To add some more detail from when I worked there: We had two users which were BES and BIS. Not all devices were connected to an enterprise. Consumer-owned devices were almost always provisioned using BIS. They tried to later push Black Berry ID as a way to get users to take over some half-baked control but that was a total flop. The support overhead was simply too much.