Removing an IT Policy from a BlackBerry phone

[Pete6]

There is a RIM generated error in the policy.bin file that has formed the basis for IT Policy removal on BlackBerrys (see naviwilliams' post).

All the policy.bin files that I have been able to find on the web have the same error. After the operation to remove the IT Policy, the Firewall remains locked (Options, Security Options, Firewall) reveals a red padlock aginst the Firewall option. There is no known work around. I even
called RIM and asked them how to remove an IT Policy and they told me (for $45) that it could not be done. Well, here's how.

The only valid way to fully remove an IT Policy is first to be running an OS of version 4.3 (check Options, About and read the 3rd line down) or higher or this procedure will not work. It may therefore be neccessary to upgrade the OS to 4.3 or better before proceeding.


If you are running OS 4.3 or better (this is essentially cjarbone's method)

• You need CrackUtil or JL_Cmder installed on your PC.
• Sync your phone and do a Backup before starting.
• Once this is done, shut down Desktop Manager.
• Run CrackUtil. From the Advanced sereen screen Reset IT Policy and then wait until the phone has re-booted.
• Do a Restore and you should now see that the Firewall (Options, Security
• Options, Firewall) now has no little red lock against it.

If you are running OS 4.2

• Sync your phone and do a Backup.
• Install and OS version greater than 4.2 (any version 4.3 or above will do).
• Run CrackUtil. From the Advanced sereen screen Reset IT Policy and then wait until the phone has re-booted.
• When the phone has rebooted check Options, Security Options, Firewall now has no little red lock against it.
• Re-install your old OS if you wish by doing the following. Uninstall OS 4.5 (but keep 4.2 installed) from your PC and Desktop Manager will prompt you to ask if it should downgrade.
• Do a Restore and a Sync.

I know that this proceedure is long and tedious but it does work reliably.

Sometimes using the above tools does not remove the IT Policy. It shows up after you re-connect to Desktop Manager. If this happens, you will need to clean out a file and a registry entry on the PC.

You need to find a file on your PC called policy.bin and delete it. There is also registry wntry that points to policy.bin. You must delete that too.
The file should be located at C:\Program Files\Research In Motion\BlackBerry\policy.bin

Open up Regedit (Start > Run and type regedit). Locate and delete the key HKEY_Current_Users\Software\Research In Motion\BlackBerry\PolicyManager\C:\Program Files\Research In Motion\BlackBerry\policy.bin

The PC is now clear and will not cause problems again.

[SinisterJunkie]

Thanks for the great information!

[Rsquigley]

Noob question, but what is the IT Policy, what why would you want to remove it. Really sorry if this is a dumb question

Posted from my CrackBerry at wapforums.crackberry.com

[Reed McLay]

Large corporations usually maintain their own servers and email message systems and secure it from non-authorized users.

The only way to gain access is through their BES connection.

In order to maintain security, certain features of the BlackBerry will be disabled by use of an IT Policy. Frequently, the policy will prevent the installation on non-supported applications and enforce policies like requiring the user top make regular pass word changes.

The concern is, a malicious program might be installed and threaten the security of the data on the corporate servers.

Later in life, these BlackBerry may be cycled out of service and resold. That is when a new owner may encounter a restrictive policy and want it removed. The original owner never would, doing so would risk the security of the corporate data and be grounds for dismissal.

In practice, there are some poorly created BIS applications that can inadvertently install a policy. These are fair game and the reason we need to know this information.

[Pete6]

All BlackBerrys have an IT Policy, even yours. Yours like most other privately owned BlackBerrys never have a problem with their IT Policy because they are set to be blank at manufacture.

Corporate owned devices, managed by IT Departments are often restricted as to what the phone can do and the IT Policy is the tool that they use to do this.

The IT Policy can at will prevent programs being installed or removed, ban the use of the camera, bluetooth, Media Card, various levels of calling out and any number of other things to protect the company and to save money or prevent it being spent.

Sometimes these phones come into private hands by being sold off to employees or sometimes they are sold on ebay or elsewhere.

A person buying such a phone would find it crippled and RIM (who make BlackBerrys) will only say that the only person who can remove an IT Policy is the person who put it there in the first place.

As you can imagine, this is not always a convenient choice so, we have had several cracks (pun quite intended) at removing this annoying tool. It is not easy and now, I have finally come up with the definitive method of doing so.

naviwilliamls and cjarbone pointed the way with their initial posts but this is the first time that a post has described the whole process for any Operating System version.

I hope that this has helped understanding.

