail. I cannot access my EE account, despite following all the different fixes. Of course, the Army saw fit to start forwarding all of my e-mail wiothout making sure I was even able to access EE int he first place. I have a CAC reader at home, have installed ActiveClient, updated it, gone through the IE settings as directed, installed DOD root certs, etc. Nothing. It doesn't work frommy government work computer either.

So here I sit. XO of a National Guard Field Artillery Battalion, a week out from Annual Training, and no access to e-mail. Lovely.

By in MAJ Pain on   6/6/2013 1:09 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Will a solution be broadcast before cut off? I can find no source to assist in fixing this, and stand to lose AKO access in 7 days. Browser, Active Client, System all 64 bit? Check. Tried to install a PIV? RAPIDS site is no use, will not load. I am *the* Reserve Management Officer for all of SOUTHCOM J2, and cut off will be, how shall we say, BAD. Who can I even contact to learn of possible solutions?

By CW2 Glenn Smith on   6/8/2013 8:07 PM

to Reserve LTC 6/6/13

Ref IMAP being prohibited, do you really think AKO would have allowed IMAP all these years without getting the right approvals? It's inconceivable. They were the go-to email service and I'm sure their accreditation was wire tight. The big no-no was always using a commercial provider to pull mil email, e.g., using the non-gov/mil BB so that RIM could use one's credentials and push to a BB. POP (later deprecated) and IMAP were always in compliance as long as they were configured for end user/device use, not some intermediary.

Like you, webmail works fine for me from home or other computers with a CAC, and I find the service fine in general, but there is a huge gap in mobile capability. A battery-draining mobile CAC reader, or gov/mil-only mobile devices, are all just non-solutions.

I think a part of the reason we won't soon see ubiquitous mobile access is demand: the provider likely couldn't handle it. There are some easy solutions that CIO/G6, as the ultimate accrediting authority, could implement: personal mobile devices supporting Exchange ActiveSync could get authorized every couple weeks with a CAC through some portal. It's not an all-CAC solution -- which is really a non-solution for mobile force at large -- but would go a long way in finding a middle ground, like all security must, between a complete lockout and reasonable accommodation.

By dac on   6/9/2013 8:00 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Sir,
With all due respect. Why do you refuse to acknowledge or respond to our comments. We are not random peeps wanting facebook on SIPR. We are Professional Soldiers, WOs, and Officers trying to do our job. As a MDAY National Guard Officer I do have a gov laptop / vpn / Gov BB but I still MUST be in contact.

Mail.mil OWA is constantly unreliable (errors, timeouts, 1 million activeclient popups, the list goes on - YES... my computers are configured correctly).

Mobile access (IMAP) is paramount (honestly, if you cant support some type of mobile access then don't even bother - NO, Having a CAC reader constantly attached to my phone is not an answer and is at best laughable).

It is obvious no MDAY National Guard or Reserve were consulted.

So, Congratulations. I am now going to be using GMAIL. I was the staunchest promoter of using AKO and demanded its use from my soldiers but you have provided us a complete failure.

By Squadron S6 National Guard on   6/11/2013 8:54 AM

Re: Defense Enterprise Email

I just figured it out! DISA wanted this migration to fail for Reserve/National Guard so we stop using the Army Email and thereby cut down on their traffic and costs.

Great plan DISA.

By Enlightened on   6/12/2013 7:22 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I actually lost storage space when the migration happened. Now instead of doing my job, I am using time to find a solution to store all my emails that I need to reference to do my job. You have created another job. May I please have more inbox space?

By Soldier on   6/13/2013 1:41 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Sir,

When will OS X be supported? Many Reserve/National Guard members do not have a computer that runs a Windows OS. Right now soldiers in my unit and myself are non mission capable because we have a Mac at home!

By TPU 1LT on   6/13/2013 7:10 PM

DCIO/G-6 response -- Re: Army Nears Completion of Migration to Defense Enterprise Email

In various comments here, some of you have expressed concerns about accessing DEE, particularly via OWA. We read your feedback, but please understand that if you don't report your problem or concern to the appropriate help desk, the problem is not going to be fixed. Reporting a problem is the only way we know that the service is not operating as expected. And, if you don't report the problem, it doesn’t get fixed for anyone else!

Currently, no large-scale issues accessing OWA are being reported through the larger help desks that support Enterprise Email (e.g., Enterprise Service Desk, ARNG, USAR, NETCOM, MEDCOM, etc).

For help, Basic Class users (512 MB mailbox size, previously AKO-only users) should contact the Enterprise Service Desk at 866-335-2769 for support and to submit a trouble ticket. Business Class users (4GB mailboxes, full-time email users) should contact their Help Desk (e.g. NEC, MEDCOM, ARNG, USAR, etc.) to report issues.

If you don’t get a timely response, then elevate the ticket/ issue through your local chain of command to the S/G6 element. Other resources--like www.militarycac.com or the AKO CAC Resource site--may help resolve issues, e.g., connecting to DoD enterprise email via non-Windows computers.

By Mike Krieger, Deputy CIO/G-6 on   6/20/2013 9:28 AM

DCIO/G-6 response -- Re: Army Nears Completion of Migration to Defense Enterprise Email

On the subject of personally-owned mobile devices – hey, we get it. Mobility is a powerful enabler we all want. The Army is working very hard with DISA and other partners to find an enterprise solution that balances security and access to DEE and Army data.

Until we have a way to assure the integrity and protection of data on personally-owned devices, DoD cannot allow government data on these devices. DoD regulations are very specific that FOUO and PII information may not be stored on unprotected devices. Consequently, we cannot support POP or IMAP access to DEE or AKO.

Two-factor authentication via PKI token (CAC) has been a DoD directive for two years. Systems that were formerly Username/ Password-based (like AKO) must now enforce access via CAC.

In the interim, Apple iPhone and iPad users can purchase a CAC reader and associated software from Thursby Software ($149) to access OWA with the same capability as is available from personal computers. We are not aware of any similar capability for Android devices.

I appreciate your candor and passion. The best thing you can do for yourself and the Army is to enforce security standards AND continue to work with your chain-of-command and the systems in place to correct problems.

By Mike Krieger, Deputy CIO/G-6 on   6/20/2013 9:30 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I have spent approximately 35-40 minutes without success in sending an email through this enterprise service; experiencing the same issues as listed above since March.

Admittedly, I am not a highly computer savvy soldier but am definitely not incompetent. I would consider myself to be on par with the majority of soldiers in the ranks today. I have however been using computers throughout my military career and have never encountered such difficulty in normal communication.

Communicating with soldiers is arguably the most important aspect of what we do and it seems now that the only means of ensuring that my message is received is to pick up the phone and speak to someone directly, or drive two hours to my drill hall and physically drop off a document. The beauty of email is the ability to communicate the same message to a large audience all at once despite geographic location along with the added bonus of attaching documents or other aides for communicating a specific and deliberate intent.

I understand the importance of security but am a little lost on how I am supposed to enforce the use of a tool that does not seem to work.

By D Hayden on   6/24/2013 12:21 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I haven't complained to the Help Desk, because I haven't had a problem with EE --- yet. The day I had an account created and mail sent to it, I redirected all messages back to my AKO account, along with the rest of my workforce. Now a year later it appears that AKO for us will be cut off. I will either find a workaround to that - and get it to my colleagues, or less productivity WILL occur. We do NOT work at desks at all, we are a field support organization. We are not on the NEC anywhere, we are tenants at every base we belong to, commercial or hostpot access only. We utilize Android or Apple phones because half our workforce is contractor and Blackberry will probably be out of business and has not kept up with any forward thinking technologies in 4-5 years.
The idea that you can just "direct" a workforce of 3 million plus to just "get over it" and not do unsecure things is ludicrous and shows just how completely out of touch the upper echelons are with the current workforce. If an enterprise was to run their network similarly, they wouldn't have security concerns because they would be out of business LONG before they generated anything anyone would be interested in.
Now to be constructive, the better approach is to solve the big problems BEFORE you create them:
1. How much of your workforce does NOT sit at a desk with easy availability to a government computing platform? Include your part timers who have a job that are already carrying around another computing platform. Without the analytics, I bet a safe number is half a million, on the low end. This answers the question of yes, we will create a SIGNIFICANT problem and impact to READINESS.
2. How do we solve this as efficiently (cost) and securely as possible? What are the risks to allowing BYOD? The problem is without compromise you get what you have created - another frickin' working group that's "hard at work" solving the problem. And what problem(s) have they even solved in the last 2 years???
And no, I am NOT submitting something to "Ask CPT AKO" because I graduated kindergarten at least 35 years ago. Seriously?
But please, tell me we don't really have a problem so that I can feel better.

