And this does work. A friend of mine who left his firm (the BB was owned by him) and the company's IT refused to send the the policy as they said no BB gets a blank policy (the company forgot to exclude the ones that are actualy not owned by them). He did use it and all is clear. But one recomendation, once done, the use of JL_CMDER
after doing so would be a great idea as some apps installed will still need the policy to be there. Wipe, reinstall the OS and then load all and it will be good to go.