So I work for a company that has to have complete control over the Blackberrys in the sense that if a user leaves the company, we wipe the device. No if's, ands or buts.

We have BIS blocked.. however our users found another way around this, forward their work email to the personal BIS account setup on the BB.

Aside from going into their mailbox every so often and removing the forward, is there a more permanent method?

Anyone have any idea of how to prevent this?

what version of Exchange are you using?

If you're using Exchange 2007 you can use a transport rule for this ... if you're using 2003 you'd need to create an event sink.

First and foremost, I'd communicate that forwarding work email to BIS or any external source is against the rules and if they break them they get punished.

Even if you have things in place to prevent it, you should have a policy stating the rules.

Does your Exchange server deliver mail directly or does it go through a smart host that you have control over?

We have a mixture.. right now we're setup on 2003 for the whole company. A few of us tech geeks are setup on a 2007 server right now, so it'd be safe to say we'd need to setup a event sink. (not sure what that is.. is that common Exchange knowledge? I dont work with Exchange, but my exchange admin does.. would he know it?)

We have bigfish spam filtering, but other than that, the exchange server delivers mail directly.

Is it common Exchange knowledge ... yes / no. To someone that doesn't live / breathe Exchange they've probably never heard of the term ... but for someone who lives in Exchange they should be well versed about event sinks, even if they never use them.

Make all of your mail route through Exchange 2007 and setup a transport rule to prevent the forwards going out.

Get everyone over to Exchange 2007 / Outlook 2007 and you'll be able to do thish much quicker.