BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 06-23-2005, 06:17 AM   #1 (permalink)
New Member
 
Join Date: Jun 2005
Model: 7130
Carrier: O2
Posts: 6
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default BES password security

Please Login to Remove!

Here is my problem.

I synced my personal Blackberry with my office PC and in the process, my personal Blackberry was "upgraded" to
include the Security Settings set by the BES administrator; the most
annoying of which is inabilty to disable the password and a security
timeout set at 5 minutes!

I have wiped out all the information using the 10 incorrect password
approach but the security features are still there!

Any advice on how I can get my blackberry back to its original state
would be much appreciated.
Offline  
Old 06-23-2005, 07:58 AM   #2 (permalink)
BlackBerry God
 
jibi's Avatar
 
Join Date: Oct 2004
Location: Jibi's Secret Place
Model: 8900
OS: 4.6.1.174
Carrier: AT&T
Posts: 11,310
Post Thanks: 0
Thanked 1 Time in 1 Post
Default

If you are to remain on the BES, you cannot skirt around the security policy. Security policy is pushed down by your administrator/security department and you're pretty much tied into it. Not everyone understands that there is a reason behind the motivations of security administrators (hell, I even disagree from time to time), but they are the experts and tend to know their job better than a person who simply dislikes the incoveniences that come along with added security.
__________________
In the beginning the Universe was created. This has made a lot of people very angry and is widely regarded as a bad move.
Offline  
Old 06-23-2005, 08:10 AM   #3 (permalink)
dev
CrackBerry Addict
 
dev's Avatar
 
Join Date: Apr 2005
Location: Toronto
Model: 8800
Carrier: Rogers
Posts: 571
Post Thanks: 0
Thanked 2 Times in 2 Posts
Default

Your only option (after wiping), since you'll not be able to use App loader to reload apps, is to ask your BES admin to use the "Wireles IT commands" to "Set password and lock".
This will prompt you to accept/reject the "new" password the BES admin as sent. Maybe a phone call to your admin (a cuppa coffee wouldn't hurt) and he might be very helpfull.
As jibi explained.....you're stuck with the IT policy (it may be a corpporate decision)that your BES admin as set.
Offline  
Old 06-23-2005, 08:11 AM   #4 (permalink)
Thumbs Must Hurt
 
loonews's Avatar
 
Join Date: Feb 2005
Location: Memphis, TN
Model: 7280, 7290, 7250, 7100
Posts: 98
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Nahhh normally we just finally give up and make the setting to get Audit and SEC off our backs
__________________
------------------------------------------------
Sent from my Blackberry Handheld - The next best thing to No Vacation!
Offline  
Old 06-23-2005, 08:33 AM   #5 (permalink)
BlackBerry God
 
jibi's Avatar
 
Join Date: Oct 2004
Location: Jibi's Secret Place
Model: 8900
OS: 4.6.1.174
Carrier: AT&T
Posts: 11,310
Post Thanks: 0
Thanked 1 Time in 1 Post
Default

Quote:
Originally Posted by loonews
Nahhh normally we just finally give up and make the setting to get Audit and SEC off our backs
shh. hehe.
__________________
In the beginning the Universe was created. This has made a lot of people very angry and is widely regarded as a bad move.
Offline  
Old 06-23-2005, 08:33 AM   #6 (permalink)
BlackBerry God
 
jibi's Avatar
 
Join Date: Oct 2004
Location: Jibi's Secret Place
Model: 8900
OS: 4.6.1.174
Carrier: AT&T
Posts: 11,310
Post Thanks: 0
Thanked 1 Time in 1 Post
Default

I guess there would be a way around this, but I'm not going into it.

They did create a security mechanism of the IT Policy function that can actually be used in a rebellious manner in order to avoid policy, I believe. I haven't actually tested it directly, but I'm sure it would work (in theory).
__________________
In the beginning the Universe was created. This has made a lot of people very angry and is widely regarded as a bad move.
Offline  
Old 06-23-2005, 09:14 AM   #7 (permalink)
New Member
 
Join Date: Jun 2005
Model: 7130
Carrier: O2
Posts: 6
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by jibi
If you are to remain on the BES, you cannot skirt around the security policy.
I should have mentioned that I am not trying to skirt around our security policy. I have been in touch with my IT department but they don't know what to do.
Offline  
Old 06-23-2005, 09:22 AM   #8 (permalink)
Thumbs Must Hurt
 
loonews's Avatar
 
Join Date: Feb 2005
Location: Memphis, TN
Model: 7280, 7290, 7250, 7100
Posts: 98
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Ohhh that's different.

In the BES Manager they can right click the BES Server Name, select IT Policy, I guess they probably only have default, there is a setting in there called "User Can Disable Password".

