[mbelloise]

Greetings,

I am seeking input as to how our company can restrict our enterprise users to download applications from a single source. In other words, we want to permit our users to download blackberry compatible applications, but from an "approved" source e.g. appsworld.

We've wrestled with just pushing applications but want to avoid the overhead.

If this is NOT possible what types of auditing reports are available should we roll out an acceptable use policy explicitily staing the approved download source?

We are just below BES version 5


First time poster...so be gentle Many thanks

[Jadey]

Just below BES 5?

Do you mean 4.1.x then?

[dc/dc]

Have you checked out the BES Administrator section? You'll probably have luck there.

[mbelloise]

Yes Jadey, 4.1.

[Jadey]

Have a look at the policy doc settings for:

Security policy group > Disallow Third Party Application Downloads

"Specify whether the BlackBerry device permits the user to download applications authored by third-parties (in other words, not authorised by Research in Motion (RIM)).

If you do not set this rule, a default value of False will be used."

I don't think it specifically restricts app downloads to AppWorld, but it WOULD stop any non-approved apps being downloaded OTA.

You might also want to set:

Desktop-Only Items > Show Application Loader to False

to stop users downloading DM installation files and installing over the cable.

[mbelloise]

I will and thank you so much Jadey, this is a great start!

[SoUnCool]

Originally Posted by Jadey

Have a look at the policy doc settings for:

Security policy group > Disallow Third Party Application Downloads

"Specify whether the BlackBerry device permits the user to download applications authored by third-parties (in other words, not authorised by Research in Motion (RIM)).

If you do not set this rule, a default value of False will be used."

I don't think it specifically restricts app downloads to AppWorld, but it WOULD stop any non-approved apps being downloaded OTA.

Are you sure about this ? I think this will disallow all applications, regardless of who authorized included RIM apps, for example BB Messenger update

[Jadey]

Why would it disallow all apps? When it quite clearly states THIRD PARTY?

[noname]

Jadey is correct. Apps like BlackBerry Messengers, FaceBook etc. created by RIM themselves will not be blocked.

[SoUnCool]

Originally Posted by Jadey

Why would it disallow all apps? When it quite clearly states THIRD PARTY?

Originally Posted by noname

Jadey is correct. Apps like BlackBerry Messengers, FaceBook etc. created by RIM themselves will not be blocked.

not true, just tested with my IT policy, when I enabled this policy, I cannot download install anything

[noname]

Interesting, RIM Policy guide writes:

This rule specifies whether a user can install an application that the Research In Motion® signing authority system has not digitally signed on a BlackBerry® device.

Will test out in my lab and update all.