BES email vs. BIS email help

[pchenry]

One of our users has a personal device with an account on our BES. He will be leaving the company soon, so we will need to remove the BES account from his device. I know that isn't an issue on the BES side, but what about the device side? I have never looked at this device (didn't set it up, it was before my time), and it is the only personal device in our environment. I have no experience with a personal device with a BES account. I assume he has a BIS account aside from the BES account, so when we remove the BES account from the server, what else do we need to clean up that BES account from his device without affecting the BIS account? Do we need to back up his BIS account with Desktop Manager or anything? Do we need to wipe the device? Like I said, I have no experience with a device with a BIS account, let alone a BIS AND a BES account. Thanks.

[mikej7]

Once you remove that device/user, have the owner go into Service Books and delete any service books that start off with "Desktop". While looking at the service books they will notice other service books that are for his/her BIS accounts, just do not delete those. No device wipe needed.

[pchenry]

Awesome! Obviously I had no idea it would be this simple! Thanks very much! : )

[murialita]

make sure you apply the Default IT policy to him before you remove him from the server.

[pchenry]

He's not applied to a policy at all, so I shouldn't need to apply him to a policy.

[eBoyDog]

Any device activated on BES will have a "policy" if you haven't modified the default one then the standard policy is "Default IT policy" is applied to the device.

Look under "Security Options", "Information" and see if it has a policy applied.

There are a couple work arounds for this by googling "remove BES IT policy" but the standard mannor to remove such is to a secure wipe which in turns require a backup and restore of the device.

The standard IT policy for example dis-allows bluetooth sync to desktop manager and also prevents disabling firewall settings for device communications.

While it won't matter to most if the IT policy is on the device, if it were my personal device, I would want it removed esp if later that device was sold and the buyer wouldn't want it installed either.