User guide

prevent add-on applications such as Facebook for BlackBerry smartphones and MySpace for BlackBerry smartphones

from accessing the work calendar and work contact list.

The Enable Separation of Work Content IT policy rule has some effect on add-on applications. For example, if you set the

Enable Separation of Work Content IT policy rule to Yes, the Facebook application prevents users from pasting work data.

To prevent add-on applications developed by RIM from accessing work data, the "Is access to the corporate data API

allowed" application control policy rule for the applications must be set to Deny. If this application control policy rule is not

set to Deny, users can copy and paste work data into the applications.

For more information about which applications are add-on applications developed by RIM, browse to www.blackberry.com/

support to read KB24317.

IT policy rules that apply to devices that

users use for personal purposes

The following IT policy rules apply to BlackBerry devices that BlackBerry device users use for personal purposes:

IT policy group IT policy rule

Browser

• Allow Hotspot Browser

• Allow IBS Browser

Device Only Enable WAP Config

Global Allow Browser

Personal Devices

• Disable Forwarding of Work Content Using Personal Channels

• Enable Separation of Work Content

• Require Work Resources for Conducting Work Activities

• Work Domains

Security

• Desktop Backup

• Disable External Memory

• Disable USB Mass Storage

• External File System Encryption Level

For more information about the IT policy rules, see the BlackBerry Enterprise Server Policy Reference Guide.

Security Technical Overview Securing devices in your organization’s environment for personal use and work use