By Patrick McKinley on   7/1/2013 3:01 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

PLEASE HELP. YOU HAVE VIRTUALLY SHUT MY BUSINESS DOWN.

I own a small art business started by my 94 year old father (still kicking his heels in Charleston, SC). He was an 8th Army Air Corps pilot in the European campaign in WWII. Ninety Five percent of my business is with The White House, Walter Reed, Dept of Defense...etc. NONE of my emails are going through. They get no notification and I get no notification. I simply get angry emails from my customers asking me why I'm unresponsive. MY BUSINESS HAS BEEN VIRTUALLY SHUT DOWN. Luckily a few have provided personal email addresses and I'm getting the word out. But I have 2,000 customers and only about 10 have been resolved. I have had 3rd party computer repair companies analize my computer operating syatem as well as my hosting company GoDaddy. They say NOTHING IS WRONG. What am I suppose to do ? I provide a great service and an amazing product to my customers....and I'm about to lose everything. Please Help.

By Steve Cannavaro on   7/10/2013 7:22 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Steve Cannavaro, I recommend you contact Mike Krieger, Deputy CIO/G6 directly. His information was readily provided by google searching his name.

Department of the Army
107 Army Pentagon
Room 3E608
Washington, DC 20310

Office Phone: 703-695-6604
Office Fax: 703-695-3091

Email: michael.krieger@us.army.mil

By Technical Guy on   7/22/2013 8:52 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Ever since migration to Exchange 2010, the blocked URL workaround blockedURLHTTPS://link.com is now gone. Thanks again DISA.. once again for adding "ecurity" (hassle) and taking liberty for simple NON-FFOUO items... I know there's been WikiLeaks and Snowden, but like B, Franklin said, we must balance liberty and security.

By Nate on   7/27/2013 4:31 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

There seems to be no response or fix for all the horribly bad consequences of this migration.

No one seems to be able to answer the question of what happens when you retire - do you just lose everything? Do you get migrated back to AKO? Who knows?

It seems that our only current course of action is to contact our Congresspeople and Senators and all the non-gov organizations (AUSA, etc) and VA to see if they can help here. This is a train wreck in progress and the folks in the 21st will just move out smartly to another solution (ie. gmail) if the military does not fix this quickly.

By Frustrated Soldier on   8/2/2013 4:34 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Well I see that I'm not the only one with problems.

I've been working in the IT arena since 1973 when I used computers with paper tape and punch cards.

Now I have zero access to any enterprise email. I thought it was because I had a Macintosh, so I spent the money to get the Thursby software... still nothing. Even after an hour and a half with Thursby tech support. He suggested I try it on a computer on a military network.

So I drive out to Ft. Belvoir and try it on a Windows box - nope, still nothing...

Ever hear of requirements planning? Figuring out what end users need? Really? so I see units now have to use hotmail gmail etc. accounts - that'll guarantee information security... NOT!

By Another Reserve LTC on   8/14/2013 10:06 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

@Another Reserve LTC,
I am close to getting on with my Mac. i just bought it and it is my first. Give me a few week or month and I will have it figured out. got as far as prompting for my password just not able to get passed the secure site connect. I have done this all for free no Thursby. There are bits and pieces of info out there that you must piece together to get it to work. IE AKO for MAC and the Air force also has a site for mac with these two i have gotten this far in less than a week. for the others out there using Microsoft not sure why you cannot connect it was very simple for me. If you do not load your firmware and software in the proper order it will cause you headaches. Mac has been a challenge but so far all of the posts that have said SCR331 older than 5.25 firmware will not work are false. I am using 5.18. I am a NG Soldier and definitely not a tech-y. sometimes trial error is what you need. those of you about to loose your email save them to a folder that is how you ensure they are not lost no you are not going to be able to put them back into DEE but you can open the folder. I agree it is a lot of trouble and could have been thought out better and definitely better instructions as well as continuous updates on how to load with new operating systems IE Mountain Lion Windows 7 and 8 yadda yadda yadda. CIO we can do better than this but you are the only office that is broke. IETMS MSD-V3 severely broke. why does the services need to make there own troubleshooting steps when most everything is a COTS system now? Guessing that is what the politicians do for votes and drum up business.

By SFC GaryE Spear on   8/14/2013 9:25 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Rewrote with better grammar should have checked before posting.

@Another Reserve LTC,
I am close to getting on with my Mac, I just bought it and it is my first. Give me a few weeks or a month and I will have it figured out. I have progressed as far as prompting for my password; just not able to connect to the secure site. I have done this all for free; no Thursby software. There are bits and pieces of info out there that you must piece together to get it to work. IE AKO for MAC and the Air force KO also has a site for mac with these two i have arrived this far in less than a week. For the others out there using Microsoft not sure why you cannot connect it was very simple for me. If you do not load your firmware and software in the proper order it will cause you headaches. Mac has been a challenge but so far all of the posts that have said SCR331 older than 5.25 firmware will not workI am using 5.18 or you must buy Thursby are false. I am a NG Soldier and definitely not a tech-y. Sometimes trial error is what you need. Those of you about to loose your email save them to a folder. That is how you ensure they are not lost; no you are not going to be able to put them back into DEE but you can open the folder. I agree it is a lot of trouble and could have been thought out better. Definitely better instructions as well as continuous updates on how to load with new operating systems IE Mountain Lion Windows 7 and 8 yadda yadda yadda. CIO we can do better than this but you are not the only office that is broke. In the Maintenance field we have IETMS and MSD-V3 that are severely broke. Why do the services need to make there own troubleshooting steps when most everything is a COTS system now? Guessing that is what the politicians do for votes and drum up business.

By SFC Spear on   8/14/2013 9:44 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Mr. Krieger,

I would like to ask how you figure AKO wasn't usable with IMAP/POP? We have been using it for years now, as a matter of fact AKO has the settings for your E-Mail client on the Help Desk. I have been forced to use a Windows computer for a while now and it bothers me that we have not figured this out yet. Windows is far from being the most secure system around, and as a Military we could develop something far more secure such as a Linux based system that can be deployed throughout the force. Did I mention it would be free? So are we trying to help those who own stock options, or are we trying to provide a secure OS? I compiled the DOD Certificates for Mac a few years back and sent them in to AKO's Army Gold Master program. So I may know a little about it.

One of our biggest issues we have today is how mobile we are. In my Unit we do not receive BB's for everyone. So if I am constantly TDY, without a Government computer, how am I to check my e-mail? DISA has kicked me off of the Benning server because I have been gone for over 30 days without logging in with my CAC on the Benning network. Prior to that they were slow to create my account, so I couldn't establish an account on a Government system, it was always a guest account which is worthless.

What is the Unit S6 comments on this? Check it on your personal computer. Ok, so if I check it on my personal computer whether it is OS X or Windows, I am touching FOUO data with an unauthorized system. What sense does this make? I do not understand how we are having these issues today. We have the technology and resources to not only develop our own OS, as well as own it and deploy it throughout the force providing greater security. This would open the door for the "User" to have more access to critical data such as e-mails. It isn't just a matter of webmail being broken, or CAC only access, it is a matter of being fiscally responsible and stop buying into the Microsoft franchise. Yes it will take some time to compile, yes it would mean someone would actually have to do their job, and yes it would mean some would lose money with their stocks.

