Is there a way to block activation using desktop manager and only allow OTA?

I'm just wondering if there's a way to prevent a user from wiping their device, activating on a personal BES and then activating on the corporate BES through desktop manager as a second BES. The device will pick up the first IT policy and thus won't have any of the restriction specified on the corporate BES.

Thanks.

That's not possible.
A BlackBerry can only be activated on one BES at a time.

Actually, that's incorrect. I've done it before myself. You just activate the first BES then connect to desktop manager for the second BES. The first activation it policy tallest precedence.

I'd like to know how I can prevent this.
Posted via BlackBerryForums.com Mobile

unsupported although it does work with two BlackBerry Domains

It can be done, instructions are here:

FAQ: Using Multiple BES Accounts on One Device

But as knotty says, not officially supported by any vendor or carrier.

You could set the IT policy

"Secure wipe delay after IT Policy received"

so the device gets wiped if it doesn't get the IT policy for some time. You would also have to set IT policy resend interval to something rather low.