We have Bes 4.01 and I need to stop users being able to activate there BB's via desktop activation. I am thinking - can we do this via altering the default policy and then having an opt out policy if we need to allow a user to sue desktop activation to get activated.

I can find in policy the options to disable dektop activty but just want to disbale the activation via this method.

Anyone done it and can advise?