Remove IT Policy - BlackBerryForums.com : Your Number One BlackBerry Community

John Clark · 11:36 AM

Method 1: IT Policy Removal (Preferred)

If you have any 8xxx device the best method for removing IT policy is to update it to OS 4.3 or higher (if possible) and you can use JL_Cmder's "resettofactory" command to remove ALL IT policy, Firewall restrictions and Application Permission settings. After you've upgraded to OS 4.3 or higher, simply backup the device using Desktop Manager, close Desktop Manager, then run JL_Cmder and execute the "resettofactory" command. The device will do a security wipe of the device; (meaning wipe your data but leave the OS, DO NOT use the "Wipe" command in JL_Cmder) then reboot leaving the OS, 3rd party apps but no data AND, best of all, NO IT policy whatsoever. When you're done, simply restore your backup and you're good to go with no policy or locked firewall.

You can downgrade back to the old OS if you desire, too.

If your 7xxx or 8xxx device is running OS 4.2 or lower (look in Options >About) and you can't upgrade it to OS 4.3 or higher you will NOT be able to use method 1 above and you will need to use method #2 below:

Method 2: Placing Blank IT Policy on the Device(OS 4.2 and earlier devices)

Quote:

WARNING!
Follow these instructions only if you know what you are doing.
These instructions can actually downgrade certain BlackBerry's abilities (i.e. permanent loss of support for Bluetooth keyboards) if your BlackBerry actually does not already have an IT policy installed. These instructions are meant as a last resort to regain BlackBerry capabilities, in the event your BlackBerry is encumbered by a restrictive leftover IT policy after removal from a BES. (i.e. eBay purchased BlackBerry)

Removing IT Policy.

This procedure should ONLY be used on devices that cannot be upgraded to OS 4.3 or higher. If you have an 8xxx device then use the method described above. If you have an older 7xxx device or have OS 4.2 on the device then continue with the following instructions. This is a How-To for removing IT policy from your BB. In essence, what this does is apply a blank IT policy to the device. The blank IT policy does, unfortunatly, leave some IT policy firewalls in place, however. For instance "keystroke injection" is set by default to "deny" on most IT policies. This blank policy won't give back "allow" for this feature. This becomes a problem if you desire to use a Bluetooth keyboard. You'll be unable to use the keyboard. If a way is found to get this back then I'll edit this post accordingly. A quick check to see if your BB is under IT policy can be done by going to Options/Security on your Device. If you see any references to IT Policy whatsoever, then you have a potentially restrictive IT Policy that can be removed. The Disclaimer/Intended Use. This guide is intended for use by people that own their own Blackberry, and for whatever reason, have inherited a company's IT policy on their device. Really, there are two scenarios where this guide is useful.

You bought a Blackberry on eBay and are unable to make changes to the settings or install Third Party Applications.
You have a Blackberry that was previously connected to a company's BES and, for whatever reason, you no longer intend to connect to that BES.

Important: If you're still connected to a company BES, and simply want to install the latest and greatest third party application I would not recommend this approach. Talk to your BES administrators and ask them to grant you the appropriate rights. There are two problems in using this guide to bypass your company's security policy. First, whenever you reconnect to the company server, your security settings will revert back to how they were. Second, and perhaps more importantly, you run the risk of getting fired.
Procedure: Step 1 Ensure the Blackberry Desktop Manager is installed using Blackberry Internet Service, and not Blackberry Enterprise Server. If you are unsure, it would probably be a good idea to uninstall the Desktop Manager and start again. If you don't have the CD that came with your Blackberry, the Software can be downloaded here.

Step 2 Download the file policy.bin and save it in your Blackberry installation directory (C:\Program Files\Research In Motion\BlackBerry).

Step 3 Wipe your Blackberry, creating a backup if necessary. Select Options/Security/Wipe on the Device. If this option is unavailable, you may have to install the latest software on your Blackberry. You need to Download and install the latest OS for your device. Connect your device, open the Desktop Manager, select Application Loader, and follow the prompts.

