In Step 2

I have downloaded the file policy.bin and downloaded it but I cannot open the file. What program do I use to open the file so I can save it?

Just follow the instructions in the first post of this thread exactly. Don't forget to backup the device first. You don't need to "open" the policy.bin. It just has to be placed in the correct directory. Then you edit the windows registry as outlined. Just follow those instructions.

Then once the policy is wiped, simply restore the data to the device. You can even restore the backup to the new device and not bother with the switch device wizard.

I have a question. I just purchased a pearl from a guy on craigslist. It had an it policy on it from his company. I'm going to hook it up to a BES at my firm, but his policy has a password with a max timeout of 20 mins. My firm's BES has no p/w requirement. When I'm hooked up to my BES will it automatically overwrite the old IT policy or should I follow the OP's original instructions just to be sure that the more restrictive policy is wiped from the device?

Thanks

I believe it will overwrite the existing policy. However, it doesn't take but a few minutes to do the policy removal in this thread. Then you won't have to wipe the device after adding to the new BES.

Good point - I'd rather be prudent and remove the policy than need to bother my IT staff to reactivate my bb if it doesn't remove this pesky password requirement.

Thanks

Hello,

First post here. I buy quite a few Blackberry's from eBay and many come with IT policy. Things like password must contain a letter and a number, 911 only. I have seen the 7 step instructions to remove this and tried 999 times and it just doesn't work.

For starters, there is no registry key

HKEY_CURRENT_USERS

Mine (and 3 or 4 other computers I have tried) only have

HKEY_CURRENT_USER

Also at what point do you plug the blackberry in. If there is an it policy demanding a password and you wipe it, then follow the last step which simply reads 'connect the device' - does one do this after entering the new password or before or when the blackberry is on or off?

Any advice out there. I have about 20 Blackberry 7290 with stupid 911 only policy or password must be qwerty1@A and I am ready to play hockey with them

Did you look for the appropriate reg entry in that folder? Or just assume that it was the wrong one and not look?

great job

Of course I looked and of course there is the same set but apparently you never used a computer before because

c:\directory1\hhh\ppp

is different then

c:\directory\hhh\ppp

so if it MUST be in HKEY_CURRENT_USERS\.... as per the instructions widely available

then it only makes sense it will not work if I set the parameters in HKEY_CURRENT_USER\......

Could this be the problem????

i have there only "current_user" too, and not "current_users". so thats why i think i cant remove that IT policy:((((
it does look like that:

While trying to bypass the IT policy. i been following the instructions posted however when i get to this point.. HKEY_Current_Users\Software\Research In Motion\BlackBerry\PolicyManager i dont see policy manager i only see manager. would this make a big difference and if so what would i need to do to fix it.

You are attempting to "bypass" your IT policy? If you are still connected to the BES that installed the policy it will be pushed right back when you reconnect.

If you don't see the proper registry key then you may not have everything installed correctly. Make sure Desktop Manager is installed to the PC.

thank u so much is working like a charm

So I have a week old privately purchased 8830. I (stupidly?) asked about getting my work mail on my device. "Sure, no problem!" they said. So now I can get my corporate email, but now I have all these restrictions.

Is there no way to "undo" the BES link to my company without doing the tricks described above? Even if I ask the IT department to free my phone? Can my company "restore" my phone to "new" mode, or at least non-BES mode?

I feel like my company has more control over my device than I do -- permanantly! I feel like I ruined my brand new blackberry...

You can get rid of most of the policy restrictions on your device with this method. The only thing this won't do is unlock any firewall restrictions placed on the device. Usually keystroke injection and browser filters are set to deny and can't be changed (you could have more.) Other than those all policies restrictions will be opened up.

Cool -- But I was wondering if my corp BES admin should be able to remove all restrictions and then "free" my phone or do I HAVE to do the "IT Removal" procedures you provided above?

Thanks again!

As John mentioned, having IT push down the default policy will remove most restrictions, but not all.

Ok, IT Dept says they unlinked me from the BES. All security settings seem to be editable (including keystroke injection). I no longer can send company email though it is still an option when I compose (it simply doesn't get sent).

Should I still do the "Remove IT Policy" procedure to ensure they don't re-link my BB without me knowing or is what they did good enough? Or would I have to go through the whole "Enterprise Activation" process for them to regain control?

Thanks!!

NO! Don't do the Remove IT Policy procedure. If you can edit everything including keystroke injection you are good to go.

To get rid of your BES mail just go to Options >Advanced Options >Service Books and delete any service books that start with "Desktop." That will get rid of everything.

Wirelessly posted (BlackBerry8830/4.2.2 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/105)

Awesome! Thanks!

FYI the policy.bin that is linked here doesn't allow splitpipeconnections, I ended up downloading itpolicy.exe from rim (found it in besx_upgrader_4.1.4.exe under service packs) and created my own bin.

I also spoke to two dif RIM(job) support people about getting the firewall disabled on my 2+ week old 8320 and they basically told me tough sh!t. This is my first/last bb, under powered and over priced and they care not for the consumer at all. To bad overall it's not bad.

Everything available to enable was enabled in that policy.bin, including split pipe (attempt to access inside and outside firewall) because many have told me that this was fixed with this .bin.

As far as firewalls, there is no way to fix this except for having the BES push out a blank, no restrictions, policy. It's been posted here that that will allow you to open up the firewall.

my mistake I got it from another link in the forum. bin in ? is here Index of /dumpster/blackberry/files
he posts the inf which shows it disabled.

sucks being a newb, knowing what I know now I would still roll my own.

