Yeah, that is something I just stumbled upon on the BB forums. On Tue, Dec 16, 2008 at 2:06 PM, Barsodi.John <[email protected]> wrote:
> I just thought of something… remove the SendAs permissions from the BES > Service account on the AD user. Will take up to 2 hours for Exchange to > update its permissions cache, but that would get the job done. > > > > - John Barsodi > > *From:* Barsodi.John [mailto:[email protected]] > *Sent:* Tuesday, December 16, 2008 11:01 AM > *To:* NT System Admin Issues > *Subject:* RE: BES - disable user temporarily > > > > Humph. That's strange. I thought for sure that would get it. I just > tested here real quick and no dice either. There's gotta be a way to get > this done. > > > > - John Barsodi > > *From:* Kevin Lundy [mailto:[email protected]] > *Sent:* Tuesday, December 16, 2008 10:49 AM > *To:* NT System Admin Issues > *Subject:* Re: BES - disable user temporarily > > > > Interesting. Even after that, he can still send email (cause I got one > from him pleading to not disable). Of course, I don't get his mentality, > he's in the hospital with blood pressure, and I quote "off the chart" and he > wants to send emails. > > > > So we are just going to take him out of BES and we'll reprovision when his > health improves. > > On Tue, Dec 16, 2008 at 1:26 PM, Barsodi.John <[email protected]> > wrote: > > The allow browser and Enable Wireless Message Reconciliation are only > available via IT Policy. This will lock down the default apps in the BB OS > - if he has opera installed prior to receiving this policy he can still get > around the browsing disablement. I would have to dig, I think you can get > creative with something's to block that one… > > > > The last two are at the user level and more for the paranoid. > > > > > > John Barsodi *|* Messaging > > 775.448.2230 *|* IGT Reno - IS > > > > *From:* Kevin Lundy [mailto:[email protected]] > *Sent:* Tuesday, December 16, 2008 10:04 AM > > > *To:* NT System Admin Issues > > *Subject:* Re: BES - disable user temporarily > > > > Thanks John. Being relatively new to BES, can you tell me what is the > difference doing it via an IT policy versus doing it at the user level? I > believe we did all of those at the user level. > > On Tue, Dec 16, 2008 at 12:59 PM, Barsodi.John <[email protected]> > wrote: > > New IT Policy > > -Global Items > > --Allow Browser – set to false > > -Email Messaging policy Group > > --Enable Wireless Message Reconciliation-set to false > > > > Also keep Redirection disabled, and also disable connection and > collaboration services. > > > > > > - John Barsodi > > *From:* Kevin Lundy [mailto:[email protected]] > *Sent:* Tuesday, December 16, 2008 9:40 AM > *To:* NT System Admin Issues > *Subject:* BES - disable user temporarily > > > > We have a user that is insisting on using his BB while he is in the > hospital. We want to disable email and browsing, but leave the cell phone > functional. We thought just disabling redirection, as well as setting > wireless synch to false would do it. However, we have seen his "sent > messages" count increase. > > > > Any option besides simply removing him from BES or having the carrier > suspend data services? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