By Forever TDY on   8/15/2013 9:35 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

We just have to wait for China to hack to system for a decent work around to this system.
Military productivity is cut 75% to protect innocuous routine military email traffic, guess what if you need email security encrypt the email or use that crazy SIPR or TS high side. Skype was so secure until Microsoft purchased it that Russia banned it.
Chalk one up for the enemy US army fights with one hand tied behind back, but send in your trouble tickets which read system works..... sometimes.

By China Will Fix it on   8/16/2013 2:00 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Why are there retired army individuals(not active in last 8 years)no longer working for defense contractors, publishing their email address as a army.mil email and retain an active army email account at tax payer expense? Seems you need to purge the database.
Isn't this a possible security concern? If they are not active, they could pose as an active military individual.

By Concerned Citizen on   8/18/2013 12:51 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

To Concerned Citizen - The reason why we still have email addresses is because we retired and collect retirement pay. The email address is how DOD contacts us. We also have to log in and print our yearly forms to pay taxes. A cost saving measure made several years ago was to no longer print and mail them to us.

If a retiree is also a Defense Contractor afterward he is dual persona to the system. Since one may quit being a contractor but not a retiree (unless he dies) the system lists his as Retired, not a contractor first.

That is why we show up like we do... The DOD contacts retires for many reasons using those email addresses, including recall to active duty if needed. For that reason and others a retiree keeps his email address to his death, and maybe after....

By Retired Army Vet on   8/20/2013 8:33 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Folks we recently updated our content management software and in-so-doing, we lost a blog comment. We thought it was important we reposted the comment below with our response underneath.

Re: Army Nears Completion of Migration to Defense Enterprise Email

I recently purchased a new computer with windows 8, I was able to finally access my EE and AKO for one day after using the off non-AKO site: militarycac.com/EEmail.htm I called the support desk and was advised that the only thing I can do is purchase an upgrade from Microsoft to windows 8 pro. I called again and was told that of the fixes available, none are supported. The Army email is now so secure that even Reserve Soldiers cannot access it. I will now need to resort to gmail to communicate with my Soldiers. Still I am overdue for OPSEC training and signing off on OERs and NCOERs, all will have to wait until my next BA at the reserve center since I can not afford to take a day off from work to travel to our reserve center (with only one working computer in the lab.) This is more absurd that Catch-22.


Response from CIO/G-6 Staff

Windows 8 RT is compatible with CAC Authentication. However, the DoD certificates must be loaded on the computer before the computer will authenticate. This process is required for any computer and OS, but is slightly different than most for Windows 8 RT. Once the DoD certificates are loaded on Windows 8 RT, the computer should authenticate to the site.

While this information is public (see para 5 at: militarycac.com/windows8.htm), we’ll work harder to make sure we help get the word out. For best results, the Department of Defense workforce should purchase computers with Windows 8 Pro or Windows 8 Enterprise. Windows 8 Pro and Windows 8 Enterprise were both designed with the enterprise user in mind and work with DEE right out of the box.

By CIO/G-6 Staff on   8/21/2013 12:35 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

This is the worst email system I have ever been unfortunate enough to be required to use. The difficulty in accessing the email decreases the overall communication potential for a unit in reaching me. This "increased security" has actually led me to resort to most of my communication through civilian email addresses. The inability to access the email on my smart phone is also a burden to communication.

Furthermore, government-specific programs like Microsoft's outlook discounts work by sending a link to your government email address. A link that is then completely blocked and unaccessible.

AKO was far superior in almost every way. Enterprise email is simply terrible.

By MAJ James Andrews on   8/25/2013 7:41 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

A CAC reader that connects to Android would solve the dual authentication issue. I would even pay for it if it existed to perform my job requirements as an MDAY officer. I cannot access my client during the day because my laptop is not authorized at my daily job. A cell phone work around that would allow communications to continue would be greatly appreciated. The only alternative would be to issue secure mobile devices to all leadership which I do not see happening. I sadly will have to continue to do business using personal accounts for contact and official mail after hours which wastes time that is always in short supply. I am frustrated to say the least.

By ARNG LT on   9/3/2013 7:30 PM

If ain't broke, break it.

The BYOD issue is well defined in the above comments. The Army historically underestimates the intelligence of the average soldier to work through things that are problems by finding creative alternatives. Whether it's hedgerows in Normandy, finding true IMAP clients for blackberry devices to work around the blackberry mail ban (but who would do such a thing!), or simply choosing commercial service in lieu of a system that doesn't meet their needs, they'll find a way. You see, their unit leaders aren't going to cut them slack on getting OERs filed, getting training schedules out or making sure that convoy clearances are processed simply because the Army/DoD didn't provide an email system that worked.
It is truly amusing because you have now created a less secure system simply because people will avoid using it. And, had this enterprise email system been tested (novel concept, I'm sure) by anyone who was actually a drilling reservist outside the Pentagon, maybe this would have been discovered.
As a project manager, I've seen it happen dozens of times--massive enterprise systems fail because they're too big to properly govern and test. Then there is a descoping that occurs, and the senior leaders responsible for the decision bolt for the door before the roof caves in on the project. They get their awards and promotions before the collapse, and the next guy in gets his awards and promotions because he trying to fix the previous guy's (unadmitted) failures. (Can you say 'DIMHRS'? Better yet--'DOD ERP'?)
DoD is pulling the plug on AKO just as it is reaching maturity. Based on the comments above, the intent is to attempt to fix the new system (or ignore the problem). Sadly for the folks using the system, there is no going back, and the fixes will take years to implement.
I'll keep using AKO as long as I can.

By USAR LTC (CISSP, PMP, ITILv3) on   9/6/2013 1:22 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Is the Army/Guard going to issue everyone a CAC reader now that we can't forward e-mail to our mobile devices or log in without putting in our CACs? I don't specifically have a problem but my Soldiers that can't afford CAC readers do.

I also can't enable settings to digitally sign or send encrypted e-mail. What's the point of a CAC!? C'mon man...

By 1LT Holloway on   9/12/2013 4:01 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Don't get me started on dual persona either. 3 months for DMDS to get my PIV cert working.

By 1LT Holloway on   9/12/2013 4:04 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

This reservist and most of my Soldiers can not get on the system at all when not using an army computer. I tried to log on once an after an hour of the globe spinning went to Netflix and streamed a movie. This is another example of Reserve Soldiers being asked to fight year after year and then disenfranchised from Regular Army. After the price the reservist has paid it would be nice if the people at the table viewed us as more than an after thought. Frankly talk of work arounds should be reconsidered, let the system fail. I use gmail now...

By SFC Stuart on   9/12/2013 7:18 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I am a Reserve Signal Officer and on the civilian side I work in IT support. I have many opportunities to compare those two experiences and their unique challenges. Recently we changed our email service (civilian IT). It involved a great deal of user training, expectation management, and increased help desk support. We had a team in place to do that, we had meetings about the email transition, and we prepared to deal with it. Because we were proactively ready and staffed to deal with our users problems and concerns I think that the transition went fairly smooth.

On the military side I think that the planning and coordination was even better than my small IT department could ever have been. I can't even imagine conducting such a large transition across such a huge organization. But I think that is the difficulty. Without dedicated positions at the lower levels in the Reserve to support IT and KM, there is no one to help train the users, to be an advocate for them and their unique and legitimate concerns, but also have the technical expertise to enact bottom level solutions.

From my experience working at Battalion and lower I see an increase in the demand for IT and KM but I haven't seen the support rise within the units to meet that demand. The call center has become central to IT/KM support. The downside is that a call center help desk is like a fire department. When a house is burning down you call for a fire truck. No matter how fast the fire truck gets there some damage is done.