Step 4 Close the Desktop Manager if it is open.

Step 5 From the Windows XP Start Menu select Run..., and at the prompt type regedit. In the tree on the left hand side, navigate to:

HKEY_Current_Users\Software\Research In Motion\BlackBerry\PolicyManager

Right-Click the Policy Manager Folder and select New/String Value. Name the value Path. Now, Double-Click the Path Subkey and set Value Data to:

C:\Program Files\Research In Motion\BlackBerry\policy.bin

Step 6 Open the Desktop Manager.

Step 7Connect the Device. Verification Once complete, the Options/Security screen on your Blackberry should not contain references to an IT Policy, you should now be able to change all settings (including password prompts), and install Third Party Applications.

A big thanks to 7100simpleisbetter and barjohn of BlackberryForums.com for this BB saving procedure.

I personally wrote this policy so that there would be no question as to what it does to your device. Here is the code included in the Policy.bin above: (If you have comments or questions or you see something that should be changed, please contact me in this thread or via PM.)

IMPORTANT Note: After following these instructions, any BB connected to your Desktop Manager will have this policy applied. For that reason it is highly recommended that after finishing placing this blank policy to the restricted BlackBerry I recommend removing the policy.bin and the registry entry you added from your computer. Basically go back and reverse these instructions. If you don't then you risk plugging in a new BB or someone else's BB with NO policy and adding this blank policy to it as well.

Code:

;
;***************************************************************************
 
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
;; Desktop Manager Configuration
;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
; If application is shown on task bar.
HideWhenMinimized {default} = true
 
; Prompt the user when the Desktop Manager starts.
MessagePrompt {default} = Welcome to the Desktop Manager.
 
; To enable or disable the USB-Serial converter
EnableUSBconverter {default} = true
 
; Control whether the Application Loader is available to the user.
ShowApplicationLoader {default} = true
 
; Control whether if offline IT Policy warning prompt should be displayed.
ShowPolicyErrMsg {default} = true
 
; Control the length of time the device password is cached by Desktop Manager. (Minutes)
DesktopPasswordTimeout {policy} = 10
 
; This setting controls whether or not Desktop add-ins are permitted.
; When set to false, no desktop add-in code will be executed.
AllowDesktopAddIns {policy} = true
 
; Indicates whether or not the desktop software will allow the user to switch devices.
AllowDeviceSwitch {policy} = true
 
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
;; Synchronization
;; Synchronize for PIM,Email and Folder Management defaults.
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
 
; This setting allows you to specify whether or not you would like PIM 
; information to be synchronized when the user selects the Synchronize Now 
; button from the Intellisync dialog.
SynchronizeNowPIM = true
 
; This setting allows you to specify whether or not you would like Email
; information to be synchronized when the user selects the Synchronize Now 
; button from the Intellisync dialog.
SynchronizeNowEmail = true
 
; This setting allows you to specify whether or not you would like the date and 
; time to be synchronized when the user selects the Synchronize Now button from 
; the Intellisync dialog.
SynchronizeNowDateTime = true
 
; This setting allows you to specify whether or not you would like PIM 
; information to be  to be automatically synchronized when the handheld 
; is connected to the PC.
AutoSynchronizePIM = false
 
; This setting allows you to specify whether or not you would like Email
; information to be  to be automatically synchronized when the handheld 
; is connected to the PC.
AutoSynchronizeEmail = false
 
; This setting allows you to specify whether or not you would like Date and Time
; information to be  to be automatically synchronized when the handheld 
; is connected to the PC.
AutoSynchronizeDateTime = false
 
; This setting allows you to specify whether or not you would like to synchronize 
; folders instead of performing an import.
SyncFoldersInsteadOfImport = true
 
; This setting allows you to specify how information conflicts between the handheld 
; and the PC encountered during synchronization are handled. If set to true, desktop 
; information is used. If set to false, handheld information is used.
FolderConflictDesktopWins = true
 
; This setting allows the enabling or disabling of wireless email reconcilation.
AllowWirelessEmailSynchronization = true
 
; This setting allows the wireless calendar synchronization functionality to be disabled.
DisableWirelessCalendar = false
 
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
;; Redirector Settings
;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
; Append signature on out going messages
AutoSignature = -----------------\
Sent from my BlackBerry Handheld.
 
