[wistowg]

Grateful for any help on this. Env't is BES 5.0.2MR2 and since forever (had BES since 2002) we've had essentially just 2 IT Policies. A Standard policy with "Disallow 3rd party application downloads" set to True and an Elevated policy with it set to False. In order to push an app OTA to a device we first assign the Elevated policy then roll back to the Standard policy when deployment completes. Been that way for as long as we've been deploying OTA apps and it works fine.

Enabling Content Protection on these 2 policies has an unexpected result. Devices to which 3rd party apps have previously been deployed immediately have those apps uninstalled when the Content Protection policy is received. It's as if "Disallow 3rd party application downloads" is now interpreted as "Disallow 3rd party applications".

I've raised it with RIM who say that 3rd party apps should be uninstalled if "Disallow 3rd party application downloads" is set to True, with or without Content Protection being enabled.

So has my previous 9 years BES experience just been a convenient glitch?

[freakinvibe]

This is standard behaviour. What you should do is to set "Disallow 3rd party application downloads" to "False" for everybody that you want to deploy an app to via software configuration and you should leave them on the elevated policy.

But in your software config, you should set the app policy to "Disallow" for any unlisted apps. So your users will only get the apps that you want them and they cannot download any other apps.