Yes, every 19 minutes, pick up the berry grasping firmly in the palm of hand. Extend the thumb of right hand and carefully place onto the thumb wheel located on the right side of berry. Applying slight pressure, roll the wheel one click either direction. Presto! Unit will not lock for another 20 minutes.

"...yes, and I haven't taken any lessons (William Hung)"

Brilliant! Why didn't I think of that? That's why I labeled my self 'the ignorant'.

why dont you change the timeout option to one hour? I am on a bes with an it policy and I was able to change mine

It depends on if the specific IT policy allows that change.

Unfortunately they've set it up so I cannot change the timeout.

Is what I'm suggesting possible (program running in the background that enters a keystroke every 19 minutes--since timeout set by administrator to 20 minutes), does it makes sense? Any volunteers to write something for me to try?

I am please to confirm that the instructions by John Clark worked, (8700g owner)

I have been attempting to use a bluetooth keyboard with my 8100 Pearl. It is under IT policy. The default policy denies access to "keystroke injection" in the Application Permissions under Security Settings which is necessary for access by a Bluetooth Keyboard.

I tried this procedure on an old BB that is no longer used on the BES in order to see if I could get the "keystroke injection" denial lifted and use the keyboard on the old BB. Yes, the procedure will appear to "remove" IT policy. However, it only applies a blank policy which doesn't show up under Security Settings. There is still policy on the device after using this procedure. Firewalls are set to "default" policy. Under default some settings are defaulted to "disallow" or "deny." One of which is the "keystroke injection." It needs to be set to "allow" in order to allow access by a Bluetooth Keyboard. This blank policy doesn't allow this.

I just wanted to inform those using this procedure that it doesn't completely "remove" all IT policy. It does lift a lot of restrictions from the device but not all.

John, I was wondering. When a user performs an E.A. on BBDM within a company firewall for BES, with a unit that has a previous IT Policy from another company, they show up at "initializing". Most of the information is there with IT Policy at a pending field which within 5-10mins shows "failed" on the BES for that particular user. Why doesn't trying to send "Blank" IT Policy clear the previous one out, then "Send" IT Policy for the company its on resolve this?

BTW, the BB Unit was procured under warranty replacement with Cingular by specific internal company contact & Cingular.

PS I was just curious.

Is it possible for me to wipe the device, remove the policy, and then upload applications to my device. Such as games or ringtones. Then when i am finished, reconnect to my DES and go undetected?

Read the disclaimer in the original post. That is NOT what this is intended for. You risk your job in doing this. Additionally, when you connect back up to the BES the policy will be pushed right back anyway and you'll lose everything.

With a new Pearl with BIS and downloading the desktop software from T-Mobile's site, I ran into an interesting issue. It apparently comes with an IT Policy that is more restrictive than none, because since I hooked it up the first time (to do an OS upgrade), it now requires 5 character passwords and, here's the fun one, the password expires after 5 days.

Does the policy.bin that's floating around here have more generous settings than this?

No password required with this policy.

I downloaded a copy of the free BES Express. It contains the policy compiler. I made my own policy.inf with the settings I wanted. My paranoia was kicking in at the though of downloading and applying a policy file from the Net, even though I have no reason to doubt the policy.bin file in the thread is clean and legit. Like I said, paranoia.

The default policy file looks like the default policy that comes with the BES Express download is the .bin file included in Desktop Manager. It had a 5 character password minimum, and maximum password age was set to 5 days.

Security through obscurity (leaving users in the dark) is not security at all.

So you were able to create your own policy.bin using the BES express download? Howabout some more info on this. How did you do it?

When you download BES Express, it comes in a self extracting ZIP file. When you run it, it extracts the files to C:\Research In Motion\BlackBerry Enterprise Server 4.1.3\. In this directory is one called "ITPolicy"... which contains the program to generate policy.bin files.

Go forth and free your (personally owned, not attached to a corporate network less you get fired for cause) BlackBerry!

Joe, this was a good find. You've figured out how the policy.bin was created. I've tried creating another policy.bin. I was successful but, unfortunatly, it doesn't do any better than the one posted originally in the first post. There is no way to use this policy compiler to open up the application permissions from what the BES pushed out in policy.

Good work, though. I now know how to create a policy.bin.