On the other hand, a fire inspector gets to know his community and helps them anticipate and prevent fire hazards. He knows his community and he is a fire expert and advocate.

I strongly believe that most of the frustration with Enterprise mail in the Reserve and National Guard is from a lack of Fire Inspectors in sufficient numbers. IT and KM are rapidly becoming just as important as Supply, Personnel, and Operations but are not resourced that way in the Reserve and National Guard right now. This issue is especially important because of our dispersion and our need for relatively secure, absolutely simple and reliable asynchronous communications.


By Army Reserve Officer on   9/15/2013 6:16 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

We have actually thrown in the towel at my unit. We maintain a list of everyone's personal email accounts and send everything that way now. The main reason? Actually the only reason, is notification. If there was a way to be notified that an email was there, the senders name, and the subject line, we would be fine. If we could have that information sent to our smartphone, we would actually make enterprise email work for us.
I'm a c++ and java programmer on the civilian side and have been doing it for 20 years. Trust me folks, this wouldn't be hard at all. And the security exposure would be negligible.

By TPU Sgt on   9/17/2013 12:42 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I don't even know where to begin. I work for one of the oldest & largest IT consulting companies in the world - you should have called us. I now use Gmail for all organization-internal communication.

By Former AKO User on   9/19/2013 8:55 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

As a BN CDR with short suspenses from higher and a critical need to communicate frequently and efficiently with my BN, you can expect to add another 583 soldiers amassing at your doorstep requesting a better solution to our current obstructions with email. Otherwise, simply expect that the Reserve / National Guard forces WILL resort to commercial email solutions to conduct daily/ordinary communications among ourselves.

G6, failing to acknowledge this inevitable fact will lead to the same result as trying to fight an insurgency force with an Armored BDE and using conventional tactics > waste of time, resources, and ultimately ineffective.

By BN CDR on   10/1/2013 2:39 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

This is just stupid. After four weeks and countless e-mails, I still cannot access enterprise e-mail. The govt computers are not set up properly to meet the requirements for PIV activation. As I'm in an environment where PIVs are rare, the IMOs are unfamiliar with the problem.

By Retiree/Contractor on   10/6/2013 6:16 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I concur with BN CDR above. You can regurgitate regulations until you're blue in the face. We get it. What no one > DIV gets is that we need a solution that delivers an adequate BALANCE. This all-or-none security mentality is what is driving unworkable solutions to everyday problems. I understand the need for security, but I also understand what happens when I miss a suspense because I can't follow a link (thank you SO MUCH for micromanaging my emailed hyperlinks) or when I can't access this failure of a webmail solution from my phone while traveling. My Soldiers fear the real consequences of failure more than they fear the email police, so they continue to find workarounds. I'm right there with them on that one. Until this thing becomes workable, I will continue to check my SMALL inbox only during drill weekend. Good job.

By Former AKO User on   10/10/2013 7:32 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

***"In the interim, Apple iPhone and iPad users can purchase a CAC reader and associated software from Thursby Software ($149) to access OWA with the same capability as is available from personal computers. We are not aware of any similar capability for Android devices."***

So, let me get this straight. We have immediately eliminated a bare minimum of 52% of the market share users of the US Military from accessing their email, assuming that they follow the statistics of the US as a whole (52% Android Users) and we still consider this a success?! That leaves an absolute maximum success rate possibility of 48%, and that's not only monumentally optimistic, it's STILL failing on any scale.

Secondly, perhaps we should check our Military pay scales again...real soon. The average private, after taxes, will have to spend 11% of their base pay for a month just for the program suggested, and then purchase a CAC reader, and I certainly hope they already have an iDevice, because then we want them to buy one of those if they don't? This is not only an unrealistic expectation of our Soldiers, it proves that senior leadership has lost touch with reality.

I'm certain that Thursby Software is loving the Department of Defense official plug though...I should have bought stock.

***"I appreciate your candor and passion. The best thing you can do for yourself and the Army is to enforce security standards AND continue to work with your chain-of-command and the systems in place to correct problems."***

The best thing I can do for myself and the Army is to explain the old Army adage again. "If something is stupid, but it works...it's not stupid" The unspoken addition to this is "However, if something is stupid and it doesn't work, then it's unbelievably stupid." This migration falls center mass into the second category. I haven't received an email through an official source since December of 2012. And I couldn't care less. I get my information through email, text message, and a dozen other unsecure methods that are absolutely stupid. But they work.

This migration is indicative of the path our military is taking. We use a small test group under controlled environmental conditions to test bed something that will be utilized so far beyond the scope of the test that the final product doesn't even resemble the initial need. MRAPs in Afghanistan, Body Armor that causes overheating, anyone remember the pocket breathalyzer? No longer is it don't drink and drive, it was "Drink and then blow in the little yellow tube...if it's (pink, green, blue I don't remember) then you are ok to drive home." ?!?!

So for clarification and closure of this rant.

1. We should not expect our Soldiers to purchase gear to stay informed...what's next? We need you to bring 200 rounds of 5.56 to drill?
2. We should not continue to bang the "Great Success!!" drum so loudly that we suppress the realities of our failures.
3. We as an Army need to realize that the attempt to make everything secure is doomed from the beginning. Too large of scope, to many work around points. NIPR for non-secure...SIPR for secure. Separate our material. If I need security, I'll go into the base and send on a dedicated line. If I am sending a weekend reminder to my troops to stay safe...I won't.
4. Let's play the realistic card and fix this email system. Otherwise, plan on getting messages sent from SurferDude#1@yahoo.com and similar.
5. The odds of this changing for the better are precisely ZERO. We screamed about AKO's failures for years. How I regret that. If I had any idea that the new email system would strip every ounce of usability out, I would have stayed quiet.


By OEF n OIF CPT on   10/21/2013 5:55 PM

In response to all the responses :)

Brace yourself!

1. In regards to password login- It will never ever happen. In accordance with AR25-2 credentials should be something you are, something you have, and something you know. As all of us 25B10's know, this is absolutely true. We also know that worrying to much about usability can compromise security. But, at what point will the decision be made that only thinking from a security stand point destroy this product (and eventually it will)? If it is up to a security team they will lock everything down, and if that's the goal then it is absolutely being accomplished as the most secure system is one still in the box.

2.Hyperlinks/a hrefs- say goodbye to AKO allowing you to erase blocked, and at least see what url you are not getting to! Now webmail completely strips the url and forwards you to a page telling you it's been striped "for your security". Well if I'm attempting to inspect the URL, and going as far to view the source code of the page to see if there is any possible way I can decide that...I cannot because the Army now makes that choice for me. Question, if I need to do correspondence courses and I forgot my password what do I do? I know it's not a DISA/Army issue so I'd call their help desk, or alternatively use a password reset option..........................:D Guess again, that sends an a href to reset the password which you cannot get too, guess you should have written those passwords down that you don't use that often. Which leads me into my next point.

3. Single Sign On- Remember the awesome times you've had where you don't have to remember a set of credentials for every single site you login to, since you've already authenticated to AKO? *Fart Noise* Say goodbye to that. When AKO goes away single sign on will no longer be offered forcing you to have to CAC login to DFAS, HRC, etc etc, those sites that do offer passwords, well I hope your memory is good, because according to AR25-2 you should have a different unique password for every system you log into.

4.Retiree/family accounts- Womp womp, guess again, these email accounts will no longer be offered. Until the decision is decided to start automagically giving retirees, and family members CAC's, you all will no longer be offered a .mil account.

5.Dual status- I'm sure you're all aware by now, but you need the PIV cert. Can you update it in your machines current state? Probably not, you will need to update Active Client, apply a hotfix to it, and probably several other things before you can add the PIV cert. According to DISA, dual status accounts are an extremely small fraction of users so prolonged process to get access isn't a big deal. Once you eventually get it working if you're dual status congrats, if you run into any issues good luck because the "Army Enterprise Service Desk" is really a bunch of non-IT folk that use FAQ's created by the old AKO help desk. If you don't believe me, next time you run into an issue other then an AKO password reset count the number of times you're put on hold, and how long you are on hold for.

