Ever wondered how you can stop someone from changing the time on a Windows Mobile device? No? Me either, but I have heard a number of enterprises ask how they can lock down their devices to prevent certain applications from running. There are a number of 3rd party applications on the market that can be used to limit device functionality and there are some other clever tricks for preventing applications from running.
Jason Langridge and Rabi Satter have the details on one such method that can be used to effectively blacklist applications so that the Windows Mobile operating system won't allow them to run. Rabi also lists a configuration service provider (CSP) that can be used to set a variety of security settings on the device - CSPs are a great mechanism for ensuring multiple devices are configured the same way throughout an enterprise.