Feature/Policy

Description

iOS4
Devices

Windows

Mobile

webOS

Android

with

TouchDown

Android

Native

Symbian

S60, 3^rd

Edition

WP7

Security

Allows only secure provisionable devices

Only secure provisionable models are supported

X

X

X

X

X

X

X

Enforce ActiveSync Policies

If this setting is disabled, policies will not be sent to the device.  (NLES v4.6.1 or higher)  Note: ActiveSync policy support varies by device.

X

X

X

X

X

X
see KB #11

X

Password Locked

Administrator can lock setting

(Always on for AS devices when ActiveSync Policies are enforced)

X

X

X

X

X
see AndroidKBs

X

X

Allow Simple Password

Allows a password with a repeating character pattern.

X

X

X

X

X
see AndroidKBs

X

X

Require Alphanumeric Password

Requires a password containing both alphabetic and numeric characters.  Set  a minimum number of complex characters.

X

X

X

X

X
see AndroidKBs

X

Minimum Password Length

Require and set a minimum password length from 2 to 8 characters.

X

X

X

X

X
see AndroidKBs

X

X

Minimal Password

Allows a minimal password composed of 4 characters.  (Controlled via the Password Length setting.)

X

X

X

X

X
see AndroidKBs

X

X

Device Password Expiration

Set # of days before password expires

X

X

X

X

X

Device Password Expiration Locked

Administrator can lock setting

(Always on for AS devices when ActiveSync Policies are enforced)

X

X

X

X

Device Password History

Prevents user from reusing passwords too soon

X

X

X

X
see AndroidKBs

X

Device Password History Locked

Administrator can lock setting

(Always on for AS devices when ActiveSync Policies are enforced)

X

X

X

X

Maximum Inactivity Timeout

Maximum value, in minutes, to which the Inactivity Timeout may be set on the device.

*iOS devices are preset with a 5 minute maximum.

X*

X

X

X

X

X

X

Challenge Timeout

Timeout lock regardless of activity; challenges use of device if lost or stolen

Challenge Timeout Locked

Administrator can lock setting

Password Echo

Unmasks the last password typed to expose user entry error

Password Echo Locked

Administrator can lock setting

Wipe on Failed Unlock Attempts

Maximum number of failed unlock attempts before device wipe
* Limited functionality - see documentation.

X

X

X

X*

X
see AndroidKBs

X

X

Wipe on Failed Unlock Attempts Locked

Administrator can lock setting

(Always on for AS devices when ActiveSync Policies are enforced)

X

X

X

X

X
see AndroidKBs

X

X

Duress Notification

If compromised, user activates the duress notification by entering unlock password in an altered format

Duress Notification Locked

Administrator can lock setting

Lock Message

Determine what message displays when a lock is imposed

Lock Message Locked

Administrator can lock setting

Remote Lock

Administrator can initiate lock on device from remote location

Remote Wipe

Administrator can initiate data wipe on device from remote location  *Limited functionality - see documentation

X

X

X

X*

X*

X

X

Device Password Enabled  

Enable/disable password lock

X

X

X

X

X
see AndroidKBs

X

X

Device  Encryption

Encryption of data stored on device
*Always on for iPhone 3GS & 4; iPad touch3rd & 4^th Gen.; and iPad
** WM 6.1/6.5 only

X*

X**

X

X

X

X

AES All Message Content

Supported encryption protocol for data-in-motion

TDES All Message Content

Supported encryption protocol for data-in-motion

SSL All Message Content

Supported encryption protocol for data-in-motion

*Defined on device

X*

X*

X*

X*

X

X

X*

Compress Transmitted Message

Compression of traffic to/from the device

X

X

X

X

Email

iOS4

WM AS

webOS

TouchDown

Android
Native

S60, 3

WP7

Attachments Enabled

Enable/disable attachment sync

(Always enabled for ActiveSync devices)

X

X

X

X

X

X

X

Max Attachment Size

Limits attachment size

X

X

X

X

X

X

X

Send Recipient Type

Choose whether or not  to include Recipient type on the email notification if the user is listed in the CC: or BCC: field

Send List of Recipients

Choose whether or not  to include a list, in addition to the original email, showing email addresses of TO: and CC: recipients