; Forwards messages to the handheld
ForwardMessagesToHandheld = true
 
; Allows user's to receive mail when handheld is connected to cradle
ForwardMessagesInCradle = true
 
; Setup filter rules for email redirection
FilterRuleFile = c:\myfilters.rfi
; When filter rules don't apply, forward or don't send messages
ForwardWhenRulesDontApply = true
 
; When sending a message from handheld, don't save a copy in my 'Sent Items' folder
DontSaveSentMessages = false
 
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
;; Backup/Restore Configuration
;;
;; These value control the setting in "Backup and Restore Options" dialog
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
; This value control the value of the "Automatically backup my handheld" setting
; in the options dialog, which is enables or disables prompted Automatic Backups.
AutoBackupEnabled = true
 
; This value indicates how often an AutoBackup is performed in days.
AutoBackupFrequency = 7
 
; This setting controls the exclusion of Email and synchronized data from the
; automatic backup. If set to true, the "Backup all handheld application data"
; radio button is selected.
AutoBackupIncludeAll = true
 
; This setting allows control over whether email is excluded from automatic backups
; (when AutoBackupIncludeAll is false).
AutoBackupExcludeEmail = false
 
; This setting allows control over whether synchronized application data is excluded
; from automatic backups (when AutoBackupIncludeAll is false). "Synchronized data" is
; that data which is configured for synchronization with Intellisync; this varies
; according to the user's preferences.
AutoBackupExcludeSync = false
 
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
;; WebLink Configuration
;;
;; These values control the appearance and behaviour of the WebLink extension.
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
; Setting this value to false prevents the WebLink icon from being displayed.
ShowWebLink = true
 
; This setting specifies the URL that will be used when the WebLink
; icon is activated.
WebLinkURL = www.your_network_here.com/go/downloads
 
; This setting controls the label that is displayed for the WebLink icon.
WebLinkLabel = Downloads
 
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
;; Device Security Settings
;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
; Determine if the password is required on device
PasswordRequired {policy} = false
 
; Determine if the user can disable the password
UserCanDisablePassword {policy} = true
 
; Minimum length of the password.
; Valid range is 1 to 12 characters, inclusive.
;
; This value indicates the minimum length of an acceptable device
; security password.
MinPasswordLength {policy} = 1
 
; Password Pattern Checks
; Valid range is 0 or 1 at this time
;    0 -> no checks
;    1 -> ensure password has at least on letter and one digit
PasswordPatternChecks {policy} = 0
 
; Suppress Password Echo
;
; Option to disable password echo after x numbers of fail attempts to unlock handheld.
; false -> Disable
; true -> Enable
;
SuppressPasswordEcho {policy} = false
 
; Maximum device security timeout.
; Valid range is 1 to 60 minutes, inclusive.
;
; The handheld user is permitted to select any security timeout value
; less than this value.
MaxSecurityTimeout {policy} = 60
 
; Password Timeout
; Valid range is 0 to 60 minutes, inclusive.
;
; Set the effective password timeout on handheld.  This value must be 
; less than that of the MaxSecurityTimeout.
SetPasswordTimeout {policy} = 0
 
;
; If set, forces the device to the lock screen when it is holstered
ForceLockWhenHolstered {policy} = false
 
; Determine if the user can change the timeout
UserCanChangeTimeout {policy} = TRUE
 
; Password aging.
; Valid range is 0 to 365.
; 
; Specifying a value of 0 indicates password aging is disabled. Other
; values specify the maximum age of the password before the handheld
; user is prompted to change it.
MaxPasswordAgeInDays {policy} = 0
 
