Key features for all device types

You can open the administration consoles in a browser on a computer that can access the computer that hosts BlackBerry Enterprise Service 10. You can share administrative duties with multiple administrators who can access the administration consoles at the same time.

A simplified administration console, BlackBerry Management Studio, is available for performing common day-to-day tasks for all device types.

By default, administrators who log in to an administration console must provide usernames and passwords. You can use unique usernames and passwords or you can use company directory authentication, which permits administrators to log in to an administration console using the same information that they use to log in to their computers. Microsoft Active Directory and LDAP company directories such as IBM Domino Directory and Novell eDirectory are supported in both the BlackBerry Device Service and Universal Device Service consoles.

You can configure single sign-on so that administrators and BES10 Self-Service users do not need to provide their usernames and passwords each time that they access a console.

Activate devices

When you activate a device, you associate the device with your organization's environment so that users can access work data on their devices. You can allow users to activate devices themselves or you can activate devices for users and then distribute the devices. All device types can be activated over the wireless network, and some devices can be activated over a wired connection.

Manage devices

Manage groups of users

Groups simplify the management of users. You can use groups to share administrative roles, device controls, and other configuration settings among similar user accounts so that you can set the properties for the group at one time instead of setting the properties individually for each user account.

Control which devices can access Microsoft ActiveSync

You can configure Microsoft Exchange to block devices from using Microsoft ActiveSync unless the devices are explicitly added to an allowed list in Microsoft Exchange. Using gatekeeping in BlackBerry Enterprise Service 10 lets you control which devices are added to the allowed list. When a device is added to the allowed list, a user can access work email and other information on the device.

View reports of user and device information

The reporting dashboard allows you to have a high-level overview of your BlackBerry Enterprise Service 10 environment. For example, you can view the number of devices in your organization sorted by wireless service provider. You can drill down into a report to get additional details, export the information to a .csv file, view user details, and perform administrative tasks.

Manage licenses for specific features and device controls

You can manage licenses and view detailed information for each license type, such as usage and expiration. The license types that your organization uses determine the devices and features that you can manage. You must activate licenses before you can activate devices.

Users can manage their devices with a web application

BES10 Self-Service is a web application that provides device management features to device users. For example, users can create activation passwords, remotely change the password on their device, or delete data from the device.