Thanks for your responses. I checked out the active sync webadmin tool. I just read that a problem with it is that when you initiate a remote wipe, the user has to accept the "enforce security policy" dialog. If they do not, then the device is still readable. This somewhat defeats the purpose if the device is being used illegally or stolen.
Hereis the link:
http://www.windowsitpro.com/Article/...629/50629.html
I also was wondering how to get a list of the devices using my network. This tool requires that I know a username. I will want to make sure no devices are hooked up other than the ones I know about.
I also checked out the policies under Device security. At least it has some, but it seems rather limited compared to bb, most are just password requirements. The policies are global for every user (unless they are on the exception list). In other words, I cant have execs with one policy and other users with another. I dont see anything where I can disable the phone or specific features.
Again, I am trying to evaluate whether we should use the Q in our corporate environment, so centralized control is somewhat important. I am really interest in what other IT managers are doing if they allow the Q, and how they control it. I want to give it a fair shake against the BB.
Thanks
Quote:
Originally Posted by igotaq if you have SP2 on exchange. you can use some of these policies.
Go to Exchange System manager
Expand Global settings
Go to properties of Mobile services
you'll see a button called Device Security. This is where you can enforce policies.
For remote wipe and ect.. you can check out Microsoft activesync web admin. tool |