User guide

Scenario Rule
rule as blank (which means that it uses
the default value of Yes). You assign
the second group IT policy B, which
has the Allow Browser IT policy rule set
to No. You ranked IT policy A higher
than IT policy B in the BlackBerry
Administration Service
.
For example, in this scenario, the Allow Browser IT policy rule setting from IT
policy B, No, is applied to the user account even though IT policy A is ranked
higher than IT policy B, because the Allow Browser IT policy rule is blank in IT
policy A. If the Allow Browser IT policy rule was configured to Yes in IT policy A,
the Yes value would be applied to the user account.
Best practice: Controlling which
applications can use the GPS feature on a
device
By default, if a third-party application or a preloaded BlackBerry Application on a BlackBerry device supports the GPS
feature, the application can use the GPS feature. For example, BlackBerry Maps is a preloaded BlackBerry Application that
uses the GPS feature to permit a user to locate a global position.
Best practice Description
Control which application on the
device can use the GPS feature.
Consider preventing a third-party application or preloaded BlackBerry
Application from accessing the global position of the device.
To apply this best practice, you can use one of the following methods:
• To prevent the device from permitting all third-party applications and
preloaded
BlackBerry Applications from accessing the GPS feature, change
the value of the Disable GPS IT policy rule to Yes.
• To prevent a third-party application from using the GPS feature, change the
value of the Is Access to the GPS API Allowed application control policy rule
to Not Permitted. Assign the application control policy to the software
configuration.
Control when the device reports its
location to the BlackBerry Enterprise
Server.
By default, the device does not use the GPS feature to report its location to the
BlackBerry Enterprise Server. If you change the value for the Enable Enterprise
Location Tracking IT policy rule to Yes, consider configuring the interval after
which a device reports its location to the BlackBerry Enterprise Server.
To apply this best practice, you can use the Enterprise Location Tracking
Interval IT policy rule. You can also use the Enterprise Location Tracking User
Prompt Message IT policy rule to create a message that the device displays to
Security Technical Overview Managing BlackBerry Enterprise Solution security
41