I have to disagree with denying personal devices. For the small to mid-sized business, allowing personal devices greatly offsets the capital expenditure of buying everyone phones. Additionally, users won't need to carry two devices (personal & work). With a good policy and controls you can effectively manage the devices as though they were company owned. It's really the best of both worlds! I recently wrote a blog post on this very matter: http://agostoinc.squarespace.com/general/2010/9/27/managing-a-mobile-workforce.html

- Aric Bandy
Agosto, Inc.