Hi there,

Does anyone know how i can create an IT policy and assign rules to this policy without doing it through the BES admin. I need to create them through code or through a command line utility.....


Any ideas??

Thanks

What version of BES? Why are you trying to do what you are trying to do?

Version 4.1.4.15

Because i need to create it on the fly. A company would be able to select the options they want.

"A company"? I'm curious now...what company - your company?

Lets forget about the company Lets just say that i have 10 users and want them to be able to create a IT policy with a defined set of policy rules.

Why not use the Blackberry Manager interface that comes with the BES? I'm still confused.

And any BES Admin worth a salt wouldn't let the user create or edit their own IT Policy.

OK buddy. thanks for the replies.

not possible I believe...whats wrong with 'selecting the options' via the normal BB mananger interface

If you want this via a web interface or similar then You might be in more luck when 5.0 comes out that will include ability to perform BES functions via an API - but whether that will include IT policy creation or not I don't know...

Thanks for the reply thats pretty much what i thought but appreciate the reponse. Will just have to wait and see with v5.0

Is it just me, or does that sound like somebody trying to circumvent their corporate policy?

It's not just you.
I suspected something was fishy from the start of this thread... hence my original question of "why".

Operative word is trying. But not succeeding.

Glad I was not the only one!

Nice to see even BES admins can be as paranoid as us Information Security types


Stu
(CISSP)

I can see a reason for this. Maybe the company is split into many divisions and you have some admins for each division. He might want those admins to be able to create policies for their division only, but not want them to be able to modify policies for others. At present in the roles based administration you only get blanket full access if you have to be able to create policies.

I'm betting on the other reason...

Guys....

Now that you have all got the conspiracy theories off your chests....

We are actually a hosted exchange provider looking into provisioning blackberrys. We host for a few thousand companies and would like the admin for each company to be able to create policies that best suits there employees through our customer control panel (built inhouse). It would be basic things like password complexity, timeout etc As you could imagine this would be a lot of overhead for us if we to do it manually, especially if they had multiple policies or they changed often.

I am using the BESUserAdmin tool to create\delete users, remote wipes etc but could not find a way to deal with the policies, thats why I was wondering if there was a way to do it from command line (like the BESUserAdmin tool) or though code (a api which may be in v 5).

cheers

See, now that makes sense. Had that been included with your original post, we wouldn't have been so suspicious.

Forgive us our suspiciousness - there are a lot of people who come here asking questions specifically for the purpose of circumventing corporate security/policies.

And a very vague post such as yours tends to make people lean that direction.

I would have lost my bet

A very good reason - and thanks for sharing it.

And you forgot to add, that as most of us are BES/Mail/Sys Admins, users trying to circumvent policies makes us a little unhappy...

Sorry about the vague post. Will be sure to be more specific in the
future

I can understand fully about the users changing policies comment

Quite dissapointed that there is no API at the moment but nothing much we can do until v5 i suppose. Does anyone know off hand when it will be released??