Preconfigured IT policies
The BlackBerry® Enterprise Server includes the following preconfigured IT policies that you can change to create IT policies that meet the requirements of your organization.
Preconfigured IT policy |
Description |
|---|---|
Default |
This policy includes all the standard IT policy rules that are set on the BlackBerry Enterprise Server. |
Basic Password Security |
Similar to the Default IT policy, this policy also requires a basic password that users can use to log in to the BlackBerry device. Users must change the passwords regularly. The IT policy includes a password timeout that locks the BlackBerry device. |
Medium Password Security |
Similar to the Default IT policy, this policy also requires a complex password that users can use to log in to the BlackBerry device. Users must change the passwords regularly. This policy includes a maximum password history and turns off Bluetooth® technology on the BlackBerry device. |
Medium Security with No 3rd Party Applications |
Similar to the Medium Password Security, this policy requires a complex password that a user must change frequently, a security timeout, and a maximum password history. This policy prevents users from making their BlackBerry devices discoverable by other Bluetooth enabled devices and turns off the ability of BlackBerry devices to download third-party applications. |
Advanced Security |
Similar to the Default IT policy, this IT policy also requires a complex password that a user must change frequently, a password timeout that locks the BlackBerry device, and a maximum password history. This policy restricts Bluetooth technology on the BlackBerry device, turns on strong content protection, turns off USB mass storage, and requires the BlackBerry device to encrypt external file systems. |
Advanced Security with No 3rd Party Applications |
Similar to the Advanced Security IT policy, this IT policy requires a complex password that a user must change frequently, a password timeout that locks the BlackBerry device, and a maximum password history. This policy restricts Bluetooth technology on the BlackBerry device, turns on strong content protection, turns off USB mass storage, requires the BlackBerry device to encrypt external file systems, and turns off the ability of BlackBerry devices to download third-party applications. |
Default values for preconfigured IT policies
You can configure additional IT policy rules in the preconfigured IT policies or change any of the following values:
IT policy rule |
Default IT policy |
Basic password security IT policy |
Medium password security IT policy |
Medium password security with No 3rd Party Applications IT policy |
Advanced security IT policy |
Advanced security with No 3rd Party Applications IT policy |
|---|---|---|---|---|---|---|
Device-Only Items |
||||||
Enable Long-term Timeout |
— |
— |
Yes |
Yes |
Yes |
Yes |
Maximum Security Timeout |
— |
30 min. |
10 min. |
10 min. |
10 min. |
10 min. |
Maximum Password Age |
— |
60 days |
30 days |
30 days |
30 days |
30 days |
Password Pattern Checks |
no restriction |
no restriction |
at least 1 alpha and 1 numeric character |
at least 1 alpha and 1 numeric character |
at least 1 alpha and 1 numeric character |
at least 1 alpha and 1 numeric character |
Password Required |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
User Can Disable Password |
Yes |
No |
No |
No |
No |
No |
Password policy group |
||||||
Maximum Password History |
— |
— |
6 |
6 |
6 |
6 |
Security policy group |
||||||
Content Protection Strength |
— |
— |
— |
— |
Strong |
Strong |
Disable USB Mass Storage |
No |
No |
No |
No |
Yes |
Yes |
Disallow Third Party Application Download |
No |
No |
No |
Yes |
No |
Yes |
External File System Encryption level |
Not required |
— |
— |
— |
Encrypt to user password (excluding multimedia directories) |
Encrypt to user password (excluding multimedia directories) |
Force Lock When Holstered |
No |
No |
Yes |
Yes |
Yes |
Yes |
Disable Address Book Transfer |
No |
No |
No |
No |
Yes |
Yes |
Disable Discoverable Mode |
No |
No |
Yes |
Yes |
Yes |
Yes |
Disable File Transfer |
No |
No |
No |
No |
Yes |
Yes |
Disable Serial Port Profile |
No |
No |
No |
No |
Yes |
Yes |
Require LED Connection Indicator |
No |
No |
No |
No |
Yes |
Yes |
Wi-Fi Allow Handheld Changes |
Yes |
No |
No |
No |
No |
No |