we went for an entire year with all having the same IT policy and some had it and others didnt, and finally the BES admin said, oh you don't have that option, and they just turned it on somehow without messing with the IT policy, which goes along with the post above me....