Its no secret that If I go to a T-mobile or Cingular buy a BB and a plan that I can just create a profile on their site and receive my Corp email on it..Huge issue

With this,, we as admins and companies have no way of protecting personal information from leaking out when the Sales person or whoever leaves. This seems to be growing very popular..RIM says that the banks are trying to block but having a hard time keeping up with the IP's their using..

Does anyone know how to stop this..

Remember NO BES is involved..

Well, we prevent our corporate customers from forwarding their e-mails out of the company via a rule. Any damn fool can forward it to Yahoo or GMail.

ditto, not an issue for us.

Ditto. We have a company rule of no company data on employee owned equipment. Like you said, once it leaves your hardware you have zero control over it (at least for company equipment you still have dual control over the data or can file a police report for theft in case you don't).

I think you need a rule in your employee handbook. This is a personnel issue and should be treated as such.

Yep this is a personnel issue. However, all I would need to know is a persons password and BAM I am receiving their email. There needs to be a way to prevent this other than paper policy.

What everyone is not seeing is that the BES is not needed if this is available. Yes the BES is nice but half the time people just want their email on their personal Blackberry and not one from the company.

Its not the forwarding of email, we stopped that a while back.

You allow forwarding of mail from your corp systems to any other account (which would include a BB)? Or you allow POP3/IMAP access to your corp mail (thus including a BB)? Both are a BAD idea if you want to be secure. That a BB happens to be a mobile "POP3 client" is little additional risk I think. Might even be MORE secure if the user puts a password on their BB!

The underlying risk is that, BB user or not, you should consider the "Huge issue" is that anyone with an internet connection anywhere in the world can get this email "BAM" if they have the password. All that mail might stay on any PC anywhere in the world... Without a BES, the BB is just another POP3 client device.

If you're talking about the BB's ability to connect to an Exchange Outlook Web Access account with a password - that's nothing more than your could do from any browser on a PC!

I don't get it (why you think having a BB makes the situation any worse)

"Control"
That is the key word. Forwarding is not what I am talking about.

Its about controlling your environment. You are missing the point

I think the point is, if that level of control is deemed necessary in your environment, loose the pop3 and forwarding, and get BES. The control you seek is available, it seems you just don't want to invest in it. You can't get a complete electronic alarm system for the price of a deadbolt.

In the end, the employee will have access to the information because it's their job and if they are determined can get it outside company control they will. Even if they have to memorize it and recreate it. If you don't trust the employee get rid of them. Why just make it hard for an employee to do their job in the name of security?

On the other hand, if you are worried about the employee loosing their personal device without having taken good security measures then that's different all together. But remember, it's no different than them taking a report home in their laptop bag. Your original post reads like, "how do I lock the vault from the employee who has the key?"