Released: BES SP3 MR7

RIM have release BlackBerry Enterprise Server Service Pack 3 Maintenance Release 7 for Microsoft Exchange Server.

The release includes new fixes for the BlackBerry Administration Service, BlackBerry Mail Store Service, BlackBerry MDS Connection Service, BlackBerry Messaging Agent and BlackBerry Policy Service

Select and download the update here, https://swdownloads.blackberry.com/Downloads/browseSoftware.do.

Installation is straight forward as usual and covered in the release notes, http://docs.blackberry.com/en/admin/deliverables/41482/BlackBerry_Enterprise_Server_for_Microsoft_Exchange-Maintenance_Release_Notes-1327683428293-5.0.3-en.pdf.

Update Rollup 2 for Exchange Server 2010 Service Pack 2

Microsoft have release Update Rollup 2 for Exchange Server 2010 Service Pack 2. full information available here, http://support.microsoft.com/kb/2661854.

Don’t forget (as I almost always do – only in the lab of course) to run fscutility /disable to disable Forefront before you run the update. More on how to do that here, http://support.microsoft.com/kb/929076. Just remember to enable it afterwards using, fscutility /enable.

Windows 8 + Exchange ActiveSync

The Windows Team Blog has post about the Windows 8 editions which will be available, http://windowsteamblog.com/windows/b/bloggingwindows/archive/2012/04/16/announcing-the-windows-8-editions.aspx. It’s a much simpler line up consisting of Windows 8 (consumer), Windows 8 Pro (pro-consumer, business) and Windows RT (ARM powered devices). There will also be an Enterprise SKU of Windows 8.

For me there are a couple of interesting items in the feature table. First off all editions support Exchange ActiveSync suggesting to me support for "Exchange” is built in – great. This also potentially plugs a gap for me which is missing from Outlook – the ability to remotely remove (either selectively or by device wipe) corporate mail from a device, be it personal or company issued.

With Exchange ActiveSync we can also enforce policies on devices, which covers off how we can secure Windows RT devices with a policy which cannot be domain joined. Exchange is great at doing this and I know RBAC roles could be created for a Mobile Team, but mobile is such a broad topic I don’t believe Exchange is the best place to manage this. What happens if you want to secure a Windows RT device with policy, but it doesn’t need email? Maybe in time ActiveSync security polices will evolve in to more of a broad MDM (Mobile Device Management) product.

There seems to be 2 types of encryption. Windows 8 and Windows 8 Pro get BitLocker and EFS while Windows RT gets “device encryption”. I’m guessing the latter is similar to that of iDevices and Windows Phone controlled by ActiveSync policy or a local switch.

On a related note, I’m not sure Windows RT is a great name. Windows on Arm (WOA) sounds way better.