The allow browser and Enable Wireless Message Reconciliation are only available via IT Policy. This will lock down the default apps in the BB OS - if he has opera installed prior to receiving this policy he can still get around the browsing disablement. I would have to dig, I think you can get creative with something's to block that one...
The last two are at the user level and more for the paranoid. John Barsodi | Messaging 775.448.2230 | IGT Reno - IS From: Kevin Lundy [mailto:klu...@gmail.com] Sent: Tuesday, December 16, 2008 10:04 AM To: NT System Admin Issues Subject: Re: BES - disable user temporarily Thanks John. Being relatively new to BES, can you tell me what is the difference doing it via an IT policy versus doing it at the user level? I believe we did all of those at the user level. On Tue, Dec 16, 2008 at 12:59 PM, Barsodi.John <john.bars...@igt.com<mailto:john.bars...@igt.com>> wrote: New IT Policy -Global Items --Allow Browser - set to false -Email Messaging policy Group --Enable Wireless Message Reconciliation-set to false Also keep Redirection disabled, and also disable connection and collaboration services. - John Barsodi From: Kevin Lundy [mailto:klu...@gmail.com<mailto:klu...@gmail.com>] Sent: Tuesday, December 16, 2008 9:40 AM To: NT System Admin Issues Subject: BES - disable user temporarily We have a user that is insisting on using his BB while he is in the hospital. We want to disable email and browsing, but leave the cell phone functional. We thought just disabling redirection, as well as setting wireless synch to false would do it. However, we have seen his "sent messages" count increase. Any option besides simply removing him from BES or having the carrier suspend data services? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~