Who is to blame for all this? Every single soldier who every complained about AKO! I loved AKO and services offered by it. Those who claimed to be IT professionals, tech savvy people, and claimed the issue was with AKO, are all the ones to blame for the services that we will lose when the Army finally can get rid of it. Well them and the Army's misguided opinion of how secure something is.

By Secret Pants on   10/28/2013 11:30 AM

In response to all the responses :)

Brace yourself!

1. In regards to password login- It will never ever happen. In accordance with AR25-2 credentials should be something you are, something you have, and something you know. As all of us 25B10's know, this is absolutely true. We also know that worrying to much about usability can compromise security. But, at what point will the decision be made that only thinking from a security stand point destroy this product (and eventually it will)? If it is up to a security team they will lock everything down, and if that's the goal then it is absolutely being accomplished as the most secure system is one still in the box.

2.Hyperlinks/a hrefs- say goodbye to AKO allowing you to erase blocked, and at least see what url you are not getting to! Now webmail completely strips the url and forwards you to a page telling you it's been striped "for your security". Well if I'm attempting to inspect the URL, and going as far to view the source code of the page to see if there is any possible way I can decide that...I cannot because the Army now makes that choice for me. Question, if I need to do correspondence courses and I forgot my password what do I do? I know it's not a DISA/Army issue so I'd call their help desk, or alternatively use a password reset option..........................:D Guess again, that sends an a href to reset the password which you cannot get too, guess you should have written those passwords down that you don't use that often. Which leads me into my next point.

3. Single Sign On- Remember the awesome times you've had where you don't have to remember a set of credentials for every single site you login to, since you've already authenticated to AKO? *Fart Noise* Say goodbye to that. When AKO goes away single sign on will no longer be offered forcing you to have to CAC login to DFAS, HRC, etc etc, those sites that do offer passwords, well I hope your memory is good, because according to AR25-2 you should have a different unique password for every system you log into.

4.Retiree/family accounts- Womp womp, guess again, these email accounts will no longer be offered. Until the decision is decided to start automagically giving retirees, and family members CAC's, you all will no longer be offered a .mil account.

5.Dual status- I'm sure you're all aware by now, but you need the PIV cert. Can you update it in your machines current state? Probably not, you will need to update Active Client, apply a hotfix to it, and probably several other things before you can add the PIV cert. According to DISA, dual status accounts are an extremely small fraction of users so prolonged process to get access isn't a big deal. Once you eventually get it working if you're dual status congrats, if you run into any issues good luck because the "Army Enterprise Service Desk" is really a bunch of non-IT folk that use FAQ's created by the old AKO help desk. If you don't believe me, next time you run into an issue other then an AKO password reset count the number of times you're put on hold, and how long you are on hold for.

Who is to blame for all this? Every single soldier who every complained about AKO! I loved AKO and services offered by it. Those who claimed to be IT professionals, tech savvy people, and claimed the issue was with AKO, are all the ones to blame for the services that we will lose when the Army finally can get rid of it. Well them and the Army's misguided opinion of how secure something is.

By Secret Pants on   10/28/2013 12:07 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

OH YEAH! And one more thing, a migration is moving my email to a different server. Not creating a brand new email address. The concept behind your email migration is flawed. Our emails were moved, our mailbox was not, hence the reason it is now @mail.mil instead of @us.army.mil. Next time the Army decides to buy services from DISA they need to remember how outstanding every product they have produced so far is, seeing as how they can barely deliver on it...yet the Army keeps buying services from them.....weird.

By Secret Pants on   10/28/2013 8:00 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

All I want to do is unsubscribe from websites that were sending me newsletters but all I get is "https://web-okc.mail.mil/owa/UrlBlockedError.aspx".

I can't even open up an card from family while deployed without getting that message. Aside from that no complaints.

Speaking of CaC for Mac, I am on it right now.

By MSG R on   11/12/2013 1:42 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Here is what you need for Mac, best used with a SCR331 Cac Reader. Go to your keychain access and reset to defaults.

I have the .pkg that uses it perfectly with AKO and my SOCOM OWA. No issues. Even have the Big Boss' staff using it.

You wont be able to use the forms and such BUT since the Army is getting smart to use Adobe it'll work fine.

"Unblock the links!"

By MSG R on   11/12/2013 1:48 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Here is what you need for Mac, best used with a SCR331 Cac Reader. Go to your keychain access and reset to defaults.

I have the .pkg that uses it perfectly with AKO and my SOCOM OWA. No issues. Even have the Big Boss' staff using it.

You wont be able to use the forms and such BUT since the Army is getting smart to use Adobe it'll work fine.

"Unblock the links!"

By MSG R on   11/12/2013 2:25 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

It would be nice to have a mobile theme along the lines of what Exchange 2013 provides.

By your name on   11/14/2013 8:37 PM

Copying my historical AKO Webmail

AKO Team,

I am retired, but still a contractor (albeit with the Navy). I have copied my AKO folders to my computer, but have not been able to copy all of my e-mail folders to my computer.

Is there a way to do that? Please advise.

Thank you,

Bill Mayo
william.a.mayo.ctr@pacom.mil

By Bill Mayo on   11/15/2013 6:01 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Hi! If you sacrifice convenience for security you only add to the security problem...

In my battalion we have already started to implement a civilian email address roster. As the battalion S6 how am I supposed to communicate to commanders that they have to use this system for their soldiers? If they don't have CAC readers personal computers or Windows OSs.

You have effectively cut off their army secure communication and now they have to rely on third-party providers. Since they can't access their email from Library computers, cell phones, tablets, non-Microsoft OS!

Thanks!
Rob J.

By Rob J. on   11/16/2013 2:50 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Hi! If you sacrifice convenience for security you only add to the security problem...

In my battalion we have already started to implement a civilian email address roster. As the battalion S6 how am I supposed to communicate to commanders that they have to use this system for their soldiers? If they don't have CAC readers personal computers or Windows OSs.

You have effectively cut off their army secure communication and now they have to rely on third-party providers. Since they can't access their email from Library computers, cell phones, tablets, non-Microsoft OS!

Thanks!
Rob J.

By Rob J. on   11/17/2013 6:23 AM

Poor Implementation and High Security Risks

I would like to say I'm unbiased, however, I do not feel that it is possible when we have a conversion from a system where I have communication with my unit and Soldiers, to one that simply refuses to work.

I would not mind using Enterprise Email, but first it has to function. If my Soldiers do not function I give them feedback regarding what is wrong and how it needs to be fixed. If that fails, then I, like the rest of us, have to get less nice.

The deficiencies of this system are multiple, so I will restrict my list to the ones that affect myself, my Soldiers, and my unit.
* In an effort to enhance security, they have eliminated communication between large masses of Soldiers. While I feel this should be obvious, let me illustrate the fallacy in this. Write a message, and put it in a sealed iron box and drop it in the ocean. According to the supporters of EE, they will applaud this approach because of the increased security. However, there is now no point to the message. Comparing it to AKO, before the military had a means of handling the communication. Now, if the communication is to occur, it will be outside the system intended to distribute it.
* There is a very high up stubborn mule who is hellbent on making this broken situation work. The accessilbility problems have been present for months. The usage of third party email to handle military communications has been going on for months, and is increasing steadily as the inflexibility of this system causes more and more communication lapses. Responsible leaders have a duty to take responsibility for plans that do not work, admit that they do not work, and then adjust the plan so that it does work. There is a large appearance of unaccountability for the maintenance and implementation of enterprise email.
* The requirement of CAC login without any alternative for the common Soldier is ridiculous. Soldiers need to stay in touch regardless of whether they are near a computer or not. A requirement that all Soldiers carry a CAC reader to check their email on the go is absolutely irresponsable. It's like requiring people to carry a mouse in order to use the graphical interfaces on their smartphones.

