BlackBerry Forums Support Community
              

Closed Thread
 
Thread Tools
Old 08-15-2008, 03:39 PM   #21
Crimesy
New Member
 
Crimesy's Avatar
 
Join Date: Dec 2006
Location: In a house
Model: 8800
Carrier: 02
Posts: 9
Default

Please Login to Remove!

As someone who works for a UK Police Force, the use of BlackBerrys is officially controlled by a master 200+ page document from CESG (basically the UK Intelligence's IT Department). Every single setting on the BES IT Policy has to follow these guidelines to the letter or the whole organisation can the right to use the government e-mail system suspended.

Wonderful stuff!
__________________
"...There's nothing here for me and you, we're just sitting here with nothing to do..."

Ohne deine hilfe verliere ich mich in diesem ort!
Offline  
Old 08-17-2008, 06:14 PM   #22
chasdrury
Knows Where the Search Button Is
 
Join Date: May 2008
Location: Leeds, UK
Model: 8900
OS: 5.0.SP1
PIN: 21362E77
Carrier: T-Mobile UK
Posts: 43
Default

Wirelessly posted

Why is the camera such a problem in seemingly a lot of environments?

We find the cameras brilliant - we are a manufacturer of product in major supermarkwt chains and our field guys use them for store facing pictures etc....
__________________
BES 5.0.3 MR4 for Exchange 2010 SP1 ()
Offline  
Old 08-17-2008, 06:36 PM   #23
juwaack68
iPhone Convert
 
juwaack68's Avatar
 
Join Date: Oct 2005
Location: Tulip City - MI
Model: iP5
OS: 6.0.2
PIN: to beans
Carrier: I'm not
Posts: 13,878
Default

Two words: Intellectual Property.

Companies frown upon someone (employee or otherwise) taking pictures of secret documents, product, and emailing the pics to competitors.

There is also the issue with people taking innapropriate pictures (i.e, an 'upskirt' picture that a teacher took recently in a town near me!) and the legal implications of that.
__________________
No longer a BES Admin, but it was fun while it lasted!
Offline  
Old 08-17-2008, 06:42 PM   #24
holden
BlackBerry Extraordinaire
 
holden's Avatar
 
Join Date: May 2007
Location: Florida Sunshine
Model: 9700
OS: 5.0.0.296
PIN: TOFJAGER
Carrier: Cingular-AT&T-Verizon-Nextel
Posts: 1,046
Default Standards

Quote:
Originally Posted by Orbital199 View Post
I'd like to get some feedback from anyone who operates a BES with a large amount of users or manages the BES and BlackBerries for a government agency. I'm trying to better understand what problems other agencies face in regards to mobile communications and see if there's any knowledge I can take back to work to better improve how we operate.

Do you restrict the use of third party applications?

What rules and regulations does your agency enforce for company mobile devices?

What are your user's biggest complaints about BlackBerries and how you choose to manage them?

One of our current problems is that we're being slammed with requests for iphones. Even though we're trying hard to fight it off, the people that are requesting them will inevitably get what they want. It's going to be a support nightmare.
We setup a Wireless Standard that was published through out the company.

1.) We will only support specific platforms - 8700c, 8800 and 8310 Curve.
The 8310 and 8800 are upgrades and cannot be charged to a corporate credit card - Only personal credit cards can be used to purchase and 8800 or 8310. The 8700c is the standard device and can be charged to a corporate credit card. (this standard is backed up by the highest manager in IT and is inforced)

1a. We will not add a non standard device to the BES.

2.) We will not support any 3rd party applications. If you load a bunch of junk on your BB and call the helpdesk complaining about performance issues and missing messages, we will dispatch a tech but if we find the device has been setup with 3rd party apps we will instruct the end user this is not supported and let them decide what they want to do. (we will request they remove the apps or not support the device) We can drop the ticket if the customer gets unreasonable regarding 3rd party apps and goto our manager and their manager to inforce the policy.

3.) We will support the Inbox, Calendar, tasks, memo and voice. That is it.

4.) We mandate that the end users have to fill out a web form to purchase the device and this form is cleared through our Wireless Services Dept. to make sure they are ordering the correct model type. (No iPhone - no 8820's (wireless)) Also, the web form will tie in manager approval through an add in that is built in on the web ordering form. The end user will also have to provide a company credit card on the form that is debited monthly with the At&t bill each month and the bill sent to the end user billing address.

5.) No High Severity tickets can be open for damaged devices and the end user is responsible for ordering and replacing a damaged warranty device directly from At&t. We will bend this rule and do have parts on hand for quick loaners while the customer is waiting for a replacement device.

6.) End users are responsible for all peripherals, holsters, chargers, batteries etc. etc. We do not carry spares and will ask them to go to the mall to pickup these items.

7.) We do not support Media Manager on the desktop.
7a.) We do not support MicroSD cards and ask that no user place company files on them. (only music and pictures) we are still trying to work through the encryption of the media cards and are still struggling with desktop versions.

