[usererror]

Originally Posted by sniffs

We are running OWA 2003 but the authentication server is 07. Somehow it's blocking it..

iPhones aren't a problem. They use ActiveSync. If you have Mobile Admin installed on OWA, you can remotely wipe, lock, disable features, etc..

Hell, you can do that within the Exchange console.. =)

We are still an exchange 2003 shop. I just sent my exchange admin the tool for managing/wiping active sync devices. he doesn't think its installed.

Thanks for your insight!!

[skyman84]

Originally Posted by sniffs

I dont think OWA is a security risk. When you log into it via a PC, your email messages are not cached locally for later retrieval.. You are basically viewing it. Close the web browser and unplug your internet and those emails aren't viewable anywhere.

On the Blackberry, they are downloaded, and because you can't remotely manage BIS connections, that's a HUGE security risk IMO..

ActiveSync devices such as Windows Mobile, or the iPhone can be remotely managed.. they can be remotely wiped, locked down. BIS connections can't.

What my company did, was we put up a Owa 07 auth server and somewhere along the lines, it blocked BIS connections.. not sure how or why, but it worked great.

I think the point that's being made here is that there are desktop applications which can and do download and cache emails when set up to poll/recieve from OWA.

Meaning that any device, be it BlackBerry or pc/laptop, is a security risk.

My best advice is to close down OWA, or have it only accessable via a simple vpn connection, I know that won't go down well with some users, but hey, thats life!

[stuwhite]

Originally Posted by usererror

We are still an exchange 2003 shop. I just sent my exchange admin the tool for managing/wiping active sync devices. he doesn't think its installed.

Thanks for your insight!!

Just be aware that the terrible mobile admin "tool" from MS for 2003 doesn't really let you "manage" the devices as such, just wipe and remove a device partnership. Bit more info here http://www.blackberryforums.com/bes-...ml#post1300398 but as long as your guys know that you won't get BM-type management under E2K3 that's cool.

[usererror]

Originally Posted by stuwhite

Just be aware that the terrible mobile admin "tool" from MS for 2003 doesn't really let you "manage" the devices as such, just wipe and remove a device partnership. Bit more info here http://www.blackberryforums.com/bes-...ml#post1300398 but as long as your guys know that you won't get BM-type management under E2K3 that's cool.

That is true, and unfortunate. I believe the ability to at least remote wipe will satisfy our HIPAA security Officer.