Suspending Blackberry users

[rob@xxxxxxxxx]

I created a group called suspend.   I added that group to all server 
documents in "Not access server:".  If I add a user to that they cannot 
access the server through the Notes client.  Good.  However they can still 
read, delete, etc their email through their blackberry.  I confirmed that 
the blackberry server has that suspend group, the membership is fully 
replicated and it's server document has the security setting.  I even 
verified that 
Enforce server access settings: Yes
was set for Http.

Here's the rub, we allow certain people to buy out their blackberry plans 
upon leaving the company.  Including one executive this week.  Guess how 
this came to light?


Rob Berendt