8.) We have a mandatory password policy on all devices, no exceptions. And mandatory timeout.

9.) We currently support DM 4.1 and 4.2 w/o media manager. On some VP's we have loaded media manager and bent the rules to accomadate their gadget thurst. We have more work in front of us regarding reworking our specs on what desktop manager we are going to use. ( a tough process as we can't seem to find anyone to take ownership of this issue - Deskside says it is not their issue and have pushed back to the wireless group for guidance)

While this list is nice, some of the VP's, users, and upper managers try and break this list all the time. With the VP requests, this results in a lot of meetings with our IT dept. managers, wireless services managers, Bes Admins, email admins, etc. etc. until our head of IT will speak directly to the VP making the request to discuss and review our process and standards. I am glad we have a good IT manager as we have maintained this for over 3 years and have not strayed too far from this setup. I can't imagine what is going to happen in the near future with the new Bold and Javelin coming out.

Good luck...

H.
__________________
hmeister...
nettech

Last edited by holden; 08-17-2008 at 06:57 PM..
Offline  
Old 08-18-2008, 01:22 AM   #25
Neo3000
Knows Where the Search Button Is
 
Neo3000's Avatar
 
Join Date: Jul 2008
Model: 9000
PIN: N/A
Carrier: TMO
Posts: 32
Default Security Policy

Hi,

Some information about our settings:
  • We only allow company devices no private ones.
  • General IT policy is approved and set together with corporate IT security.
  • Use of 3rd party application in general is not allowed.
  • We defined a process to get application allowed: You need to deliver detailed information on the application mostly regarding base security (risk potential, transferred information), application architecture (sockets, bluetooth, ... what ever is needed for the application) and infrastructural impact (throughput,...). With this information you need to get a formal approval by corporate IT security.
  • Support is given for base applications where know how is available (Mail, PIM, SameTime).
  • DM is not allowed.
  • PIN messaging is not allowed.
  • We are currently testing WiFi - but it is not yet allowed for normal users.
  • MicroSD encryption is forced.
  • Media Manager is not allowed.
  • Mandatory password policy is set.

Greetings,
Neo3000
__________________
BES 4.1.7 (20 servers), Domino 7.0.3 with 19000+ users
BES 5.0.2 (8 server), Exchange 2010 SP1 with 1000+ users
Offline  
Old 09-24-2008, 12:19 AM   #26
Mark Summers
Knows Where the Search Button Is
 
Join Date: Oct 2006
Model: 9000
OS: 4.6.0.144
Carrier: vodafone
Posts: 31
Default

Quote:
Originally Posted by jletendre View Post
Yes since BES 4.1.4 there was been a "disable camera" policy and the BES 4.1.5 (maybe it was 6) you can disable video record.

I asked our compliance and security groups and they had no concern with cameras. I guess they figure countless employees have personal cellphones with them so what are they going to accomplish?

Is there any way of disabling the Video Camera on the Corporate BES before 4.1.5 or 6 e.g. using Application control or removing aspects of the firmware load? As you say there is no policy setting for Videao camera in 4.1.3- we can disable the camera but not the video Camera
Offline  
Old 09-24-2008, 06:39 AM   #27
m4ilm4n
Thumbs Must Hurt
 
m4ilm4n's Avatar
 
Join Date: Oct 2006
Location: Loony bin
Model: 8800
Carrier: T-Mobile
Posts: 111
Default

Quote:
Originally Posted by chasdrury View Post
Wirelessly posted

Why is the camera such a problem in seemingly a lot of environments?

We find the cameras brilliant - we are a manufacturer of product in major supermarkwt chains and our field guys use them for store facing pictures etc....
For us, one word - ITAR. (International Traffic in Arms Regulations). We're a satellite operator, and there are restrictions for what can and cannot be viewable by the public.

Plus, going back to my contracting days, anyplace in the US that does defense work has restrictions on cameras, radios, USB sticks, etc.
Offline  
Old 09-24-2008, 08:09 AM   #28
qc_metal
CrackBerry Addict
 
qc_metal's Avatar
 
Join Date: Mar 2005
Location: Rockford, IL
Model: 9530
OS: 4.7.x
Carrier: Verizon
Posts: 590
Default

I don't know why they just don't make a device that has a camera add-on available - i.e. a module that can be removed and replaced with a camera.

This would reduce manufacturing costs and make it possible for companies to have better control over their devices (not that a user couldn't buy the module, but the company could still have the IT policy in place to control it).
__________________
Provision, maintain, and report on users via web: the NEW BerryStats | FAQ
Offline  
Old 09-24-2008, 08:44 AM   #29
Frank Castle
BlackBerry Extraordinaire
 
Frank Castle's Avatar
 
Join Date: Jul 2005
Location: MA
Model: 9930
PIN: PM Me!
Carrier: VZW
Posts: 1,073
Default

Unsure if this is an option (Check with T-Support) but they often make a update for just the policy so it will feature the new options.

