See Also
11/11/2008
This section shows the minimum recommended policy settings for a managed Windows Mobile device.
The following shows the policies that are available under Computer Configuration\Administrative Templates\Windows Mobile Settings. Also shown are the suggested settings for the single purpose scenario.
Password Policies
| Policy | Enable | Disable | ||
|---|---|---|---|---|
|
Require password |
X |
|||
|
Password time-out
|
X |
Note:
Security Policies
 Caution: |
|---|
| Before you enable one of the Remove unmanaged certificatepolicies, make sure that you used MDM Group Policy Extensions to add root certificates to the managed device. If you did not, the device will no longer connect to MDM Gateway Server because this policy removes the root certificates that MDM Group Policy Extensions did not add. |
| Policy | Enable | Disable |
|---|---|---|
|
Remove unmanaged SPC certificates |
X |
|
|
Remove unmanaged privileged certificates |
X |
|
|
Remove unmanaged normal certificates |
X |
|
|
Remove unmanaged root certificates |
X |
|
|
Removed unmanaged intermediate certificates |
X |
|
|
Remove manager role permission from user |
X |
|
|
Block unsigned .cab file installation |
X |
|
|
Block unsigned theme installation |
X |
|
|
Block unsigned applications from running on device |
X |