John, sorry to hear that it didn't work. I did some looking and found a user manual for a Bluetooth Keyboard designed for BlackBerry's. There's a section for how to allow use of the keyboard through BES. But, it looks like something that isn't accessable to BES Express without going through the whole installation and everything... basically, another section of policies that isn't controlled through policy.bin.

BlueKeyboard Download - Download the manual, see page 26.

Best of luck getting it resolved. -- Joe

I did fix the issue on my BES attached BB by having the IT dept do their thing. I've just been looking for a way to remove the restriction from my old BB so I can use the keyboard (and others) on that BB as well. I may have to switch devices so the new policy is pushed to the old device. However, that only allows the one particular application permission to the keystroke injection. It doesn't really *solve* the core problem.

It's not only BES express. When you unpack the SP3 for 4.1 which is free to download, the folder and tool are there too

As a split-personality user (I am on BES at work and BIS for my personal BB), I have learned so much from this thread.

Initially, I tried wiping and although I blew out my personal data, it seemed that the policy didn't take.

Well, that's because I'm one of those "oh, it doesn't matter where the file is as long as I point to it" people. Yeah...didn't work.

So....went through it again and followed the directions to the letter and, surprise, surprise, it worked great.

I wanted to thank everyone who has been posting on this issue. The inability to load some apps (Google Maps, specifically) was driving me batty.

All fixed now, thanks to all of you!
-s.

If you have devices that "walk" from your organization and you want to ensure they are never used again you can contact RIM client care or t-support and have the pin blocked from their NOC.

The device will NEVER work again if that's the case. it isn't something that is used widely however it is available.

i have a used pearl, it has it policy, after i followed above op described step, i finally can clear the it policy, disable password etc.

but the firewall still enable, can't be disable, but i still can edit the firewall option (install 3rd party apps, keystroke injection,etc) to allow..

am I good to go now ?

This worked great. Thanks!!!

I have a blackberry 7100g I bought off ebay for my wife. I it has a security policy, but these steps may have to be a little modified for me.

I used the Cingular software here -> https://www.blackberry.com/Downloads/browseSoftware.do;jsessionid=e83082b81c2114287438T R

BlackBerry Handheld Software v4.1.0.556 (Multilanguage)

Package Version: 4.1.0.556
Consisting of:
Applications: 4.1.0.377
Software Platform: 1.8.0.154
File name: 7100E_PBrER4.1.0_rel556_PL1.8.0.154_A4.1.0.377_AWS .exe
File size: 36.42MB

It appears this is the latest software availible to me from cigular for my bb. It does not give me the HKEY_Current_Users\Software\Research In Motion\BlackBerry\PolicyManager as an option in the registry.

Heck, the only availible category is HKey _Current_Users\Software\Research In Motion\BlackBerry\Loader

I am a bit of a noob when it comes to this blackberry, but I'm having a good time. If you have any tips it would be greatly appreciated!

Are you running Windows XP? Do you have Desktop Manager installed?

Is desktop manager in different package then what I downloaded? Yes I am in Win XP. I tried to download a newer operating system, but it did not have the software it needed for my device. Does desktop manager come in a stand alone version that will work with Package Version: 4.1.0.556, it wasn't an install option when I installed using custom install. I installed every option there was.

Thank you for your help!

Download and Install Desktop Manager from here:

BlackBerry - BlackBerry - Sys Req V4-2 Pack 1

Then download and install the OS of your choice. If it's from a carrier other than the one your BB is branded to then delete the vendor.xml file after the installation of the OS.

Thank you very much! It worked like a charm, thank you so much for your help!

Hello all from Glasgow, Scotland.

I have recently purchased a BB7230 off ebay, with SIMlock to Voafone(UK). I _dont_ have a BES or BIS account and have a Pay as You Go (pre-pay) Vodafone SIM. I mainly intend to use the BB as a Phone /PDA but a bit of TCP/IP access would be nice.

The Vodafone SIM works fine on GPRS in other mobile phones I can use my laptop and the IR port on my Nokia for internet access on most ports (80,21,23,8080 etc).

I found these very helpful forums via Google so rather than just ask for help I though I would share my learning so far for others to find - and then post my question immediately below this...

Removing the IT policy
====
I downloaded the BB desktop software but could not install applicatios so I followed the instructions here:
http://blackberry.ig3.net/
Other people have reported mixed results, but it worked fine for me and I can now download and install software via the desktop.