; Password History
; Valid range is 0 to 15
;
; Specify the number of passwords to retain for checking. Passwords in password history cannot be used when 
; setting a new handheld password.
;
MaximumPasswordHistory {policy} = 0
 
 
; Maximum Password Attempts
; Valid range is 3 to 10
;
; Set the maximum number of  password attempts on handheld. 
;
SetMaximumPasswordAttempts {policy} = 10
 
; Indicate if Long Term Security Timeout is enabled/disabled
;
; If true, handheld long term timeout is enabled
; If false, handheld long term timeout is disabled.
LongTermTimeoutEnable {policy} = false
 
; Attachment Viewing
;
; Controls the ability to view email attachments on the handheld.  
; If set to true then users can view attachments on the handheld 
AllowAttachmentViewing {policy} = true
 
; Policies that control the behaviour of third party applications
; on Java-based handhelds.
AllowThirdPartyUseSerialPort {policy} = true
AllowExternalConnections {policy} = true
AllowInternalConnections {policy} = true
AllowSplitPipeConnections {policy} = true
DisallowThirdPartyAppDownloads {policy} = false
 
; Policies that control the behaviour of the handheld Browser application
;
; DefaultBrowserConfigUID {default} = "BlackBerry Browser"
; MDSBrowserTitle {default} = "YourCompany Intranet"
; HomepageAddress {default} = www.your_network_here.com
; HomepageAddressReadOnly {policy} = true
; EnableWAPConfig {policy} = false
 
 
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
; Policies that apply to the TLS protocol. 
;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
 
; TLS Disable Invalid Connection
; Disallow users to connect to a server with an invalid certificate (i.e revoked, expired, etc ).
; Value: 0=true,1=false,2=prompt on device
TLSDisableInvalidConnection {policy} = 1
 
; TLS Disable Untrusted Connection
; Prevent TLS connections to untrusted servers.
; Values: 0=true,1=false,2=prompt on device
TLSDisableUntrustedConnection {policy} = 2
 
; TLS Disable Weak Ciphers
; Disable use of weak ciphers during a TLS connection.
; Values: 0=true,1=false,2=prompt on device
TLSDisableWeakCiphers {policy} = 2
 
; TLS Minimum Strong DH Key Length,
; Valid range 512 to 4096
TLSMinimumStrongDHKeyLength {policy} = 1024
 
; TLS Minimum Strong ECC Key Length
; Valid range 160 to 571
TLSMinimumStrongECCKeyLength {policy} = 163
 
; TLS Minimum Strong RSA Key Length
; Valid range 512 to 4096
TLSMinimumStrongRSAKeyLength  {policy} = 1024
 
; Disable the use of any cipher that is not FIPS compliant.
TLSRestrictFIPSCiphers {policy} = false
 
; TLS Minimum Strong DSA Key Length
; 
; Set the minimum DSA key size allowed for use during a TLS connection.
; Range: 512 - 1024 bits in 64 bit increments
TLSMinimumStrongDSAKeyLength {policy} = 1024
 
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
;; Messaging Settings.
;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
; Indicate if PIN to PIN messaging is permitted.
;
; If true, handheld users are permitted to use the PIN to PIN messaging
; feature. If false, this capability is hidden from the handheld user.
AllowPINtoPIN {policy} = true
 
; Indicate if the specification of BCC recipients is permitted.
;
; If true, handheld users can specify BCC recipients when composing messages.
; If false, this capability is unavailable to handheld users.
AllowBCCRecipients {policy} = true
 
; Indicate if SMS messaging is permitted.
;
; If true, handheld users are permitted to send SMS messages.
; If false, this capability is unavailable to handheld users.
AllowSMS {policy} = true
 
; Indicate if the RIM phone application can be used on the handheld.
;
; If true, handheld users are permitted to use the handheld's phone.
; If false, users are not permitted to use the handheld's phone.
AllowPhone {policy} = true
 
