4. Prohibit Jailbroken Devices
Jailbreaking a smartphone or tablet enables the owner to install a custom operating system and programs that have not been vetted by Google or Apple. While estimates vary, most experts say a small percentage of users jailbreak their device. Microsoft Exchange ActiveSync does not have functionality to detect jailbroken devices, forcing businesses to choose a Mobile Device Management product if they intend to enforce that policy. According to Solutionary, at a minimum, prohibit jailbreaking, limit third-party application resource and network access and require PINs or passwords to unlock devices.