[Rsquigley]

hay guys thanks alot for explanation, one step further from being a bb noob

[dgberry56]

Hey Pete,

I am trying to remove the IT policy from my 8830 since I left my employer. They cannot help me since they have closed the business. I am trying to follow your instructions but I have os 4.2 and when I try to upgrade to a higher os on the BB site, I am blocked. I get a message that says software upgrades are blocked because I have BES on the phone! Basically, I can't get rid of the IT without upgrading and I can't upgrade because I have an IT policy!! It's a Catch 22!

Any suggestions? Thanks.

[sniffs]

Wipe the device, then remove the policy.

[dgberry56]

A newbie question sniffs. How do you wipe the device? Thanks.

[amazinglygraceless]

Originally Posted by dgberry56

A newbie question sniffs. How do you wipe the device? Thanks.

JL_Cmder Javaloader Utility

This will completely wipe EVERYTHING from your phone so do a backup first.

When the wipe is done your phone will boot up to a 507 Error. Don't panic, that
is what you want to see. From there you can follow the instructions on how
to load the new OS.

[mr.alex.graham]

Hi there, did you recieve any assitance in removing your IT Polcies on your BB 8830. I am in the same situation and very fustrated. Are you feeling comfortable using crackutil. Please let me know what you do. I am very interested.

Originally Posted by dgberry56

Hey Pete,

I am trying to remove the IT policy from my 8830 since I left my employer. They cannot help me since they have closed the business. I am trying to follow your instructions but I have os 4.2 and when I try to upgrade to a higher os on the BB site, I am blocked. I get a message that says software upgrades are blocked because I have BES on the phone! Basically, I can't get rid of the IT without upgrading and I can't upgrade because I have an IT policy!! It's a Catch 22!

Any suggestions? Thanks.

Posted from my CrackBerry at wapforums.crackberry.com

[sniffs]

Or you can go to Settings, Options, Security Options, General Settings, then either push the wheel in, or push the button to the left of the trackball and then select "Wipe Device".

This brings your device back to factory defaults without actually having to worry about JVM errors. =)

[djboogie]

having tried one of the "unlimited" tmobile sim cards on ebay, which TOTALLY MESSED UP MY BLACKBERRY (it wouldnt even recognise my own number when i reinstered my own sim, and messed up mms an browser etc) this tutorial totally saved me
thanks tons!!!

[djboogie]

Originally Posted by sniffs

Or you can go to Settings, Options, Security Options, General Settings, then either push the wheel in, or push the button to the left of the trackball and then select "Wipe Device".

This brings your device back to factory defaults without actually having to worry about JVM errors. =)

thats great info to know thanks

[Pete6]

Originally Posted by dgberry56

Hey Pete,

I am trying to remove the IT policy from my 8830 since I left my employer. They cannot help me since they have closed the business. I am trying to follow your instructions but I have os 4.2 and when I try to upgrade to a higher os on the BB site, I am blocked. I get a message that says software upgrades are blocked because I have BES on the phone! Basically, I can't get rid of the IT without upgrading and I can't upgrade because I have an IT policy!! It's a Catch 22!

Any suggestions? Thanks.

Sorry for the delay in replying I was busy with other stuff (Christmas lights).

I have not come across this one before and it could be a show stopper. The thing to do here is to obtain a copy of the OS that is currently installed on your phone before we start destroying the poor thing. This is our fallback option in case everything falls apart.

As I have never done this before, I can only advise you and can take no responsibility if your phone stays bricked.

Attached is a program called CrackIT. It is designed to remove IT Policies from BlackBerrys running OS 4.2 BUT IT HAS A FLAW. CrackIT relies on a file caled polict.bin and this file came from RIM and it has an error. It locks the Firewall. Howeve this does not matter since we are only going to use CrackIT to overwrite your existing IT POlicy. Once we have OS 4.5 installed then CrackUtil (in my signature) will remove the Firewall lock.

So, please download and install CrackIT, CrackUtil and CrackMem. Make sure that you have Desktop Manager 4.6 (4.7 sucks) installed connect your phone and sync it to Outlook (this is important because OS 4.5 does not always restore OS 4.2 Backups) to save your personal data. Now do a Backup to save any application data.

Leave the phone connected and shut down Deskto Manager. Run CrackIT and click the big button.

Now run Desktop Manager again and do another Backup. This action is just to make sure that DM has applied the new Policy.

Read the Help text of CrackIT and then remove it and the policy.bin file from your PC. To avoid errors, also remove the registry entry so that DM does not get confused.

Hopefully the IT Policy that prevents you from upgrading is now removed. Please try to uprade.

Come back here or PM me if you need more help.