; Indicate if the RIM web browser can be used on the handheld.
;
; If true, handheld users are permitted to use the handheld's web browser.
; If false, users are not permitted to use the handheld's web browser.
AllowBrowser {policy} = true
 
; Indicate if other email services are permitted on the handheld.
;
; If false, no other email service books (other than the Enterprise
; edition one) are permitted on the handheld. Any other existing email
; service books are removed when the policy is installed; while the
; policy is in effect, other email service books will be rejected by the
; device. This forces all outbound email to be routed through the
; organization's BlackBerry Enterprise Server. 
;
; If true, no restrictions are applied to email service books.
AllowOtherEmailServices {policy} = true
 
; Indicate if other browser transport services are permitted on the handheld.
;
; If false, no other browser transport service books (other than the
; Enterprise edition one) are permitted on the handheld. In this case,
; any other existing browser transport service books are removed when the
; policy is installed; while the policy is in effect, other browser transport
; service books will be rejected by the device. This forces all browser
; traffic to be routed through the organization's BlackBerry Enterprise Server. 
;
; If true, no restrictions are applied to browser transport service books.
AllowOtherBrowserServices {policy} = true
 
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
;; Owner Information
;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 
; Owner Name - if value = '*' use the registry setting
OwnerName {default} = Research In Motion Ltd.
 
; Owner Info - if value = '*' use the registry setting
OwnerInfo {default} = This BB has Blank IT policy on it written by John Clark from www.BlackBerryForums.com
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;;
;; Other Info
;;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

Lex Luthor · 03-01-2007, 02:55 AM

I've seen various threads on this and many people have asked about how to remove an IT policy so I'm glad this topic is now a sticky.

*&)) · **OS:** 4.7.0.148

this information is like an admins nightmare

John Clark · **OS:** 4.6.1.250

Why? In order to complete the process it means wiping the handheld. When the handheld is wiped it loses the connection/encryption with the BES. If the policy restricted user gets this far and gets the policy removed he/she still has to reactivate on the BES. When he/she runs an EA the policy will once again push to the device. Right?

This info has been out for quite some time. It's not new.

*&)) · **OS:** 4.7.0.148

i find that all the it admin i have ever worked with wanted everyone to be in the dark. and yes i realize the information isn't new but now its easily accessible. but i guess what isn't these days
i'm not saying that you are creating problem for any one or anything b/c i actually found it usefully. but i know where this would have driven a former boss of mine crazy.

John Clark · **OS:** 4.6.1.250

I believe corporations have every right to restrict devices connected to their network to any extent they feel necessary. However, I don't think it's right to render a BB, or any of it's functions, totally useless for the rest of the BB's life. This is not meant to circumvent any restrictions corporations place on devices, as I'm opposed to that, as well. It's only meant to help those who are no longer connected to a BES.

*&)) · **OS:** 4.7.0.148

i worked for a news paper and things use to walk away on the regular (because of where the it offices were, there were interns in and out for the paper and no one asking questions) so we tried our hardest to make sure that if it walked and we didn't know it was leaving that it would be almost useless to anyone else. We once found about 20 blackberry's online that belonged to the paper. but about 10 of them were useless because this person didn't have this type of information. Now i know that if there is a will theres a way but we were just glad that we were able to stop them that way.

ohad_129 · **OS:** 4.5.0.253

i folow every thing you write and i cant still disable the firewall
did i have to wipe all the data from my handheld and download it again
thank you
eli

kdolliff · 03-13-2007, 12:30 PM

THANK YOU for this info. I purchased 75 blackberries from my former company that went out of business for my new company to use and deploy. The BES was DOD wiped and there was no way to get the policy off these devices. Thank you for providing a real solution for a legitimate need. Blackberry was of no help telling me I would have to purchase BES software in order to use these devices. I really appreciate the info. If people choose to use it with a device they do not own then they have to deal with the consequences. Thanks again!