Sync Reads

Choose whether or not  to include synchronize message status changes from the device

Sync Reads Locked

Administrator can lock setting

Sync Deletes

Choose whether or not  to include synchronize message status changes from the device

Sync Deletes Locked

Administrator can lock setting

Enable Smart Read Status

Prevents sync of message read before device has retrieved it from the server

Enable Smart Deletes

Prevents sync of message deleted before device has retrieved it from the server

Synchronize All Mail

Choose whether all messages (read and unread) or only new unread mail is sent to device

X

X

X

X

X

X

X

Synchronize Message Changes

Choose whether or not  to include synchronize message status changes from the server

X

X

X

X

X

X

X

Message Availability

Amount of time a message is available for replies/forwards from the device

* Set on the device

X*

X*

X*

X*

X

X*

X*

Smart Retrieval

Limit quantity of the email message body pulled from the server 
* Enforces the value sent from device, but is limited by Smart Retrieval size.

X*

Allow HTML Email

HTML emails sent intact to the device
*Requires NLES version 4.7

X

X*

X*

X

X

Disable Email (Notification ON/OFF)

Enable/disable Email processing

X

X

X

X

X

X

X

Track Notifications

Track notifications for every PIM addition/change/deletion and Email synchronized from server to device.  Notifications stored in the Sent Items folder on the groupware account.

X

Track Device Mail

Track every Email sent from the device.  Tracked Email is stored in the Sent Items folder on the groupware account.

X

X

X

X

X

X

X

Enable Folder Mirroring

Allows email folders selected for monitoring to be mirrored on the device. 

(Always enabled for ActiveSync devices)

X

X

X

X

X

X

X

Include Response History

Replies to users’ messages contain the original message body in the notification.

X

Signature

Include defined signature on messages sent from the device.

* Defined on device

X*

X*

X*

X*

X*

X*

Filters

Filter which messages are sent to the device

X

X

X

X

X

X

X

PIM

iOS4

WM AS

webOS

TouchDown

Android
Native

S60, 3

WP7

Disable PIM

Enable/Disable PIM processing

X

X

X

X

X

X

X

Sync Contacts

Enable/Disable contact sync from server to device

X

X

X

X

X

X

X

Sync Contacts Locked

Administrator can lock setting

Choose Address Books

Select which personal address books to synchronize to the device

(For groupware servers that support multiple address books.)

X

X

X

X

X

X

X

Sync Calendar

Enable/Disable calendar sync from server to device

X

X

X

X

X

X

X

Sync Calendar Locked

Administrator can lock setting

Synchronization Range: Look Back

Calendar events occurring after this date are synchronized

* Set on the device.  Ignores the look-back from the NLES web.

** Sent from the device.

X*

X*

X**

X**

X**

X**

X**

Synchronization Range: Look Ahead

Calendar events occurring before this date are synchronized

* Set on the NLES web.

X*

X*

X*

X*

X*

X*

X*

Sync Tasks

Enable/Disable task sync from server to device
*For iOS – supported with iOS 5 or greater on NLES 4.8.x

X

X

X

X

X

Sync Tasks Locked

Administrator can lock setting

Tasks Look Ahead

Server syncs tasks with start or due dates that fall in the look-ahead range
*For iOS – supported with iOS 5 or greater on NLES 4.8.x

X

X

X

X

X

PIM Change Summary

Sends information to the device Inbox summarizing PIM additions/changes/ deletions downloaded from the server

PIM Change Summary Locked

Administrator can lock setting

Synchronization Pop-ups

Device shows a pop-up alert when new PIM data is synchronized (BlackBerry devices)

