Blackberry SWD-504685-0330050601-001 manual Set IT policy rules for a user account

Page 28

Administration Guide

Set IT policy rules for a user account

Advanced Security, Security, External File System Encryption Level, Encrypt to User Password (excluding multi-media directories), ENUMERATION: 0Not Required1Encrypt to User Password (excluding multi-media directories)2Encrypt to User Password (including multi-media directories)3Encrypt to Device Key (excluding multi-media directories)4Encrypt to Device Key (including multi-media directories)5Encrypt to User Password and Device Key (excluding multimedia directories)6Encrypt to User Password and Device Key (including multimedia directories)

Advanced Security, WLAN, WLAN Allow Handheld Changes, No, BOOLEAN Advanced Security, Device only, Maximum Security Timeout, 10, INTEGER Advanced Security, Bluetooth, Disable Address Book Transfer, Yes, BOOLEAN Advanced Security, Device only, Maximum Password Age, 30, INTEGER Advanced Security, Device only, Password Required, Yes, BOOLEAN

Set IT policy rules for a user account

1.To open the command window for the BlackBerry® Enterprise Server User Administration Tool, on the computer that hosts the tool, on the taskbar, click Start > Programs > BlackBerry Enterprise Server Resource Kit > BlackBerry Enterprise Server User Administration Tool > BlackBerry Enterprise Server User Administration Tool.

2.Type besuseradminclient <credentials> -set_user_itpolicy_rule and the following parameters:

•-u <user_name>

•-b <instance>

•-policyrule <rule_name>

•-policyvalue <value>

Example: Specifying a single IT policy rule for a user account

besuseradminclient -username admin -password password -set_user_itpolicy_rule -u smoser@test.rim.net -b server01 - policyrule “VPN User Name” -policyvalue smoser

List the IT policies in the BlackBerry Configuration Database

1.To open the command window for the BlackBerry® Enterprise Server User Administration Tool, on the computer that hosts the tool, on the taskbar, click Start > Programs > BlackBerry Enterprise Server Resource Kit > BlackBerry Enterprise Server User Administration Tool > BlackBerry Enterprise Server User Administration Tool.

2.Type besuseradminclient <credentials> -list -it_policies.

Example

besuseradminclient -username admin -password password -list -it_policies

26

Image 28

Contents Administration Guide SWD-504685-0330050601-001 Contents Sending notification messages to BlackBerry devices Input, output, and user feedback parameters Setuseritpolicyrule Overview BlackBerry Enterprise Server User Administration ToolEdit a group across Group Delete a software Configuration Create an application Create a software Configuration View a softwareTemplate View a job Service instance View push rules for Service View pull rules forAdd and remove a role across organizations New in this releaseTool Description BlackBerry Enterprise Activation Inputfilename PasswordOutputfilename Servername Supported authentication models Authentication credentialsSyntax for authentication credentials User name SQLU1 Password SQLP1 String value requirementsUse cases ExampleFollowing command BESUserAdminClient Setclientauth -basauth -setp password1Setclientauth -username BASU1 -password BASP1 -basauth -setp password1Re-install the service using the new client password Managing user accounts Adding user accountsAdd a new user account to the BlackBerry Enterprise Server UsernameAssign a software configuration to a user account Username Sw configurationnameAdd a new user account to a group Add an existing user account to a groupChanging and removing user accounts Finding user accountsFind a user account Delete a software configuration from a user account Move a user account to a different user groupDelete a user account from a group Username InstanceChange user account settings Delete a user account from the BlackBerry Enterprise ServerList the groups in a BlackBerry Domain Managing email message forwarding Turn on or turn off email message forwardingTurn on or turn off email message forwarding for folders Managing IT policies and IT policy rules List the IT policy rules in an IT policySet IT policy rules for a user account Managing BlackBerry devices Set a password for a BlackBerry deviceSet owner information on a BlackBerry device Resend a service book Delete pending messagesResend the peer-to-peer encryption key Protect a stolen BlackBerry deviceSend a notification PIN message Username or Groupname InstanceInfofile filename or Subject subjectlinetext Body messagebodytextSend a notification email message BlackBerry devices Retrieving user account statistics and information aboutRetrieve user account statistics Results of a statistics query for a user accountColumn Description ServerDN That is associated with the BlackBerry devicePIN of the BlackBerry device Device Type Model number of the BlackBerry device StateClear user account statistics Retrieve enterprise activation statistics for a user accountRetrieve enterprise activation statistics for a user account Retrieving BlackBerry device information Retrieve the statistics for BlackBerry devicesResults of a statistics query for a BlackBerry device Users userdeviceinformation Groupname InstanceColumn Description User Name Name of the user account Home CarrierSoftware configuration on the device Uptime Time since the BlackBerry device was last resetColumn Description IT Policy Time System StatusMessaging server Enterprise Server instance Instance sentInstance filtered Administration Tool Troubleshooting the BlackBerry Enterprise Server UserConfiguring log files Yyyymmdd is the dateWarn Error Fatal Using the command summary in the help file Common parameters Input, output, and user feedback parameters Subparameter DescriptionBES1,USER2,GROUP1,false BES1,USER7,GROUP2,trueWith the BlackBerry Administration Service Error This level is not currently usedBe one of the following types Well as messages of earlier levelsAdd BlackBerry Administration ServiceGroupWise Itpolicy ITpolicyname OryWt expiry time Assignswconfig Subparameters -assignswconfig DescriptionCsw configurationname Cannot use this subparameter with -swUtype type Change Syntax -changeThis subparameter clears the users email message filters BlackBerry Enterprise Server for Novell GroupWiseEnterprise Server for Novell GroupWise AccountPurgependingmessages Account to -add or an existing user account to -changeFrom Password Subparameter Description CanonicalnameAdministration Tool does not find the mailbox DeleteSubparameters -delete Description ForceAdministration Guide Find Subparameters -find DescriptionHandheldinfo Subparameters -handheldinfo Description Appname Work with the -u or -b subparametersAction. It works with the -u subparameter HhstatsSubparameter Description Users Instead of one user accountKillhandheld Subparameters -killhandheld DescriptionAdministration Guide List Apppolicyname Instance ConfigurationnameItpolicy IT policyname Displayname Subparameters -move Description MoveMove the account to Administration Guide Subparameters -resendpeertopeerkey Description ResendpeertopeerkeyAction Resendservicebook Subparameters -resendservicebook DescriptionBody bodytext SendemailInfofile filename.txt Utype type Sendpin Subparameters -sendpin DescriptionThis subparameter specifies the body of the PIN message This subparameter specifies the name of the user groupDisplayname Default authentication type SetclientauthInterchangeably with -password Exchange messaging serverCredentials in the Windows registry Sqluser usernameSetfolderredirection Subparameters -setfolderredirection DescriptionServer for Novell GroupWise Foldername foldernameUsername Setownerinfo Subparameters -setownerinfo DescriptionInfo ownerinformation Infofile infofile.txtUtype type Setpassword Subparameters -setpassword DescriptionSubparameters -setuseritpolicyrule Description SetuseritpolicyrulePolicyrule policyrulename Administration Guide Service This subparameter specifies service instances StatsSubparameters -stats Description Email emailinstanceUtype type Status Glossary Provide feedback Legal notice Administration Guide Administration Guide