John Clark · **OS:** 4.6.1.250

Quote:

Originally Posted by ohad_129

i folow every thing you write and i cant still disable the firewall
did i have to wipe all the data from my handheld and download it again
thank you
eli

There have been issues with the firewall using this procedure. Sorry, I don't have an answer. The policy.bin file in this sticky was not created by me so I can't vouch for what it contains. Many have had success with it but some have not. Sorry, it's the best I can do.

camaxtli · 03-14-2007, 12:19 AM

Thanks for posting this. I recently had hot dog juice squirt onto my blackberry 7290 and sent it off for repair leaving me to purchase a used one from a ebay seller. My problems started when I tried using Yak-On but received many APN errors. Contacted Yak-On after unsuccessfully talking to Cinguar blackberry support, Yak-On did try to be very helpful but failed several times to get it working. After countless searches on this site I finally came across this thread and I must tell you, THANKS!! I followed the directions and presto! Yak-On works! I emailed the Yak-On support person who was helping me and told him about this site.

ohad_129 · **OS:** 4.5.0.253

thank you man
but do you have any idea how to find the pin code ?

lauragal · 03-16-2007, 02:21 AM

Can someone give me step by step instructions on how to do this using a Mac? Sorry, I am new to Blackberry. I posted in another thread, and have not been able to resolve my problem.

I own my Blackberry 7130e, however, I allowed my job to use BES so that I could receive email from them. Mistake - they put so much security on it that I could no longer download 3rd part software. They recently removed it, and now I can no longer send emails or access the internet.

The only way I can sync with my Blackberry is through PocketMac. Is there a way to do this right on the Blackberry? However, I don't want to wipe out everything on the Blackberry (especially my current email services which I can still receive mail from).

Thanks in advance!
Laura

lauragal · 03-16-2007, 07:50 PM

Okay, I have just about wasted the whole day trying to resolve this problem!! I finally had to call Verizon/Blackberry Tech Support and I wiped out the BB and reloaded everything.

After hanging up with them, although I could access the internet and receive email, I still cannot download 3rd party software. When I looked at my security settings, the IT Policy was STILL THERE!!! Even after doing a "wipe"!!

I am ready to toss this BB! I cannot use the instructions above as it pertains to the Desktop Manager for a PC. I'm on a Mac. Any suggestions????????

Thanks again
Laura

John Clark · **OS:** 4.6.1.250

Laura,
You MUST use a PC in order to complete the above procedure. Simply wiping the device will NOT remove the IT policy. Find a friend with a PC, load desktop Manager and follow the above instructions. Mac won't work, sorry.

John

lauragal · 03-16-2007, 08:05 PM

Thanks John!

I guess that is what I'll have to do. The tech people at my job, and at Verizon/Blackberry don't seem to have a clue!!

Thanks alot.

Laura

John Clark · **OS:** 4.6.1.250

Direct the tech folks at your job to the above instructions and they might be able to help. A friend may not be real happy with you editing their registry if you are not sure what you are doing.

Good luck!

JC

lauragal · 03-16-2007, 08:44 PM

John,

OMG - I cannot believe the trouble I am having with this! I talked with a tech at Verizon/Blackberry and they are not willing to help with something that goes into the registry of a computer!!!

If I follow the directions exactly as above, will the registry of the PC I'm using go back to what it was before I touched it?

I'm pretty good with following directions!

Thanks - it seems that I am totally stuck unless I do it as per the instructions above.

Laura

John Clark · **OS:** 4.6.1.250

This is a hack. Nobody from tech support with Verizon is going to help you. I mentioned you might be able to get your tech guys to help you with it but not Verizon.

Follow the instructions. The PC will be fine.

lauragal · 03-16-2007, 09:22 PM

Oh, okay! Sorry about all of the questions. Unfortunately, the IT techs at work won't be able to help me out as they have already told me that my service provider has to fix the problem!

