[kjarrodc]

Out IT policies are setup such that no 3rd party applications can be installed. Additionally, no required, optional or disallowed software configurations have been setup. When a 3rd party app is requested, we'll temporarily switch policies and allow the user to install the app. After they're complete, we'll switch them back to the restrictive IT policy. This solution works, but I'm hoping to define a better solution using BES 5.0 and the software configurations. One solution we're considering is allowing ALL applications to be installed with an exception of a blacklist we setup through the software configuration. To compliment this, we could implement a restrictive application control policy.

We're favoring a blacklist because of the administrative overhead associated with a whitelist and a blacklist. Overall, it appears that you could have to index 100's (considering all versions) of allowed applications and much less applications disallowed applications. Though, we recognize the challenges with the blacklist too - which applications should we not allow and why? How can we stay up to date on these apps? etc...

What is your companies stance on 3rd party applications? Are you using software configurations to support this? Lastly, how does this stance compare to your desktop and laptop computing environment?

[knottyrope]

We have an open system, except for contact sharing in Facebook.

They wany to play just like iPhone users and WM lusers.

If we had more issues we would start to block them

[penguin3107]

We allow all third-party app downloads.
Some popular apps are pushed to the handhelds via Software Configuration.

[freakinvibe]

We have blocked all third-party apps. The allowed apps a distributed wirelessly via BES. Everything else is disallowed.

With BES 5, it is now easier to maintain a white list, there are now "Unlisted Applications policies" which were not available in 4.1.

[cyclmpc]

We do not restrict 3rd party apps in our environment and we also use company approved applications via software configuration.

[Arkanian]

nvm

[SKaestle]

We are restrictive - Block all third party - block almost everything - scan the device post EA and then remove all unapproved apps (wirelessly or manually) 2nd offense gets the device reclaimed. White list is going to nbe lots easier than blacklist and this matches our desktop laptop virtual world pretty well

[kjarrodc]

So - a mix of both - Some companies allow and some do not allow 3rd party apps.

What's the business reason behind not allowing or allowing apps? What determines an approved app versus a unapproved app?

To skaestle - how are you scanning the devices?

[knottyrope]

Some companies are more paranoid, some have more to lose with leaked info.
All depends, my boss does not think its that bad if anyone loses a phone in most departments.

He is more concerned now that the possibily of all our lead sales mans contacts falling into the wrong hands is bad now. Password policy now in place to assist with that.

Almost all our BB devices are company owned. Once apps go rampant and I have to fix them then things will change.

I tell iPhone users to pound sand on their issues. I dont have much control with out a company policy in place Most iPhones here are personal devices and nothing bad happened yet. At lest I can remote wipe them and have a password policy on them.

Windows mobile devices are dropping fast here and knot a concern.

[knottyrope]

Other thought

Back in the win 98 days everyone would try stuff on their PC and I was fixing way too many computers issues back then. Once on 2000 or XP all user with desktops were made power users only. I might have to install stuff, but they cant screw stuff up faster than I can fix it anymore.

[freakinvibe]

What's the business reason behind not allowing or allowing apps?

The reasons for not allowing third-party apps are:

1. Supportability: Some third-party apps can crash your phone or have other side-effects. It can be difficult for the help desk to troubleshoot
2. Security: Third-Party apps can gain access to confident data like address book entries

What determines an approved app versus a unapproved app?

The app must fulfill a business need (i.e. no fun apps), it must run with restricted app policies and it must have been tested and proved stable by some pilot users.

[icontech]

Like someone else mentioned it really depends on the sensitivity of your data. If you're not seeing alot of support calls from apps being installed, then you're really just going to create more work for yourself by restricting them. Security-wise I think a password policy is the most important thing to implement.

[icontech]

Originally Posted by knottyrope

We have an open system, except for contact sharing in Facebook.

They wany to play just like iPhone users and WM lusers.

If we had more issues we would start to block them

Can you explain the contact sharing in Facebook?

[zerog46]

In FB you can import your contacts from your BB and back.