Administration Guide

Local Navigation

BlackBerry Manuals & Help  >  Administrator Documentation  >  BlackBerry Enterprise Server Express 5  >  BlackBerry Enterprise Server Express for Microsoft Exchange  >  Administration Guide BlackBerry Enterprise Server Express for Microsoft Exchange - 5.0.1

Controlling BlackBerry device access to the BlackBerry Enterprise Server Express

You can turn on the Enterprise Service Policy to control which BlackBerry® devices can connect to the BlackBerry® Enterprise Server Express. After you turn on the Enterprise Service Policy, by default, the BlackBerry Enterprise Server Express prevents connections from new BlackBerry devices that you associate with the BlackBerry Enterprise Server Express; however, it permits connections from BlackBerry devices that users already activated on the BlackBerry Enterprise Server Express. The Enterprise Service Policy also applies to devices with BlackBerry® Connect™ software, devices with BlackBerry® Built-In™ software, and devices that are running the BlackBerry® Application Suite.

You can use the Enterprise Service Policy to create allowed lists that control the BlackBerry devices that users can activate on a BlackBerry Enterprise Server Express, over the wireless network, or over a serial connection. BlackBerry devices that match the allowed list criteria can complete the activation process on the BlackBerry Enterprise Server Express.

You can define the following types of criteria:

  • specific, permitted BlackBerry device PINs as a string
  • permitted range of BlackBerry device PINs

You can also control access to the BlackBerry Enterprise Server Express based on specific manufacturers and models of BlackBerry devices. The BlackBerry Administration Service includes lists of permitted manufacturers and models based on the properties of the BlackBerry devices that are associated with the BlackBerry Enterprise Server Express. You can clear items in these lists to prevent further connections by BlackBerry devices of a specific manufacturer or model.

You can permit a specific user to override the Enterprise Service Policy so that the user can connect to the BlackBerry Enterprise Server Express even if the user's BlackBerry device matches criteria that you exclude from the allowed list.

Turn on the Enterprise Service Policy

You can turn on the Enterprise Service Policy to control which BlackBerry® devices can connect to the BlackBerry® Enterprise Server Express.

  1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Click BlackBerry Enterprise Server.
  3. Click Turn on Enterprise Service Policy.
  4. Click Yes - Turn on enterprise service policy.

Configure the Enterprise Service Policy

By default, when you turn on the Enterprise Service Policy, all BlackBerry® devices that you activated can access the BlackBerry® Enterprise Server Express. You must configure the Enterprise Service Policy to specify the BlackBerry devices that you want to access the BlackBerry Enterprise Server Express. To add a new BlackBerry device to the BlackBerry Enterprise Server Express, you must add the PIN for the BlackBerry device to the Enterprise Service Policy before a user can activate the BlackBerry device.
Before you begin: Turn on the Enterprise Service Policy.
  1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Click BlackBerry Enterprise Server.
  3. Click Edit component.
  4. In the Enterprise Service Policy section, in the Allowed drop-down list, click Yes for each BlackBerry device model that you want to permit to access the BlackBerry Enterprise Server Express.
  5. To add a new BlackBerry device, on the Add New Allowed PINs tab, in the New Allowed PINs field, type the PIN for the BlackBerry device. Click the Add icon.
  6. To remove a BlackBerry device from the list, on the Removing Existing Allowed Pins tab, in the PINs section, select the PIN for the BlackBerry device.
  7. Click Save All.

Permit a user to override the Enterprise Service Policy

Before you begin: Turn on the Enterprise Service Policy.
  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User.
  2. Click Manage users.
  3. Search for a user account.
  4. Click the display name for the user account.
  5. Click Edit user.
  6. On the Component information tab, in the BlackBerry Enterprise Server information section, in the Enterprise service policy override drop-down list, click Yes.
  7. Click Save All.
Next topic: Extending messaging security to a BlackBerry device
Previous topic: Change the symmetric key encryption algorithm that the BlackBerry Enterprise Solution uses

Was this information helpful? Send us your comments.