TCP / IP Access
====
I entered APN pp.vodafone.co.uk user:web, password:web (exactly the same as on my Nokia phone)

I have no Blackberry browser and know of no method to get it back so I then downloaded Opera Mini and installed it.

During first start up it goes through a number of staps before failing with an error:

The application operette$2dhifi has attempted to open a connection to a location inside the firewall and outside the firewall which is not allowed by your it policy.

Googling round a bit this seems to be due to a policy restriction, that is turned on by DEFAULT in the BLANK profile to DISABLE split-pipe-connections. See:
http://osdir.com/ml/java.sun.kvm/2004-12/msg00045.html]
http://downloads.rogers.com/wireless...n_Security.pdf

AFAIK since OS version 3.61 an application can only connect via wither the BES/MDS _or_ TCP/IP - the first service it connects to (even if it does not work) is remembered unless you remove all the software and reinistall. See link below for how to make the BB "forget":
http://www.idokorro.com/support/mdt-supportfaq.shtml#q5

So I then installed a trial of IM+ that allows you to select the transport mode TCP/IP or MDS/BES or BIS and I also installed a trial of Idokorro Mobile SSH that allows you to pick TCP/IP, BIS or BES/MDS.

In both cases with the software set it TCP/IP I get as far as the "arrows" flashing in the top right of the screen the the BB transmits (I can hear the interference on a radio) with no firewall problems.

-----------
And now the questions:

I have a good signal strength 2-3 blobs on the meter, Given GPRS works on the SIM in another phone I am assuming there is nothing wrong with the Vodafone account...

but the BB fails to connect - the arrows in the top right flash for a while with "half thickness" (if this makes sence) than stop.

Anyone got any suggestions - can anyone explain what the "arrows" mean.

Thanks
Carla

Wirelessly posted (BB 8860: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) BlackBerry8100/4.2.1 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/100)

Yes, your issue is due to a leftover IT policy. As far as I know, there is no way to remove the firewalls. In order to access data you need a BB data plan. Without a BB data plan, no data. However, as you say it is sometimes possible to access the internet with Opera and a GPRS data plan. However, with the policy in place its very possible you will never be able to access this. The only way to remove all policy is to connect the BB back to a bes and push a new blank policy to it.

Quoting the first post in this thread:

Step 3
Wipe your Blackberry, creating a backup if necessary. Select Options/Security/Wipe on the Device.
If this option is unavailable, you may have to install the latest software on your Blackberry. You need to Download and install the latest OS for your device. Connect your device, open the Desktop Manager, select Application Loader, and follow the prompts.

I have a 6230. I clicked the above link to install the latest OS on my device. When I go there I find a huge list of carriers. However, some have a lock after them and some have another icon. For instance, Etisalat doesn't have a lock. When I click Etisalet it displays 4.2 OS for the Pearl 8100. Will that work on my 6230? Or what do I want? I am not using any of the carriers listed there, as I am in Bangladesh. Thanks.

The 8100 OS will NOT work on a 6230. The 6230 is a pretty old device.

BTW, your profile says "7100t."

One more thing. I have tried to wipe my 6230 a few times. When I installed Opera Mini on it I got to step 6 and it ran into the IT policy program. So I then wiped my 6230 BB but Opera Mini is still on there. Why would that be after wiping it?

Because "wiping" from the handheld only removes data, not programs or OS.

Yes, I know my profile says "7100t." I guess it should say, "7100t, 7100g, and 6230!"

I have not be able to get Opera to work on any one of them. I am at my wits end.

What can I try next? I have wiped the 6230's, and the 7100g. I then installed my Desktop Manager 4.0 on my laptop, added the policy.bin before I opened it and then connected it to my 6230 and then later to my 7100g. I can install Opera Mini but cannot get it past step 6 before it gives the message that inside and outside the firewall something is being accessed and it is not in the IT policy. You know the message! Everyone has seen it.

Do I have any other options?

OK...that's the first time you've mentioned the error message you're receiving. Posting that first would have made this easier. Unfortunatly, the remove IT policy procedure will not remove firewall restrictions that were put in place by a BES. The only way to do that is to reconnect to a BES and have a blank policy sent with no restrictions on firewall. Sorry.

this is the greatest post ever, i recently just got a new blackberry and had to stop using my old one :: so i was able to get rid of my IT policy on it which i can prolly sell it better or give it away or even use it on my off days

Will this bin file work on DM 4.2 SP2?