Feature/Policy

Description

BlackBerry

Security

Allows only secure provisionable devices

Only secure provisionable models are supported

X

Password Locked

Administrator can lock setting

X

Password Strength

Password  must meet character pattern requirements - 4 strength levels for devices running NL Device App

X

Password Strength Locked

Administrator can lock setting

X

Minimum Password Length

Minimum of 8 characters required for passwords

X

Minimal Password

Allows a minimal password composed of 4 characters

X

Device Password Expiration

Set # of days before password expires

X

Device Password Expiration Locked

Administrator can lock setting

X

Device Password History

Prevents user from reusing passwords too soon

X

Device Password History Locked

Administrator can lock setting

X

Inactivity Timeout

Set # of minutes before the device locks, due to inactivity

* Set on device using  Auto-Lock: 1 to 5 minutes

X

Inactivity Timeout Locked

Administrator can lock setting

X

Challenge Timeout

Timeout lock regardless of activity; challenges use of device if lost or stolen

X

Challenge Timeout Locked

Administrator can lock setting

X

Emergency Call Rules

Allows dialing of 4 configurable emergency numbers when inactivity or challenge locks are imposed.

X

Password Echo

Unmasks the last password typed to expose user entry error

X

Password Echo Locked

Administrator can lock setting

X

Wipe on Failed Unlock Attempts

Maximum number of failed unlock attempts before device wipe

X

Wipe on Failed Unlock Attempts Locked

Administrator can lock setting

X

Duress Notification

If compromised, user activates the duress notification by entering unlock password in an altered format

X

Duress Notification Locked

Administrator can lock setting

X

Lock Message

Determine what message displays when a lock is imposed

X

Lock Message Locked

Administrator can lock setting

X

Remote Lock

Administrator can initiate lock on device from remote location

X

Remote Wipe

Administrator can initiate data wipe on device from remote location

X

Device Password Enabled  

Enable/disable password lock

X

Device  Encryption

Encryption of data stored on device

X

AES All Message Content

Supported encryption protocol for data-in-motion

X

TDES All Message Content

Supported encryption protocol for data-in-motion

X

SSL All Message Content

Supported encryption protocol for data-in-motion

X

Compress Transmitted Message

Compression of traffic to the device

X

Email

BB

Attachments Enabled

Enable/disable attachment sync

X

Max Attachment Size

Limits attachment size

X

Send Recipient Type

Choose whether or not  to include Recipient type on the email notification if the user is listed in the CC: or BCC: field

X

Send List of Recipients

Choose whether or not  to include a list, in addition to the original email, showing email addresses of TO: and CC: recipients

X

Sync Reads

Choose whether or not  to include synchronize message status changes from the device

X

Sync Reads Locked

Administrator can lock setting

X

Sync Deletes

Choose whether or not  to include synchronize message status changes from the device

X

Sync Deletes Locked

Administrator can lock setting

X

Enable Smart Read Status

Prevents sync of message read before device has retrieved it from the server

X

Enable Smart Deletes

Prevents sync of message deleted before device has retrieved it from the server

X

Synchronize All Mail

Choose whether all messages (read and unread) or only new unread mail is sent to device

X

Synchronize Message Changes

Choose whether or not  to include synchronize message status changes from the server

X

Message Availability

Amount of time a message is available for replies/forwards from the device

X

Smart Retrieval

Limit quantity of the email message body pulled from the server

X

Allow HTML Email

HTML emails sent intact to the device. (Requires NLES and NotifyLink for BlackBerry 4.7 versions)

X

Disable Email (Notification ON/OFF)

Enable/disable Email processing

X

Track Notifications

Track notifications for every PIM addition/change/deletion and Email synchronized from server to device.  Notifications stored in the Sent Items folder on the groupware account.

X

Track Device Mail

Track every Email sent from the device.  Tracked Email is stored in the Sent Items folder on the groupware account.

X

Enable Folder Mirroring

Allows email folders selected for monitoring to be mirrored on the device. 

X

Include Response History

Replies to users’ messages contain the original message body in the notification.
(Defined on device)

X

Signature

Include defined signature on messages sent from the device.

X

Filters

Filter which messages are sent to the device

X

PIM

BB

Disable PIM

Enable/Disable PIM processing

X

Sync Contacts

Enable/Disable contact sync from server to device

X

Sync Contacts Locked

Administrator can lock setting

X

Choose Address Books

Select which personal address books to synchronize to the device

(For groupware servers that support multiple address books.)

