[DarthBBerry]

Trying to figure out a way to unlock a locked device if an end user incorrectly enters the password 10 times and locks/disables the device. Is there something in the IT Policy that I can enable/push to the device to undo what they have done. (Once they properly identify themselves?)

If I'm not clear about the question, let me put it in scenario format. (I'm pretty good for that...) LOL

JoeUser has a BB 8830 with an IT Policy on there pushed from my BES. The Policy says pretty standard stuff about number of characters, length, et al. It also says"
* 10 invalid entries locks the device and data is erased

JoeUser's 9-year old son gets ahold of his BB and plays with it. The little genius tries to enter the password unsuccessfully 10 times and locks the device. JoeUser calls me up from his home (1500 miles away), properly identifies himself with his corporate credentials and asks for the BB to be re-enabled. Can I do this from the server side wirelessly? If yes, HOW!?

[Sith_Apprentice]

well once the device is locked/wiped after putting in 10 incorrect attempts, it should be able to just be reactivated via wireless EA. should just set the activation password and them them to let er rip?

[juwaack68]

As Sith says, after 10 tries and the device wipes, JoeUser will then be prompted for 'New Password'. Once he sets the new password and then access the device, he can then do a wireless activation.

And then he can ground his son.

[DarthBBerry]

Originally Posted by Sith_Apprentice

well once the device is locked/wiped after putting in 10 incorrect attempts, it should be able to just be reactivated via wireless EA. should just set the activation password and them them to let er rip?

But if the device is locked, how can the JoeUser get to the EA part on the device to reactivate it?

[jsconyers]

It should have wiped the device and came back up with a prompt to enter a new password.

[DarthBBerry]

Originally Posted by juwaack68

As Sith says, after 10 tries and the device wipes, JoeUser will then be prompted for 'New Password'. Once he sets the new password and then access the device, he can then do a wireless activation.

And then he can ground his son.

That makes no sense. What's to prevent me from finding/stealing/borrowing one, incorrectly entering the password 10 times and then prompted for a 'New Password?' I could get right into it.

[penguin3107]

Originally Posted by jsconyers

It should have wiped the device and came back up with a prompt to enter a new password.

... and if after the device wiped, the son may have set a new password.

If that's the case, just enter an incorrect password 10 more times and start over again.
The important part is getting the end user to set the new password after the device wipes itself.

[penguin3107]

Originally Posted by DarthBBerry

What's to prevent me from finding/stealing/borrowing one, incorrectly entering the password 10 times and then prompted for a 'New Password?' I could get right into it.

But the device would be wiped out.

Entering the incorrect password 10 times not only provides the ability to set a new password... but it wipes the contents of the device in the process as a security measure. The device will no longer be attached to the BES, and will need to be reactivated through an Enterprise Activation process.

[Sith_Apprentice]

and more importantly, dont let the kid touch the device again.


as for putting in the password incorrect 10 times, yes you get a working device, but you get no information that was previously on the device.

[DarthBBerry]

So lemme see if I understand...

1. JoeUser (or his kid) locks the BB due to 10 incorrect passwords
2. Device is now locked and erased
3. JoeUser gets prompted for a new password automatically
4. JoeUser gives himself a new password; device is unlocked but no data. Phone can still be used normally.
5. JoeUser then calls the BlackBerry Overlord to queue up EA on the server side so he can resume using the device
6. EA ensues & completes; and life returns to normal

Sound about right to ya'll?

[Sith_Apprentice]

yes

[penguin3107]

Originally Posted by DarthBBerry

So lemme see if I understand...

1. JoeUser (or his kid) locks the BB due to 10 incorrect passwords
2. Device is now locked and erased
3. JoeUser gets prompted for a new password automatically
4. JoeUser gives himself a new password; device is unlocked but no data. Phone can still be used normally.
5. JoeUser then calls the BlackBerry Overlord to queue up EA on the server side so he can resume using the device
6. EA ensues & completes; and life returns to normal

Sound about right to ya'll?

Yep.

[juwaack68]

Yep.

I take it you've never wiped a device that's been returned to you?

[DarthBBerry]

Okay... so with that solution in mind, I don't want stage 4 to take place unless I allow it on the BES. Even if the data is erased, the phone is still functional. I want the device locked and/or erased and to REMAIN that way until I can push an unlock command from the BES. The end user should not be able to set a new password untilthe BlackBerry Overlord says so. Then we can move on to step 5.

Any way to do that?

[Sith_Apprentice]

if the device is erased you have 0 control over it, it is no longer in contact with the BES at all. that would be the whole point of the EA. Sorry but there is no way to control what you want to control in this.

[DarthBBerry]

Originally Posted by juwaack68

Yep.

I take it you've never wiped a device that's been returned to you?

Of course. Crazy question. I even erase the OS.

[juwaack68]

Why do you erase the OS?

[penguin3107]

Originally Posted by DarthBBerry

I even erase the OS.

Jeez... that's a bit drastic.
I think you're making too much work for yourself.

Just wipe the data and reactivate it for a new user.

[DarthBBerry]

Originally Posted by juwaack68

Why do you erase the OS?

By the time I get a device back from the user, it's an older one with an older OS. Refresh, refurb and sanitized wipe later... it's good as new.

[jsconyers]

As sith stated, The device loses connection with the BES once wiped. If you have a spare device sitting around. Set a password on it and purposely enter the incorrect password 10 times. It will prompt you to enter "blackberry" a couple of times and warn you on the 10th attempt that you will lose all data if you enter the incorrect password again.

This may help you get a better understanding of what happens in case you run into this issue again.