BlackBerry Tasks and Notes app configuration settings

Select the level of detail that users see in tasks reminders.

Available settings:

No notifications
Show generic notification
Show task title

Select the "Use

Kerberos

Constrained Delegation in place of login/password" option to specify whether

Kerberos

Constrained Delegation will be used for logging in to

Microsoft Exchange

. If this option is not selected, NTLM/Basic authentication will be used.

Select the "Use client certificate in place of login/password" option to specify whether clients must have individual login certificates (SSL) uploaded to the

BlackBerry UEM

management console. These certificates are used for login instead of basic credentials (username/password).

Administrators can select any of the following settings:

Do not allow user to open hyperlinks
Only allow secure browser
Prefer secure browser but allow device browser

In the Server List Reshuffle Period (minutes) field, specify the frequency that the server list, if present, is reshuffled for load balancing purposes.

In the Server List Quarantine Period (minutes) field, specify how long

BlackBerry Tasks

or

BlackBerry Notes

waits before retrying if BlackBerry UEM is not working.

Specify the authentication methods to use. If only certain authentication methods are supported in

Microsoft Exchange

, set those values to minimize the user setup time. (For example, if EWS IIS Auth Setting is set to allow only NTLM, then select only NTLM above for an optimal setup experience.) If none are selected above, the default

Microsoft Exchange

setting is used. If using client-based authentication, check none of the options.

Specify the Exchange domain or the Exchange server you want to use.

Select the username formats that can be used to authenticate with

Microsoft Exchange Web Services

. Available settings:

UPN
Domain\UserId
SMTP

To simplify user setup, select only the username formats that are supported by

Microsoft Exchange Web Services

.

If you do not select an option, all options are allowed.

Specify the user credential profile that contains the TLS certificate to be used to connect to

Microsoft Exchange

. The name of the profile that you specify must match the name of the user credential profile that was created in the

BlackBerry UEM

management console.

For more information on user credential profiles, see Sending client certificates to devices and apps using user credential profiles.

In the "Exchange User Name Format" section, select UPN to use a UPN user name format instead of SMTP when authenticating with

Microsoft Exchange Online

. Depending on your environment, if your users are configured with UPNs that are different from their email address, you might need to enable "Use explicit UPN" property. For more information, see

BlackBerry Dynamics

global properties.

If you select the "Enable DLP Watermark" option, a watermark is added to all

BlackBerry Dynamics

app screens (for example,

BlackBerry Work

,

BlackBerry Work

Docs, Calendar, and Contacts). The watermark shows the user's username and current date and time.

Note

: If users print a file, the watermarks are not displayed in the output.

Select the "Prevent Screenshots on

iOS

" option to prevent screenshots of

BlackBerry Tasks

or

BlackBerry Notes

from being taken on an

iOS

device.

If you select the "Allow users to perform app diagnostics" option, users can perform app diagnostics from the

BlackBerry Dynamics

Launcher on their devices.

Specify whether to allow access to the device camera, the photo gallery, or both. Available settings:

Allow access to camera and device photo gallery
Allow access to camera only
No access to camera or device photo gallery

The default value is "Allow access to camera and device photo gallery."

Select the "Tap a phone number to dial using native phone" option to allow users to use the native phone app.

Select the "Grant permission to use the Tasks list widget (

Android

only)" option to allow users to use the Tasks list widget.

Specify whether to allow incoming attachments and specify a maximum size and the file extensions that are allowed or disallowed.

Select a size from the drop-down list to block attachments larger than that size.

Select if you want to block or only allow receiving attachments by file extensions and specify the file extensions.

Disabling this policy will result in using legacy

Microsoft

Azure Active Directory Authentication Library when logging into Notes mailbox account. (iOS Only)

Select the "Disable SSL Certificate Checking" option to disable SSL Certificate verification for

Exchange ActiveSync

/

Microsoft Exchange Web Services

in test environments.