If they will check that and resend the policy, then you will be able to turn it off.
__________________
------------------------------------------------
Sent from my Blackberry Handheld - The next best thing to No Vacation!
Offline  
Old 06-23-2005, 09:24 AM   #9 (permalink)
New Member
 
Join Date: Jun 2005
Model: 7130
Carrier: O2
Posts: 6
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by dev
Your only option (after wiping), since you'll not be able to use App loader to reload apps, is to ask your BES admin to use the "Wireles IT commands" to "Set password and lock".
The issue is that my Blackberry is not connected wirelessly to the corporate blackberry server.

It is my personal Blackberry using T-Mobile's service.

I just "inherited" the security settings when I synced my personal blackberry to my corporate PC.
Offline  
Old 06-23-2005, 09:28 AM   #10 (permalink)
Grumpy Moderator
 
NJBlackBerry's Avatar
 
Join Date: Aug 2004
Location: Somewhere in the swamps of Jersey
Model: i5s
Carrier: AT&T
Posts: 27,796
Post Thanks: 33
Thanked 441 Times in 381 Posts
Default

That's right - the security IT policy was pushed to the BB when you cradled it. Now see if the IT guys will put your BB into the Default IT Policy, and then when you cradle it again, the password policy will be overwritten.
Offline  
Old 06-23-2005, 09:31 AM   #11 (permalink)
Thumbs Must Hurt
 
loonews's Avatar
 
Join Date: Feb 2005
Location: Memphis, TN
Model: 7280, 7290, 7250, 7100
Posts: 98
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Actually they need to create a new policy called somethiing like Blank or Empty and add you to that policy group instead, this will set everything to not defined.
__________________
------------------------------------------------
Sent from my Blackberry Handheld - The next best thing to No Vacation!
Offline  
Old 06-23-2005, 09:32 AM   #12 (permalink)
Grumpy Moderator
 
NJBlackBerry's Avatar
 
Join Date: Aug 2004
Location: Somewhere in the swamps of Jersey
Model: i5s
Carrier: AT&T
Posts: 27,796
Post Thanks: 33
Thanked 441 Times in 381 Posts
Default

Unless they messed with the Default Policy (a no no) that should work.
Offline  
Old 06-23-2005, 09:53 AM   #13 (permalink)
BlackBerry God
 
jibi's Avatar
 
Join Date: Oct 2004
Location: Jibi's Secret Place
Model: 8900
OS: 4.6.1.174
Carrier: AT&T
Posts: 11,310
Post Thanks: 0
Thanked 1 Time in 1 Post
Default

I'm still confused though. If you do not have an account on the corporate BES, then how did you even get policy pushed down to you? The BES server would never know that your BlackBerry even existed, if that was the case, thus never even pushed policy down to it.
__________________
In the beginning the Universe was created. This has made a lot of people very angry and is widely regarded as a bad move.
Offline  
Old 06-23-2005, 10:13 AM   #14 (permalink)
New Member
 
Join Date: Jun 2005
Model: 7130
Carrier: O2
Posts: 6
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by jibi
I'm still confused though. If you do not have an account on the corporate BES, then how did you even get policy pushed down to you? The BES server would never know that your BlackBerry even existed, if that was the case, thus never even pushed policy down to it.
I can't understand it either because I have done this before without any issues. After my last sync though, I was forced to enter a password and that was it; total lockdown! Ideally, I would prefer not to involve my IT folks because they are not particularly responsive, especially when it is not their problem! Is there not a way to wipe the security settings completely and then do a clean reinstall?
Offline  
Old 06-23-2005, 02:39 PM   #15 (permalink)
BlackBerry God
 
jibi's Avatar
 
Join Date: Oct 2004
Location: Jibi's Secret Place
Model: 8900
OS: 4.6.1.174
Carrier: AT&T
Posts: 11,310
Post Thanks: 0
Thanked 1 Time in 1 Post
Default

Quote:
Originally Posted by jfs5
Is there not a way to wipe the security settings completely and then do a clean reinstall?
nope. You can search on here for 'policy.bin' and read up on the information provided there, but it won't be of much help most likely (please, no public requesting after you've read it).
__________________
In the beginning the Universe was created. This has made a lot of people very angry and is widely regarded as a bad move.
Offline  
Old 06-26-2005, 05:38 AM   #16 (permalink)
New Member
 
Join Date: Jun 2005
Model: 7130
Carrier: O2
Posts: 6
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

OK

Is there way then just to lenghten the security password timeout?
Offline  
Old 06-26-2005, 08:39 AM   #17 (permalink)
BlackBerry God
 
jibi's Avatar
 
Join Date: Oct 2004
Location: Jibi's Secret Place
Model: 8900
OS: 4.6.1.174
Carrier: AT&T
Posts: 11,310
Post Thanks: 0
Thanked 1 Time in 1 Post
Default

only through IT Policy
__________________
In the beginning the Universe was created. This has made a lot of people very angry and is widely regarded as a bad move.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.