Thanks, I was planning on the two policies, just wasn't sure exactly "how" to disable MDS. There is no "MDS Policy" group listed in my BES policies. There aer several MDS related items, but no "Allow MDS" - ture / false... ??
Hmm, which version BES are you using? Sorry, I'm not very familiar with older versions.
4.1 has the MDS Policy Group where you can set Disable MDS Runtime Environment to True.
In 4.1 there is also a Browser policy group where you can disable the MDS Browser. Doing that along with disabling 3rd party application installs should work. I know the 3rd party rule was in older versions, not sure about the Browser options.