Synchronization Pop-ups Locked

Administrator can lock setting

Allow Send Meeting Invitations

Allow/disallowed sending meeting invitations to device

X

X

X

X

X

X

X

Verbose Logging

Offers  various detail levels for troubleshooting PIM processing

X

X

X

X

X

X

X

Email and PIM

iOS4

WM AS

webOS

TouchDown

Android
Native

S60, 3

WP7

Push Type Settings

Choose Scheduled or Direct Push

*Device initially chooses Direct Push

X*

X*

X*

X*

X*

X*

X*

Push Type Locked

Administrator can lock setting

Weekday Settings

Weekday push timeframes

Weekday Settings Locked

Administrator can lock setting

Weekend Settings

Weekend push timeframes

Weekend Settings Locked

Administrator can lock setting

Notification Alert

Device shows a pop-up alert when new email or PIM data is received
* Email only

X*

Notification Alert Locked

Administrator can lock setting

Send Error Messages

Error messages sent to device if errors are encountered

User Access
(User Permissions in Client Web)

iOS4

WM AS

webOS

TouchDown

Android
Native

S60, 3

WP7

Edit Notification Format

Email format and attachment descriptors

Edit Calendar Sync Settings

Enable sync, set range, reminders, summary, etc.

X

X

X

X

X

X

X

Edit Contact Sync Settings

Enable sync, choose address books

X

X

X

X

X

X

X

Edit Task Sync Settings

Enable sync, look ahead range
*For iOS – supported with iOS 5 or greater on NLES 4.8.x

X

X

X

X

X

Edit Control Options

Messaging, tracking, and PIM options

X

X

X

X

X

X

X

Edit Account Settings

Update username/passwords associated with groupware account

X

X

X

X

X

X

X

Edit Display Name

Define the name that will display in the From: field of the email sent from the user’s device.

X

X

X

X

X

X

X

Edit Sender Email Settings

Settings for multiple devices registered to one NotifyLink account.

X

X

X

X

X

X

X

Delete Blocks

Remove device issued blocks on email addresses

Create Filters

Filter the email synchronized to device

X

X

X

X

X

X

X

Choose Folders

Select Email folders to be monitored for synchronization

X

X

X

X

X

X

X

Edit Security Settings

Encryption type/key, Authentication password

X

X

X

X

X

X

X

Edit Signature

Signature included on Emails sent

* Defined on device

X*

X

X*

X*

X*

X

X*

Edit Device Settings

Device time zone, PIN, etc.

X

X

X

X

X

X

X

View User Statistics

Allow users to view device and Email/ PIM poll cycle statistics for their account.

X

X

X

X

X

X

X

Device Control

iOS4

WM AS

webOS

TouchDown

Android
Native

S60, 3

WP7

Require Storage Card Encryption  

Whether encryption of a storage card is required

‡

‡

‡

X

Device Cleanup Options

Set conditions for automatic deletion of email

Device Cleanup Options Locked

Administrator can lock setting

Allow Browser

Allow Pocket IE; does not affect 3^rd party browsers

‡

‡

Allow Consumer Email

Allow configuration of a personal email account

‡

‡

Allow Bluetooth

Enable/disable ability to use Bluetooth connections

‡

‡

Use Trash Folder

Move deleted email to trash or remove from device

Use Trash Folder Locked

Administrator can lock setting

Track Sent Items

Place items and commands originating on device in Sent Items folder

Track Sent Items Locked

Administrator can lock setting

Unapproved In ROM Application List

List applications that cannot be run in ROM

‡

Approved Application List

List of applications allowed on the device

‡

File List Frequency

Sends list of applications on the device to the server - daily, weekly, or monthly

File List Frequency Locked

Administrator can lock setting

Allow WiFi

Enable/disable ability to use WiFi connections

‡

‡

Allow Text Messaging

Enable/disable ability to text from device

‡

Allow POP IMAP Email

Enable/disable ability to define POP/IMAP account on device

‡

Allow IrDA

Enable/disable whether infrared connections are allowed to the mobile device

‡

Allow Storage Card

Enable/disable ability to have storage card access

‡

‡

Allow Camera

Enable/disable ability to use device camera – enforces memory availability

X

X

X
see AndroidKBs

Require Device Encryption

Encryption of data at rest on device

‡

‡

‡

X

Allow Unsigned Applications

List of unsigned applications allowed on device

‡

Allow Unsigned Installation Packages

List of unsigned installation packages allowed on the device

‡

Miscellaneous

iOS4

WM AS

webOS

TouchDown

Android
Native

S60, 3

WP7

Device Policy Refresh Interval

Retrieves and implements on the device, any policy changes made on the server; occurs every time device syncs

X

X

X

X

X
see AndroidKBs

X

X