Using An It Policy To Manage Blackberry Enterprise Solution Security; Using It Policy Rules To Manage Blackberry Enterprise Solution Security - Blackberry PRD-10459-003 - Enterprise Server For IBM Lotus Domino Administration Manual

Administration Guide
Using an IT policy to manage BlackBerry
Enterprise Solution security
You can use an IT policy to control and manage BlackBerry® devices, the BlackBerry® Desktop Software, and the
BlackBerry® Web Desktop Manager in your organization's environment. An IT policy consists of multiple IT policy
rules that manage the security and behavior of the BlackBerry® Enterprise Solution. For example, you can use IT
policy rules to manage the following security features and behaviors of the device:
• encryption (for example, encryption of user data and messages that the BlackBerry® Enterprise Server forwards
to message recipients) and encryption strength
• use of a password or pass phrase
• connections that use Bluetooth® wireless technology
• protection of user data and device transport keys on the device
• control of device resources, such as the camera or GPS, that are available to third-party applications
The BlackBerry Enterprise Server includes preconfigured IT policies that you can use to manage the security of the
BlackBerry Enterprise Solution. The Default IT policy includes IT policy rules that are configured to indicate the default
behavior of the device or BlackBerry Desktop Software.
After a device user activates a device, the BlackBerry Enterprise Server automatically sends to the device the IT policy
that you assigned to the user account or group. By default, if you do not assign an IT policy to the user account or
group, the BlackBerry Enterprise Server sends the Default IT policy. If you delete an IT policy that you assigned to the
user account or group, the BlackBerry Enterprise Server automatically re-assigns the Default IT policy to the user
account and resends the Default IT policy to the device.
For more information, see the BlackBerry Enterprise Server Policy Reference Guide.
Using IT policy rules to manage BlackBerry Enterprise
Solution security
You can use IT policy rules to customize and control the actions that the BlackBerry® Enterprise Solution can perform.
To use an IT policy rule on a BlackBerry device, you must verify that the BlackBerry® Device Software version supports
the IT policy rule. For example, you cannot use the Disable Camera IT policy rule to control whether a BlackBerry
device user can access the camera on the device if the BlackBerry Device Software version does not support the IT
policy rule. For information about the BlackBerry Device Software version that is required for a specific IT policy rule,
see the BlackBerry Enterprise Server Policy Reference Guide.
If you create a custom IT policy that does not permit users to change their user information on their devices, you can
only apply this custom IT policy to devices running BlackBerry Device Software 5.0 or later.
The BlackBerry Administration Service groups the IT policy rules by common properties or by application. Most IT
policy rules are designed so that you can assign them to multiple user accounts and groups.

Using an IT policy to manage BlackBerry Enterprise Solution security

4
35