X

Sync Calendar

Enable/Disable calendar sync from server to device

X

Sync Calendar Locked

Administrator can lock setting

X

Synchronization Range: Look Back

Calendar events occurring after this date are synchronized  

X

Synchronization Range: Look Ahead

Calendar events occurring before this date are synchronized

X

Sync Tasks

Enable/Disable task sync from server to device

X

Sync Tasks Locked

Administrator can lock setting

X

Tasks Look Ahead

Server syncs tasks with start or due dates that fall in the look-ahead range

X

PIM Change Summary

Sends information to the device Inbox summarizing PIM additions/changes/ deletions downloaded from the server

X

PIM Change Summary Locked

Administrator can lock setting

X

Synchronization Pop-ups

Device shows a pop-up alert when new PIM data is synchronized (BlackBerry devices)

X

Synchronization Pop-ups Locked

Administrator can lock setting

X

Allow Send Meeting Invitations

Allow/disallowed sending meeting invitations to device

X

Verbose Logging

Offers  various detail levels for troubleshooting PIM processing

X

Email and PIM

BB

Push Type Settings

Choose Scheduled or Direct Push

X

Push Type Locked

Administrator can lock setting

X

Weekday Settings

Weekday push timeframes

X

Weekday Settings Locked

Administrator can lock setting

X

Weekend Settings

Weekend push timeframes

X

Weekend Settings Locked

Administrator can lock setting

X

Notification Alert

Device shows a pop-up alert when new email or PIM data is received

X

Notification Alert Locked

Administrator can lock setting

X

Send Error Messages

Error messages sent to device if errors are encountered

X

User Access
(User Permissions in Client Web)

BB

Edit Notification Format

Email format and attachment descriptors

X

Edit Calendar Sync Settings

Enable sync, set range, reminders, summary, etc.

X

Edit Contact Sync Settings

Enable sync, choose address books

X

Edit Task Sync Settings

Enable sync, look ahead range

X

Edit Control Options

Messaging, tracking, and PIM options

X

Edit Account Settings

Update username/passwords associated with groupware account

X

Edit Display Name

Define the name that will display in the From: field of the email sent from the user’s device.

X

Edit Sender Email Settings

Settings for multiple devices registered to one NotifyLink account.

X

Delete Blocks

Remove device issued blocks on email addresses

X

Create Filters

Filter the email synchronized to device

X

Choose Folders

Select Email folders to be monitored for synchronization

X

Edit Security Settings

Encryption type/key, Authentication password

X

Edit Signature

Signature included on Emails sent

X

Edit Device Settings

Device time zone, PIN, etc.

X

View User Statistics

Allow users to view device and Email/ PIM poll cycle statistics for their account.

X

Device Control

BB

Require Storage Card Encryption  

Whether encryption of a storage card is required

‡

Device Cleanup Options

Set conditions for automatic deletion of email

X

Device Cleanup Options Locked

Administrator can lock setting

X

Allow Browser

Allow Pocket IE; does not affect 3^rd party browsers

Allow Consumer Email

Allow configuration of a personal email account

Allow Bluetooth

Enable/disable ability to use Bluetooth connections

Use Trash Folder

Move deleted email to trash or remove from device

X

Use Trash Folder Locked

Administrator can lock setting

X

Track Sent Items

Place items and commands originating on device in Sent Items folder

X

Track Sent Items Locked

Administrator can lock setting

X

Unapproved In ROM Application List

List applications that cannot be run in ROM

Approved Application List

List of applications allowed on the device

File List Frequency

Sends list of the applications on the device to the server - daily, weekly, or monthly

X

File List Frequency Locked

Administrator can lock setting

X

Allow WiFi

Enable/disable ability to use WiFi connections

Allow Text Messaging

Enable/disable ability to text from device

Allow POP IMAP Email

Enable/disable ability to define POP/IMAP account on device

Allow IrDA

Enable/disable whether infrared connections are allowed to the mobile device

Allow Storage Card

Enable/disable ability to have storage card access

Allow Camera

Enable/disable ability to use device camera – enforces memory availability

Require Device Encryption

Encryption of data at rest on device
*v4.7 NotifyLink data only

X*

Allow Unsigned Applications

List of unsigned applications allowed on device

Allow Unsigned Installation Packages

List of unsigned installation packages allowed on the device

Miscellaneous

BB

Device Policy Refresh Interval

Retrieves and implements on the device, any policy changes made on the server; occurs every time device syncs

X