Let me make this absolutely clear. This system does not work as is. Anyone who comes in and hides behind regulations is avoiding the facts.

For this solution to work, it needs:
* Accessibility: This would probably work best by including more than one way of getting in beyond mail.mil. Mail.mil is broken too much to be reliable. IMAP would work well.
* Maintanence support: If there is an issue with enterprise email that is loudly vocalized, it needs to be acknowledged there is an issue, and a proposed solution/workaround/time to resolution needs to be provided. Because this is not done, people are resorting to third party emails and increasing the security issues.
* Portability: AKO was portable. You could check it on any computer or any smart device. This contributed greatly to usability. Replacing AKO with something less usable hinders progress and effectiveness.

People who say that having accessibility and portability will make it too unsecure are thinking far too in the box. Instead of making a system that securely handles overwhelmingly benign mail with the occasional secret/top secret message, why not make a smaller system to handle ONLY the emails needing the extra security? That relaxes the restriction for the rest of the mail and promotes effectiveness. Don't make a bottle to contain the cow when you really just want the milk.

-SGT O.

By SGT O on   11/19/2013 10:11 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

The new system is horrendous. Can never login. Insane. Good work with this shit you call a fix. Its too bad you fucks own me for another 2 years. Cant wait to be done with this crap. yes I am that mad, all because I cant login to enterprise. No first line leader I did not do that shit because I couldn't get on. What A joke.

By Richard Smith on   12/3/2013 2:52 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I would love to be able to comment about Enterprise Email, but after months of trying to get on the site, I give up. I haven't been able to find a single machine, government, personal, or otherwise, where I can get my CAC work. I have yet to access my account a single time, no idea what type of correspondance I am not getting.

By LTC Mc on   12/5/2013 6:43 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Migration of MILDEP unique e-mail to the DOD enterprise e-mail system is directed by the DOD CIO to align with U.S. Government-wide directives. The entire Department is moving towards this environment regardless of your personal views. Secondly, protection of DOD data is more important than accessing this information on a mobile platform (although it's able to be done- I am accessing mail.mil using OS X occasionally since the Department took my mobile device to reduce cost). I also have colleagues that access mail.mil using an iPad with a CAC reader which lacks the ability to S/MIME as that functionality is Microsoft specific in OWA. Remember that spillages that occur on personal devices can be confiscated by the Department for cleansing or destruction.

E-mail of .mil information to non-.mil or .gov accounts is strictly prohibited and in breach of DOD policy. DISA is the agent to support DOD Enterprise E-mail and should be able to address your needs (provided that you are able to provide the mission context- not a "because I want to, or for convenience").

By OSD on   12/13/2013 12:28 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I give up - I will never get anything other than a boilerplate response. Enjoy your new system.

By Former AKO User on   12/16/2013 12:37 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I should have known something was amiss when I noticed that this blog often double-posts comments. And no, I did not click the 'Submit' button twice.

By Former AKO User on   12/16/2013 12:51 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

The Army is currently closing AKO accounts to retirees in 2013. Retirees make up a significant DOD Contractor population.

Current Policy is to establish an AKO account to conduct CAC Card processing.

How will this be handled now for personnel who support several missions a year, not necessarily contiguously?

The level of effort at this scale would seem to be prohibitive. So how will this be organized, any FAQs?

By A Fowles on   12/16/2013 4:58 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I am a current Government Employee. My agency does not use Enterprise Email. BUT my home agency email address is an alias on my CAC which drives all emails from DOD personnel with an Enterprise Email account to the CLOUD instead of to my Exchange Email at my Agency.I was at my new agency for 4 months before I realized that AKO had migrated -- I had 900 emails many with actions requested that I'd missed.
I have been unable to locate directions to setup or import the information from my Enterprise Account to my Government Laptop as a secondary address. Even if I am able to do this periodically, then I can setup a PST file for my Enterprise mail. Currently, I cannot forward any information to my agency -- It just loops back to Enterprise. And I can't download any emails -- just the attachments can be dragged to my desktop. Otherwise, I have to send the email to someone outside DOD to have them send it to my agency address to get the information on my laptop. Anyone have any suggestions?

I can't even update my duty address in Enterprise Mail. The field isn't on a tab that I have access to through MILCONNECT.

Really frustrated.

By ARF on   1/14/2014 10:18 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

This enterprise email is such a joke no wonder we don't use it unless on post even then we try to avoid it. I am now in the training room and I don't ask for there ako email for my alert roster but a civilian one as in Google, yahoo or even Firefox. Whomever designed this cancer should be fired and made to pay the soldiers money for time wasted and hassle I mean serourisly how many civilian computers come with a cac card and then if you click the wrong certificate it just blocks you or if your browser isn't compatible this reminds me of the ACU we now wear cause the army wants to fix something that is not broken

By SGT Wilcox US ARMY on   1/17/2014 1:51 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Somebody stop the madness. The migration has been an utter failure. As a commander of a company, we have reverted back to using hotmail, gmail, yahoo to push out information for Reservist. Somebody is feeding the powers to be, complete false information in how great this system is. My unit has spent thousands of dollars of Soldiers time just trying to log in. And how about the Soldiers using Macs. Advice to the Senior Flag Officer in charge of the program, please fly down to some Reserve Companies and ask the Soldiers about their problems. You may want to have some of your lower enlisted do it so they give you accurate and real info and not what the command wants them to tell you.

By CPT X on   1/28/2014 5:11 PM

Re: FAIL for USAR: Army Nears Completion of Migration to Defense Enterprise Email

As a BN Commander, Entreprise email is a failure. I rely on first line leaders to communicate and collaborate on the new Entreprise system but it is a failed launch for Reservists. The majority of my Soldiers are using GMail, Hotmail, AOL, etc because their CAC reader isn't always with them or they are on MACs that are not fully integrated yet into Entreprise. This poses more of a risk as now Personal Identifiable info PII is flowing outside of AKO. Additionally, AKO had over 1GB of space, I am deleting daily important emails, awards, evals, loss packets, DDR packets due to "over my limit" messages. Summary: not easy for Reservists not working on a government computer to sign in with a CAC reader while at school or traveling, it has limited storage space, and difficulty with MAC (popular with the younger Soldiers),

By LTC Berriman US Army on   1/31/2014 3:27 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

EEmail is the worst "upgrade" the Army has done yet. It has effectively killed secure communication for NG/AR Soldiers and made it nearly impossible to enforce AR25-2. When you have to send the link to the website to view the reg (USAPA Eforms) from and to a commercial email because EE strips the URL, its a complete smack to the face of credibility and integrity. I no longer even remind the Officers and NCOs I support to not use commercial email when sending FOUO, I just shrug and wait to see the files with PII, troop movements, readiness statistics and deployment planning information on WikiLeaks.

And Mr Krieger, shame on you for even suggesting that Soldiers pay out of pocket for a "workaround" software/hardware package. They shouldn't even have to do a "workaround". The G6 should have made sure it supported the Force before it was implemented. And as for applying for an upgraded account, the Ohio NG has denied every request for every user that was not an O-6 and above...including all MDAY commanders, 1SGs, and BN/BDE staff. COLOSSAL FAIL.

By 2LT NG S6 on   2/5/2014 10:35 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Not to beat a dead horse even further, but as a full time Active Duty military officer who does not happen to work on post (.mil network), haven't been in the last 3 and a half years and won't for at least the next 3 and a half years, I agree with the issue of mailbox storage. While it is not my primary email, there is plenty of correspondence that comes from my unit and my mailbox stays full. Since I am not on a post, I cannot pull everything down into a .pst file. Even if I were to go to a post, I cannot log in to a government computer because I am not assigned to a NEC and I imagine it would be even harder to get a local account created just to pull down a .pst file every now and then.

