[svandamme]

Does anybody know if Remote File Access can be fully disabled on BES 5.0?

Not just rules , but a hard disable of the component as a whole, for security reasons

[Arkanian]

I would like to know this as well. I am running the latest .70 SP1.

[Arkanian]

Anyone??

[fadmin]

If you don't configure it it won't work.
Configuring access to documents on remote file systems

[fadmin]

On a second thought , it may not work even if you configure it.

[Arkanian]

I have never configured ours and it works. Sounds like that document just explains how you can add share favorites and AD Credientals so that users don't have to enter those. Also, does anyone know the timeout for when a user enters their AD Credientals? Meaning if I log into a share, after x time if I try to access it again I will need to reenter my creds.

[Arkanian]

Anyone??

[freakinvibe]

If you don't configure it it won't work.

That is not true, file access works out of the box. This is different to Public Folder access, which only works if you configure it.

The safest way for disabling file access is to stop the MDS Connection Service, but that will affect other things like Internet Access through MDS.

[TargetIT]

You could prevent the BES from accessing everything but the GC and Exchange - that would really stop it.

[Arkanian]

Originally Posted by TargetIT

You could prevent the BES from accessing everything but the GC and Exchange - that would really stop it.

We use internal website applications so I think that would hinder those. I guess there isn't really anyway to disable just that one feature is there? That would be very odd for RIM to to allow the ability to disable it as they are all about security.

[nobody7290]

Originally Posted by svandamme

Does anybody know if Remote File Access can be fully disabled on BES 5.0?

Not just rules , but a hard disable of the component as a whole, for security reasons

With BES, the user who ownes the handheld is in the same situation then if he is in his office. If he has access to a server share from his Desk, why should he have not from his blackberry.
If you want to stop him acessing file shares, it would make more sense to restrict that in the office.

Besides this, my only idea is, to put the BES in its private subnet, or, behind a firewall and stop access to fileshares through firewall rules.