I'm going to try it on my husband's laptop in a little while. Thanks again!

Laura

BTW - my husband's computer runs Vista - is that going to be a problem?

John Clark · **OS:** 4.6.1.250

Another potential problem. I've not tried this on vista. I don't even use vista. If it's going to work you'll need the latest version of Desktop Manager 4.2.1 SP1 which can be found here:

BlackBerry - BlackBerry - Sys Req V4-2 Pack 1

I don't know if the registry is the same on Vista. Maybe someone else here has tried this on Vista?

lauragal · 03-16-2007, 11:15 PM

Well, I can tell you that it the Desktop Manager that came with my BB 7130e does not recognize my BB after downloading the manager to a Vista computer. I don't know if Vista is the problem or it's something else. I was doing a search of the forums to see if there was something I was overlooking when I installed the Desktop Manager.

John Clark · **OS:** 4.6.1.250

Laura, that version won't work with Vista. Only the version of DM I posted above will work with Vista.

lauragal · 03-16-2007, 11:26 PM

Thanks John (we must have been posting at the same time!)

I am downloading the version you suggested now, to see if that will work.

Thanks again!

Laura (sorry to be such a pain)!

John Clark · **OS:** 4.6.1.250

Trust me, you're not a pain. There are a couple others here that really are a pain right now. You're simply someone who I can help. I hope you get it sorted out. DM 4.2.1 SP1 will work with Vista. However, if the procedure above doesn't work with Vista then you'll need to find an XP machine. I know it will work on that. I can only assume the registry entries are the same for Vista. If not, you'll be out of luck until you find an XP machine or someone can give instructions for Vista.

lauragal · 03-16-2007, 11:38 PM

Thanks so much for your time and help, John.

I'll give it a shot on Vista. I don't have access to my daughter's XP machine right now - she took it with her and will be back tomorrow. So if this doesn't work, then I'll try it on her machine tomorrow.

I cannot believe this has literally taken up my whole day and night - I'm glad we had a Nor-easter here today as I had no intentions of going out anyway!!!

Thanks again - and I'll let you know if it works on Vista.

Laura

lauragal · 03-17-2007, 12:26 AM

Update:

Cannot even seem to install DM 4.2.1 SP1 to the PC. Keep getting error messages. Will have to wait until I can get my hands on my daughter's XP PC. What a total waste of a day!!!

Laura

John Clark · **OS:** 4.6.1.250

Sometimes BlackBerry days go like that. That's how I learned BlackBerry. Wasting my days away messing around with it, searching these forums, trying this and that. If you search around for a while you'd find a thread about completely uninstalling Desktop Manager and reinstalling it. That might be what is necessary. However, if you've spent that much time on it today it would probably be best to start fresh tomorrow.

Get a good night's sleep and try again tomorrow or give it a few days and come back to it. Sometimes I get where I want to throw the thing at the wall. That's when it's time to be done!

Been there. Done that.

Jagga · 03-17-2007, 01:11 AM

Quote:

Originally Posted by lauragal

Update:

Cannot even seem to install DM 4.2.1 SP1 to the PC. Keep getting error messages. Will have to wait until I can get my hands on my daughter's XP PC. What a total waste of a day!!!

Laura

Laura, if I may put in a suggestion John. Sorry for the disruption. However if Laura has an INTEL based cpu Mac ... then if she's willing even with her local Apple store rep for guidance update the firmware of her Mac - which SHOULD NOT disrupt any app installed or preferences or anything - then installed Boot CAMP. Its perfectly legal to install your daughters WinXP SP2 OS disc for a DUAL BOOT option - follow directions on Apple.com site for BOOTCAMP and specific model firmware. (*heck if you have Parallels even better for dual OS mode/coherence).

Then you can follow John's procedures in his original post above to the letter.

