Requests to use personal mobile devices to access corporate email

[sadams@bigrocksports.com]

Recently, our IT department has received a significant increase in requests to use personal mobile devices to access email on our system. Typically, we leave it up to the department head of the person making the requests, then we grant access if approved.

I need to come up with a formal policy. One thought is to request/require that users use an inactivity timeout password on their devices in the even they are stolen.

Anyone willing to share what policy you have in place?

Thanks.

[uxbod]

A lot will come down to what device they are using. If a device is stolen then why not just force a password change on the account ?

[bdial]

doesnt 6.x have remote wipe capability too?

[uxbod]

It does for iPhones but not sure about BBs (hence asking which devices are used); plus the remote wipe is via the ZWC and not the Admin GUI.

[y@w]

Remote wipes work on a BES account, but it won't work on a 'non-BESified' BlackBerry. The other nice thing about the BB devices is that if they try to login unsuccessfully 10 times on a locked device it wipes the device.

I think the remote wipe also works on Windows Mobile and Android, but I don't really have anything to base that on (going strictly from what I think I remember someone telling me ).

[ewilen]

Originally Posted by uxbod

A lot will come down to what device they are using. If a device is stolen then why not just force a password change on the account ?

That's better than nothing, but it won't get rid of emails that are sitting on the device.