By DoD MAJ on   3/10/2014 2:16 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

i have yet been able to migrate to the Enterprise email since it's inception. I have done help tickets to no avail.

By Krisna Brown SGT ARNG on   3/23/2014 2:10 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

What happened to centralized planning and decentralized execution? EE is yet another example of how badly DoD and our Army have lost their way. Attempting to resolve even simple issues becomes a nightmare. At the unit or DOIM levels we have very limited capability to fix what used to be simple problems. Now it's a process of entering a ticket that is re-entered multiple times as it moves up the chain. We merely wait for someone far less competent but much more beaurocratic to tell us nothing more than our ticket is escalated. I concur with the security issues already discussed. Our units use similar workarounds. Now our patience is wearing thin with the BES to Good to Mobile Iron fiasco. Regardless of what anyone says, DISA to NGB weren't interested in hearing the impact to the field. Your heads are so far in the clouds that you're truly convinced you're saving money and providing useful service.

By NG User on   4/3/2014 6:04 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

The Army has completely failed to provide a system that works for reservists. I work in IT and I've had no problems with AKO at home without any problems for 10 years.

Each time I get enterprise email outlook web application (OWA) working at home, it breaks the following week, always with the same error. When logging in, once I select my e-mail certificate and enter my PIN, press ENTER

Error Code: 500 Internal Server Error. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator.

I've spent the last two hours trouble shooting it. I called the EE Helpdesk.

"Hi, I'm a reservist and I'm having trouble accessing OWA from my home computer"
"Sorry we don't support home personal computers" (to his credit he did attempt to help me, but it wasn't anything I hadn't already tried from militarycac.com)
"How am I supposed to check my e-mail? My unit's 2 hours away"
"That's a good question, can I help you with anything else?"
"No, thanks bye"

There is literally no way for me to conduct military e-mail correspondence.....how is the USAR as an organization supposed to function? Guess it's back to unsecured gmail for this officer.

By 1LT USAR on   4/10/2014 5:29 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

This goes back to individuals/knuckle draggers. But from this blog, it looks like communicators are finding difficulty too. Common denominator: They will either talk through you or around you. In the 21st century it is their choice. We are out of the days where there were three channels on TV and two communicaton platforms in the TOC, but some leaders don't or won't understand this aspect of the 21st century. Now there are many communication channels, and it is just as important to undersatnd where one receives information as where it is transmitted. If the receive is too difficult, then one with common sense can only expect those in need to use another route.

By HKD on   4/25/2014 8:28 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

With due respect.... the enterprise webmail is a big annoyance. I brought a new laptop with Window 8. Now my cac reader will not work anymore. I can't log on to my webmail anymore. I tried many times to download the cac reader driver but no luck. I can log on to AKO, DTS, MyPay with no problem even without downloading any driver.
You really need to fix this problem ASAP!!!!

By SGM Zamora on   4/27/2014 9:26 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I echo the comments on this website. Why on earth can't the Army G6 pull his head out of his ass, and fix this cluster? I have spent countless hours trying to access enterprise email on outside computers, and it has been continually unsuccessful. Please note: Army staff, prepare for Congressional complaints if you cannot fix this fuck-up. You people are being paid a lot of taxpayer money to do this right. If you can't handle the job, quit and allow the Army to hire someone with half a braincell. Most reservists and NG personnel have civilian jobs, and therefore do not have the time to deal with your illiterate computer science fuckups.

By CPT Pissed Off on   5/13/2014 10:36 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

How long have we converted over to DEE? Still today my unit is still not at 100% on enterprise. Still today a big percentage of my soldiers are using commercial emails instead of .mil. This transition is a failure. Now you have created a permanent means of using commercial emails for FOUO information. I tell my soldiers to call the help desk, what are the statistics of all those phone calls? We have deadlines and time sensitive task to complete, but I know if I send it out via .mil 90% will not get it in a timely manner or not get it at all. Looks like the G6 is running the Army now. You can quote regulation all day long, but getting the work done, evals signed, opords out, etc have more priority than fighting with DEE.

By Agr training nco on   5/19/2014 7:16 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I am greatly disappointed in Enterprise. I get the cycle of doom on a daily basis....i put in my pin 47 times then just give up. the only times i have successfully accessed it was at my unit. throw us a bone here. did yall hire the guy that did the healthcare.gov site. i am in the reserves and we need contact through the month...im using my yahoo!!!

By SSG JJ Slaughterhouse on   5/26/2014 8:34 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

The DoD needs to move back away from these giant bloated enterprise architectures being sold TO and BY people who do not understand Information Technology. We are moving all critical services in a few security zone and into a few hands increasing our risk to massive outages by a few strategic attacks. Start giving MACOMs more flexibility by moving control back to them as well as creating security zones back to and within their levels. Visibility into all orgs should roll up to the top - control should be dispersed. Orgs should be able to fully function on their own while interoperating with everyone else.

By Thinker on   6/6/2014 10:56 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

As a Reservist overseas, I have highly unreliable access to my mail.mil account. It works only sporadically, and often only after 20-30 minutes of tinkering with certificates, checking and unchecking boxes in Advanced Options, and reading up on the latest troubleshooting techniques. The loss in time and efficiency is significant. As often as not, I give up. Some of the complaints above have been about lost access on mobile devices. At first I welcomed an Outlook-based system, with its advantages for searching and organizing emails and familiarity to my civilian DOJ and DOS systems. For my DoD emails, now I miss AKO email, which was clunky but at least reliable and accessible. I would gladly see the migration delayed until and unless accessibility issues are fixed so we could forward to our old ako addresses for the time being.

By MAJ Brian Pearce on   6/12/2014 7:58 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

As a Reservist overseas, I have highly unreliable access to my mail.mil account. It works only sporadically, and often only after 20-30 minutes of tinkering with certificates, checking and unchecking boxes in Advanced Options, and reading up on the latest troubleshooting techniques. The loss in time and efficiency is significant. As often as not, I give up. Some of the complaints above have been about lost access on mobile devices. At first I welcomed an Outlook-based system, with its advantages for searching and organizing emails and familiarity to my civilian DOJ and DOS systems. For my DoD emails, now I miss AKO email, which was clunky but at least reliable and accessible. I would gladly see the migration delayed until and unless accessibility issues are fixed so we could forward to our old ako addresses for the time being.

By MAJ Brian Pearce on   6/12/2014 7:58 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

If DISA is going to pretend to be an Enterprise service provider, and the Army is going to continune to pretend that it is working, where is the visibility? The Department of the Army needs to requirer that DISA publish the service related statistics for DISA EE via a dashboard for EVERYONE.

Where are the top ten reported problems? Where are the timelines associated with fixes? (e.g. Apple/Android support). Where is the tracking of uptime and downtime? How do users report that half their current email magically disappeared during migration, and who at CIO G6 tracks the fact that 4 months later they still dont have those communications? Who is tracking the lag times associated with interactions on the DISA webmail and Outlook interfaces, which in some cases are several minutes? If you send several dozen emails a day, that just changed from 10-15 minutes of work to 2-4 hours wasted.

Finally, who is tracking the huge volume of email that is now being sent via unsecure means because personnel have given up on DISA EE? With no centralized place to go for answers to common questions, people give up on it. The DISA EE website not only doesn't have a FAQ, it doesn't even have a link to the DISA OWA. How are people supposed to even know how to find DISA OWA? It's almost like they don't even want personnel to actually use their systems. (www.disa.mil/Services/Enterprise-Services/Applications/DoD-Enterprise-Email)

The only reason DISA has a customer base at all is because it is mandatory.

By Mandatory customer on   6/18/2014 8:30 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

CIO/G6,

AKO was a tried and true email solution. It was reliable and accessible from anywhere in the world. You replaced AKO mail without vetting and validating your enterprise email. In other words, you killed AKO email before you had a proven email solution in place. The result is we no longer have reliable email and therefore we have conducted our own email migration. Many of us now rely on Gmail, Hotmail, iCloud, and Yahoo mail for email communications. Well done!