PS2BOTH of you. Again sorry for the intrusion just a possible option I'm suggesting. John sorry for the intrusion once again. Also is there a way to follow your steps and the policy.bin procedure in your original post WITHOUT uninstall of the BBDM - I failed as I tried to rush through without uninstall & reinstall - I should've known better :(

Cheers.

lauragal · 03-17-2007, 01:17 AM

Hi Jagga,

Thanks for the suggestion - but I'm not sure what you mean. I do have an Intel-based CPU (MacBookPro), and if I can do this via Boot Camp, without having to fool around with my daughter's computer, that would be even better.

I also have AppleCare so I could call them anytime free of charge to walk me through it, but I believe they only deal with the computer and not non-Mac-based devices.

Sorry if I'm just not getting what you're saying!!

Laura

John Clark · **OS:** 4.6.1.250

Boot Camp is an option. I have zero experience with it. Can't help ya with that one, sorry.

lauragal · 03-17-2007, 02:22 AM

I am about to shoot myself!!!!! I was finally able to download DM 4.2.1 SP1. Got it working. Downloaded policy.bin. Wiped my BB.

Believe it or not - I cannot get to the next step. "From the Windows Start Menu select "Run" - I honestly cannot find "Run" anywhere on the start menu!!!!!

HELP!!!!!!

Thanks,
Laura

lauragal · 03-17-2007, 02:31 AM

Never mind!!

I successfully removed the IT Policy!!!! Now I just have to figure out how to get my email accounts back!!

Thanks again
Laura

John Clark · **OS:** 4.6.1.250

WooHoo!!! Never gave up! Great job!

Jagga · 03-17-2007, 03:05 AM

Quote:

Originally Posted by lauragal

Never mind!!

I successfully removed the IT Policy!!!! Now I just have to figure out how to get my email accounts back!!

Thanks again
Laura

Atta Girl! Nice work. Now your a BB pro user! Totally Cracked out - and I mean that in the biggest way of respect & comradeship.

If your on a BES then on your work computer's BBDM sync it there, then an automatic Enterprise Activation will set it up.

If its personal ... login to your providers BIS site and click on resend service books or just goto Options> Advanced Options > Host Routing Table and RE-Register.

All is well & looking up here on out!

ohad_129 · **OS:** 4.5.0.253

how you made it?
do you can disable the fire wall?
please let me know
thank you

camaxtli · 03-18-2007, 02:13 PM

Hi John,I was hoping her question about will the computer return to normal before she touched it would be answered. The registry has me slightly worried as I was in the same boat as Laura, I use Mac at home and so I had to do it on my desktop at work, should I be worried?

lauragal · 10:58 PM

John and Jagga,

Thanks!!! Trust me, I was sweating all the way!!!!! But I do feel like a pro now!!!! I am no longer on a BES at work so now worries there - they were the ones who caused this problem to begin with!! And I was able to re-send the service books (the site was down last night but I was able to do it this morning). Thanks to both of you for all your help.

Ohad - I did not have to disable my firewall.

Camaxtli - if you follow John's instructions step by step, there should be no problem. My husband's PC is working without any problems. Although you're going into the registry, it seems to me that you're just changing a part of the registry that pertains to the Blackberry, so anything else on the computer is untouched.

camaxtli · 03-22-2007, 01:17 AM

Quote:

Originally Posted by lauragal

John and Jagga,

Camaxtli - if you follow John's instructions step by step, there should be no problem. My husband's PC is working without any problems. Although you're going into the registry, it seems to me that you're just changing a part of the registry that pertains to the Blackberry, so anything else on the computer is untouched.

Thanks. I havent heard anything so....I guess its cool.

bradpoff · **need someone to write a program -** 03-23-2007, 11:50 PM

Instead of disabling the BES stuff, I want a program that will issue a wheel click every 19 minutes since my password timeout is 20 minutes. That way I don't have to keep entering the password everytime it vibrates to tell me I have another meeting but won't let me see the meeting announcement.

Anyone know how to do this? I'm not a programer but it would seem like a simple thing to do (always is for the ignorant)

Appreciate the help.