[eda74]

I have a question for the community. I am an IT manager and the question has been posed to me. What will stop someone from adding an unauthorized account to their blackberry. For example say that Jack is a senior level executive and another employee finds out the user name and password of the exec. The employee then adds the email to his BIS and then gains access to the exec email. Is there a way to add a certificate to the device and have BIS or our internal mail server verify the device before allowing a connection?

All our users are on BIS. I have about 20 blackberry users.

If I have not explained myself clearly, i apologize. Thanks for any and all advice.

[penguin3107]

No, there's no way to do what you are asking with BIS.
For secure corporate environments, you should be using BES, not BIS.

[eda74]

So I guess the best way to prevent unauthorized email access is to invest in a BES.

[zerog46]

And strong passwords.

[eda74]

That always helps. Try telling that to an idiot. =)

[jmosssr]

Don't forget too that there would be nothing to stop the unscrupulous employee from setting up and Outlook profile or to use Outlook Web access to get into the mail account. If they have the user name and password they could also do that.

[jbairdjr]

If you are a small business or government agency, a BES may be too expensive.
We use BIS for our devices, and I created the passwords for the email accounts.
They are secure, and as long as a Blackberry isnt left somewhere unlocked, it is secure.

[tsac]

Reguardless which server you use, without password auto lock time limit enforcement, neither will be secure if the Blackberry is left unattended.

[takeshi]

Originally Posted by eda74

For example say that Jack is a senior level executive and another employee finds out the user name and password of the exec.

I fully understand that this involves an exec but if passwords aren't strong and secure then, yes, all sort of issues are possible and not just with BIS.

Do your users really need access to BIS?