Welcome!

Welcome to the official BlackBerry Support Community Forums.

This is your resource to discuss support topics with your peers, and learn from each other.

inside custom component

BlackBerry® Enterprise Service 10

Reply
Contributor
Posts: 16
Registered: ‎05-01-2013
My Device: Blackberry 9800
My Carrier: Telus
Accepted Solution

Lockdown ActiveSync

I'm wondering if there is some way of locking down the use of ActiveSync to only BES?  I don't want people running around with Andriod phones activating against our OWA / ActiveSync.  I want to ensure mobile devices are managed within our policies, and control.  Any ideas?

Guru III
Posts: 32,114
Registered: ‎06-25-2008
My Device:

I'm rockin the BlackBerry PRIV, Passport, Z30, Z10, Q10, BlackBerry Mini Stereo Speaker, 64 gig PlayBook,BT Headset HS-700

My Carrier: I am on AT&T. Please edit your Personal Profile with your DEVICE TYPE, DEVICE OS and Carrier

Re: Lockdown ActiveSync

Yes you can lock down EAS with BES, you dont even need it published to internet.

 

OWA on the other hand takes on a different path/URL but you could lock it down to VPN use only orby SSL user CERT

 




Click here to Backup the data on your BlackBerry Device! It's important, and FREE!


Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals

BESAdmin's, please make a signature with your BES environment info.


SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope


Want to thank me? Buy my KnottyRope App here


BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V


Super Contributor
Posts: 323
Registered: ‎05-10-2011
My Device: Z10

Re: Lockdown ActiveSync

You can use the Gatekeeping function in BES10 to handle this. Or, if you are planning to use Secure Work Space you can place restrictions on permitted device types so that only the Secure Work Space is permitted. All of this is done on the Exchange side of things (with the exception of the Gatekeeping setup).

You could also just disable ActiveSync on all accounts and just enable it for users who are allowed to use it. It all depends on how restrictive and/or complex you want to make things.

The simplest way is to use Secure Work Space and block all device types except the Secure Work Space. By doing this, only devices that are activated against BES10.1 and use Secure Work Space can access ActiveSync.
----------
BESX 5.0.4, SQL 2008, Exchange 2010 SP2 RU4a
Contributor
Posts: 16
Registered: ‎05-01-2013
My Device: Blackberry 9800
My Carrier: Telus

Re: Lockdown ActiveSync

I don't see "Secure Work Space" as a device type in the Exchange ActiveSync devices.  Where can I find this?

Highlighted
Super Contributor
Posts: 323
Registered: ‎05-10-2011
My Device: Z10

Re: Lockdown ActiveSync

For iOS devices running Secure Work Space, the ActiveSync device type is "BES10WorkConnect". For Android devices, it's "WorkConnect".
----------
BESX 5.0.4, SQL 2008, Exchange 2010 SP2 RU4a