[aarongthompson]

I am trying to force content protection on to the devices that use the BES. I have enabled the Encryption Strength to strong and applied the policy but users can still manually turn this off. I though that if the encryption strength was set then it could not be turned off or am I mistaken?

[freakinvibe]

There are two other IP policy settings that influence Content Protection:

"Password Required"
"Content Protection Usage"

How have you set those rules?

[aarongthompson]

This is now working. Additionally am I right in thinking that unless content protection is enabled none of the emails etc will be encypted on the device??

[freakinvibe]

That's right.

[fadmin]

But also wipe will take forever...

[freakinvibe]

The wipe takes up to an hour. This is because it overwrites each bit of memory several times. The cost of security....

[cyclmpc]

I'd also include the clean idle timer max when you adjust your policy.