Any reason why you don't want to update to the latest SP?
Offline  
Old 09-24-2008, 12:57 PM   #30
manofice
Thumbs Must Hurt
 
Join Date: Sep 2008
Model: 9930
OS: 5.0 Hyb
PIN: N/A
Carrier: Verizon
Posts: 184
Default

We have a policy made to disable the cameras but we only deploy non camera devices, i really want that new bold device though.

We have 2 bes servers, no 3rd party app restrictions but we wont support them if they have problems with them.

mandatory password lock on all devices
Offline  
Old 09-26-2008, 08:12 AM   #31
ipmanwingchun1
Knows Where the Search Button Is
 
ipmanwingchun1's Avatar
 
Join Date: Dec 2005
Location: Georgia
Model: 8530
OS: 4.3.0
Carrier: Sprint/Nextel
Posts: 20
Default

I work for a k-12 school system and we have about 80 blackberries in the county. We could go so far as to tell people that you "should not" download third party stuff but they always do so we just block it. I have had to be the bad guy and go to that person whose BB blew up because they loaded to many Java based games on their BB and tell them that I will not fix this because you did what you were not suppose to do and told them that they will have to purchase a new BB.
We are in the process of potentially going to a different wireless provider and if so we will create a blackberry usage policy. With blackberries having camera and video features on them I do not want to go out to work on a BB and find inappropriate pics and videos on their work provided BB.
I am truly amazed that people think that when the company provides you with a blackberry and pays for it for you to do your job, they argue with you why they should be able to surf any site they want, load personal pictures, videos etc and send all the dirty text messages they want and then tell you that you should not be reading they personal messages.
__________________
Ipmanwingchun1
Network Specialist

If you ain't the lead dog, the scenery never changes.
Offline  
Old 09-26-2008, 08:14 AM   #32
ipmanwingchun1
Knows Where the Search Button Is
 
ipmanwingchun1's Avatar
 
Join Date: Dec 2005
Location: Georgia
Model: 8530
OS: 4.3.0
Carrier: Sprint/Nextel
Posts: 20
Default

Manofice what version of BES do you have on your BES servers? We are still on 4.0 and I want to upgrade to 4.1 but DANG I hate upgrading servers because of potential reprocussions.

thanks,

matt
__________________
Ipmanwingchun1
Network Specialist

If you ain't the lead dog, the scenery never changes.
Offline  
Old 09-26-2008, 09:18 AM   #33
twinkiefan
Knows Where the Search Button Is
 
Join Date: Aug 2006
Location: North of Mizzou
Model: 9700
OS: 5.0.0.330
Carrier: T-Mobile
Posts: 48
Default

Quote:
Originally Posted by Crimesy View Post
As someone who works for a UK Police Force, the use of BlackBerrys is officially controlled by a master 200+ page document from CESG (basically the UK Intelligence's IT Department). Every single setting on the BES IT Policy has to follow these guidelines to the letter or the whole organisation can the right to use the government e-mail system suspended.

Wonderful stuff!
Same deal for me. I don't work for a gov't agency, but for a financial services company in the U.S. and our information security department dictates the policy settings (with input and pushback from me, of course). They have an opinion on every single setting and review the policy guide every time a service pack is released. Most are still set to default, but there are "hundreds" that are set to something non-default, too.
__________________
BES 4.1.7, Exchange 2007 SP2, SQL 2005, Windows 2003 Server on an ESX VMWare. T-Mobile = our preferred carrier.
Offline  
Closed Thread



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


DCI FOOT SWITCH PEDAL 2 POSITION 1/PK. SELECT SPS # 9406 picture

DCI FOOT SWITCH PEDAL 2 POSITION 1/PK. SELECT SPS # 9406

$132.99



ELECTRIC COOLING FAN GROUND-ING THERMO-STAT SWITCH RADIATOR TEMP-ERATURE SENSOR picture

ELECTRIC COOLING FAN GROUND-ING THERMO-STAT SWITCH RADIATOR TEMP-ERATURE SENSOR

$19.95



Dusk to Dawn Photocell Light Switch Auto ON Off Light Sensor Control Switch picture

Dusk to Dawn Photocell Light Switch Auto ON Off Light Sensor Control Switch

$55.88



GEYA ATS PC Dual Power Automatic Power 3Pole 100A 220V Transfer Switch Grid NEW picture

GEYA ATS PC Dual Power Automatic Power 3Pole 100A 220V Transfer Switch Grid NEW

$39.99



Generac PWRcell CXSW200A3 Automatic Transfer Switch NEW -- Free Returns picture

Generac PWRcell CXSW200A3 Automatic Transfer Switch NEW -- Free Returns

$629.00



40A Manual Transfer Switch Line-Off-Gen for (2)120V or (1)240V Device, UL Listed picture

40A Manual Transfer Switch Line-Off-Gen for (2)120V or (1)240V Device, UL Listed

$69.25







Copyright © 2004-2016 BlackBerryForums.com.
The names RIM © and BlackBerry © are registered Trademarks of BlackBerry Inc.