User guide

Preconfigured IT policy Description
Default This policy includes all the standard IT policy rules that are set on the
BlackBerry Enterprise Server.
Individual-Liable Devices Similar to the Default IT policy, this policy prevents BlackBerry device users from
accessing organizer data from within the social networking applications on their
BlackBerry devices.
This policy permits users to access their personal calendar services and email
messaging services (for example, their
BlackBerry Internet Service accounts),
update the BlackBerry Device Software using methods that exist outside your
organization, make calls when devices are locked, and cut, copy, and paste text.
Users cannot forward email messages from one email messaging service to
another.
You can use the Individual-Liable Devices IT policy if your organization includes
users who purchase their own devices and connect the devices to a BlackBerry
Enterprise Server instance in your organization's environment.
Basic Password Security Similar to the Default IT policy, this policy also requires a basic password that
users can use to unlock their devices. Users must change the passwords
regularly. The IT policy includes a password timeout that locks devices.
Medium Password Security Similar to the Default IT policy, this policy also requires a complex password that
users can use to unlock their devices. Users must change the passwords
regularly. This policy includes a maximum password history and turns off
Bluetooth technology on devices.
Medium Security with No 3rd Party
Applications
Similar to the Medium Password Security, this policy requires a complex
password that a user must change frequently, a security timeout, and a
maximum password history. This policy prevents users from making their
devices discoverable by other Bluetooth enabled devices and prevents devices
from downloading third-party applications.
Advanced Security Similar to the Default IT policy, this IT policy also requires a complex password
that users must change frequently, a password timeout that locks devices, and a
maximum password history. This policy restricts Bluetooth technology on
devices, turns on strong content protection, turns off USB mass storage, and
requires devices to encrypt external file systems.
Advanced Security with No 3rd Party
Applications
Similar to the Advanced Security IT policy, this IT policy requires a complex
password that users must change frequently, a password timeout that locks
devices, and a maximum password history. This policy restricts Bluetooth
technology on devices, turns on strong content protection, turns off USB mass
storage, requires devices to encrypt external file systems, and prevents devices
from downloading third-party applications.
Security Technical Overview Managing BlackBerry Enterprise Solution security
37