Mine is good. Many here have used it and had good results. They're posted in this thread and others, as well. Doing your own is great if you know how but there is no danger with mine.

<thread soon to be replaced>

Will be a while yet, though.

Yeah, but at least there will be an option for some people (and hopefully all people going forward). I'm doing some full testing right now. Let's just say that it wasn't as clean as I thought ...LOL! I'll explain in private.

Here we go:

BlackBerry: Removal of IT Policy now available * | The Boy Genius Report

Reminder: This is NOT a way to get around YOUR company's IT Policy. They have placed the restrictions there for a reason. You risk your job if you attempt this. Even if you do this when you reconnect to the BES the policy will be pushed back to the device anyway. You cannot circumvent your company's policy. The BB is designed to prevent this.

This is for BB's that are no longer connected to a BES and an individual user wants to regain usability of the BB.

For the new utility, it appears a side effect happened in removing the policy from the device... since it's no longer being overwritten by another blank policy (policy.bin method), it can't block the policy from the BES when reactivated. The policy is reapplied from the BES and the same restrictions will be put back on the device. LOL! Didn't see that one coming, but it makes perfect sense now that you think about it. So yeah, this will only be a waste of your time if you are using it to bypass your corporate BES restrictions, unless you simply don't want to be on the BES any longer. This is only useful for post-BES usage or reselling your device.

so I have tried this multiple times with my Nextel bb 7520's i bought off ebay that came with IT policies. I think i am not understanding step 7:
"Connect the Device.
Verification
Once complete, the Options/Security screen on your Blackberry should not contain references to an IT Policy"
Please explain the actual steps of what verification means. when I conect the device it asks me for the pw. should i type it in? do i do a full wipeout at this point? Any help would be appreciated. Those who have been successful please help me out. errorhelp at gmail dot com

Thank You

Also, im using BlackBerry Desktop Software v4.1.0.13 (the newest version on the nextel website) Do I need to use 4.2 from the bb website?

ugg !!! used this method to fix an old 8700 (bes) device, it worked great no problems. But i forgot to reedit registry when finished and when i did an update for my new 8310 (BIS) it installed blank policy.bin. now my firewall on new 8310 is locked. cant get bbsmart email, or streaming video blueapple.mobi to work browser functions denied. am i screwed? from what im reading i wont be able to remove this now, right? after feeling so good getting the old 8700 to work, i now just feel stupid for being so careless. anyone have any ideas? thanks.

That shouldn't have relocked that stuff. The policy.bin above actually opens that stuff up. You're having another issue.

Did you re-enter the apn settings?

i hope your right. yes i checked apn settings and they are good.other browser functions work fine (operamini and blackberry browser). its an ATT phone running 4.2.2.170 (2.5.0.30) when i go to firewall setting it is set to enabled (with a tiny red padlock icon next to it) and cant change option. its never been on BES, permissions all on allow everthing else seems to work fine. was able to change setting before (i know because when i set up GPS i checked that firewall was disabled) GPS does work still even though locked to enabled now. as locked firewall was a side affect of the it policy fix i figured it must have wrote in the default policy along with the unwanted side effects. i will double check all setting again. i was hoping that it was just locked but didnt do anything as all other settings were unchecked.

Even if the firewall did lock again after applying this policy (which it sounds like may have happened,) the problems you are having are a product of application permissions, internet access, etc., not the "firewall." If everything in the firewall is unchecked then you should have access. Recheck your application permissions for the apps that don't work. You may need to reset firewall prompts under permissions.

was starting to think you were right. so i deleted bbsmart and installed empower just to see how it behaved. when it views a html mail i get the pipeline error (trying to connect inside and outside the firewall which is against your IT POLICY). so deff still doing something, very frustrated. BE CAREFUL IF YOU USE 2 DEVICES ON THE SAME PC. If i can get a BES admin to add me and push a default policy will it fix this?? any other suggestions?

one more question. If i get a new unit (still within 30 days) and i back everything up. When I reload the new device the IT Policy wont come over with the backed up info will it? I would think not but just checking.

No, IT policy won't come over with the backup but make sure you remove that policy.bin from your computer. Additionally, that blank policy may not be able to be overwritten by another BES policy. I only recently heard about this issue.

As for the split pipe, many have told me this policy.bin fixed this problem for them and they were able to use all their applications. When I wrote it everything in the policy was set to allow and I even used it on one device and had no issues afterward. However, a few have said they still get this split pipe error with the blank policy. I haven't tracked which OS versions or models they were using to know why or when it happens (or even if the blank policy was applied properly.)

Unfortunatly, for several years this was the best there was for removing the policies. However, recently with the rollout of 4.3 RIM has added the "resettofactory" command in javaloader that will remove policies from devices with OS 4.3 and above on it. This is a HUGE step forward for this very problem. As soon as you can get OS 4.3 onto a device you can now remove the policy.

ok im going to try to overwrite policy if my wife office will do it for me (bummed if it cant be overwritten, is this a fact or just speculation)? if no luck will have to wait till 4.3 dont think i want to swap out for a new one too much hassel with 4.3 around the corner. By the way thanks for all the input this board is great. if i get the policy to be overwritten and it works ill update the post.

thanks again

Hey there...im having the same issue ....firewall is enabled and cant disable it... one of my computer at work has policy.bin on it...which I have no idea of and synced my bb with it. GRRR!