By SGT MF on   6/25/2014 8:19 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Sir,

Though BYOD sounds great, no one is really expecting that to come to fruition...we can all read the "we [DISA] are still investigating" statements regarding soldiers ability to use their devices and carriers to get to the DEE mail. Short of wide-open BYOD, has any progress been made on allowing BB OS 10 users to configure their Blackberry Balance (safe/secure sandbox for work data to remain separated from personal data) so those users might pilot the effort to bring BYOD mainstream?

I for one would gladly give my device over to NETCOM to allow them to configure the "work" portion of the phone for me...so long as I can have access to my .mil mail.

Thanks!

By Concerned DAC on   6/30/2014 2:16 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

I still believe the real mobile solution is a sandboxed mail app paired with CAC authorization on a weekly, fortnightly, or monthly basis. This avoids carrying a cac sled, or using one in public where it is obvious you are DoD.

By dac on   7/12/2014 10:20 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Wow once again an epic fail is being painted gold and called something other than what it is...pure garbage. Something as simple as email has been butchered and destroyed by DoD. Anything with .mil in it is synonymous with headache and hassle. Thanks again for creating utter nonsense through sheer incompetence!

By Fedup on   7/24/2014 12:16 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Can't access

By andy colonsanchez on   8/11/2014 7:04 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Can't access

By andy colonsanchez on   8/11/2014 7:04 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

https://web.mail.mil/owa "The page cannot be displayed" Day 4 with no email. 8+ hours on the phone to local support, CONUS-TNOSC and DISA. In my opinion, not a sucess.

By Research Scienctist on   8/14/2014 3:15 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

It is frustrating. I have been migrated for a year now and I still have problems with the damn system...even with militarycac.com. Everytime I use a different laptop, there is a different issue. I am also still considered dual persona even though I have not worked as a civilian for months. I have never been able to activate my PIV: my laptop is Windows 8, and RAPIDS does not activate PIV from Windows 8. My government laptop is Windows 7 but has a built-in CAC reader....which also does not work to activate my PIV. I went to a DEERS office for help. The guys there were very helpful...and added another email certificate to my CAC card and STILL did not activate my PIV. Now I have a new laptop (Windows 8.1, IE 11) and so far, it has been a disaster.

By USAR CPT on   9/2/2014 5:08 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Whoever came up this this stupid idea needs to be fired plain and simple. Most of the Soldiers have this as their only email account and by disabling the hyperlinks you have also disabled most of my platoons ability to conduct personal, educational and professional business. Thank you for that. Thank you for not letting my Soldier hit the conformation link to reset his bank account password so that he could log into his account and cancel his lost ATM card. He is extremely great full for the 3-6 months he's going to have to wait for the investigation to be complete before he gets his stolen money back. Maybe he shouldn't have forgotten his pass word but people forget things sometime that's why they have the rest password via email option.

By Disappointed in you on   9/5/2014 11:00 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

How I would fix the DoD Email issue:

1. Create an APP. A DOD/EE/DISA or 'whatever' app. It can sit in the App stores respectively, but require 2 factors to activate and connect to an EE account and calendars. If that's not secure enough, it can be sideloaded from the innards of the OWA.

2. Connect the app via PIN and QR code. Users would have to log into their OWA with their CAC/PIV and PIN. In the OPTIONS section of the OWA, generate a unique QR code. Use the app to verify the QR code. BOOM, there's ya go: 2 factor authentication. Make the QR code good for 30 days or 90 days and force users to rescan. If the Army felt the need to make it even more needlessly difficult, force the users to reconnect their BOYDs from an ARNET connected laptop.

3. Disable screenshotting and copy/paste abilities. I've seen apps like LastPass do that. Even Snapchat will notify the other user if an image was screenshot. Give the app the ability to copy/paste, but only WITHIN the app itself.

4. Autoconfig. Use the QR code to set up, connect and configure our imaginary DoD/EE/DISA app. You don't even need to enable IMAP, exchange will work fine. We already do this with laptops and blackberries, I see no reason why this can't be extended to other users.

By Curtis Earl on   10/14/2014 1:13 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

Two years of troubleshooting and I'm finally just fed up. I just bought a new computer to see if that would fix the issue... realizing after the fact that my home PC is not the issue. I've been through multiple PCs, versions of browsers, a Mac, and I'm done.

Why, for the love of all soldiers everywhere, is the troubleshooting for the EE system being done by a soldier as a volunteer time based activity? Why does this poor soul have the unfortunate task of trying to help soldiers fix an issue that he shouldn't even be supporting?! Where is the system fix that will allow everyone to access a mandatory system without hours upon hours of technical troubleshooting?

This system is fundamentally broken, and someone needs to face the block for putting thousands of people through this.

By SFC Jim Shelby on   10/21/2014 1:34 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

This monumental screw up has to end! This email system makes the obamacare website look like the gold standard!! I have had my CWO and my company's private IT professional try to help me access my email and they can't get it work consistently. I'm an RC officer and keep getting bitched at for not answering emails, but it's because I can't access my enterprise account. Only the Army could screw up email! These idiots should be fired!!!!!!! It's been over a year since this monstrosity was implemented and it's still a total cluster!! I notice that no one from G6 has had the balls to respond to any of these blogs

By CPT Frustrated on   10/28/2014 8:32 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

What. The. Living. Hell. Is wrong with you people that you didn't take into account Reservists trying to access from home? Why do you still have jobs? Who is responsible for this? I am absolutely LIVID that I cannot access email from home IN THE TWENTY-FIRST CENTURY. You clearly don't give a damn for Soldiers --- and clearly the Sergeants Major who should be holding you accountable don't either. Yet the people responsible for this continue to be paid.

This is disgusting. Everything wrong with the Army rolled up into a nice, neat little ball.

By Maj. Livid on   11/6/2014 11:27 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

This new system is an even bigger security risk than anything the old AKO system had, because todays reserve soldiers are not using it! I want to use it, but it always fails and locks up and prevents me from logging in. When I was a Sergeant I used AKO and communicated with my team in the most secure way I could. Now as a 2nd Lt. I continue to have Enterprise fail on my laptop, and even government computers! It just has always let me down. So now I am communicating with my PSG, commander, and battalion with YAHOO mail! You talk about security risk!!! Because Enterprise fails to accommodate, reservists more and more OPSEC information has to be pushed through non-secure channels, and I feel the army is more vulnerable now then it has ever been.

By 2nd LT. Aerni, Adam O on   11/18/2014 8:18 PM

Re: Army Nears Completion of Migration to Defense Enterprise Email

As an IRR soldier, I am not authorized to have a CAC. Yet, 3 times I have had my AKO email automattically forwarded EE because somehow the system things I am an authorized CAC holder. I applied for and was granted an exception to the forwarding initially when that was offered years ago, but in spite of that, the system forwarded my address anyway. Twice I have had it unforwarded after much trouble and multiple calls and email to support. Now my AKO email address has been forwarded again. How many times do I need to keep repeating myself? How am I supposed to get information about IRR opportunities when I can't access my email? How much longer will this nightmarish mess you call EE continue?

By CPT IRR on   11/26/2014 11:09 AM

Re: Army Nears Completion of Migration to Defense Enterprise Email

This migration is an utter failure. Here we are almost 2 years into this migration and it is so secure no one is using it beyond their workplace. G6: You have created a cottage industry of external email providers. Folks are using Hotmail, gmail, yahoo mail, etc. to communicate. You have set us back 10 years. Bring back AKO Email. It was far more reliable for email communications and Soldiers actually used it.

By Fed up on   11/28/2014 12:08 PM

Your name:
Your website:
Title:
Comment:
Security Code
CAPTCHA image
Enter the code shown above in the box below
Add Comment   Cancel 
Contact Us Accessibility/Section 508 Privacy & Security FOIA