BlackBerry Forums Support Community

DGBB · 04-09-2010, 08:22 AM

I just purchased BB8900 Curve from someone who works at a company.
He set me up with a password. However, when I tried to disable the password protection, it was always on Enabled - it didn't allow me to disable it.
I found out that the device was IT Policy Enabled.
My carrier walked me through and showed that under
Options>Status and typing BUYR - the voice and data usage showed IT Policy Enabled. Also, under Options>Security Optoions>General Settings, it displayed the IT Policy with the company name.

I went to the blackberry website and found the following:

How to remove an IT policy from a BlackBerry smartphone

It has 3 ways - 2 going through the company's IT department and the third way you can do it yourself. I contacted the individual and he is having his company remove the IT Policy feature. However, I didn't want to wait for this to happen so I removed it myself (being the 3rd option)

The password protection screen can now be enabled or disabled.
When I type in BUYR under Options>Status, it shows the actual usage for voice and data (no IT Policy).
So it appears the IT Policy feature has been removed.

My question:

1. Is it possible for whatever reason (and I apologize, I'm not a tech guy) for the company to attach the IT Policy to the device without having access to the device? I would hate to think that some organization can control my device remotely because it has my PIN/IMEI info.

Thank you.

jsconyers · 04-09-2010, 08:49 AM

Welcome to the forums.

Using the procedure you followed to remove the IT Policy (I assume you used the Reset To Factory Options in JL_Cmder or BBSAK), it would have broken connection to the BES. Once the connection has been broken, the BES cannot make contact with the device. So, it won't be able to push a policy to your device.

DGBB · 04-09-2010, 08:56 AM

Thank you for the reply. I did the following:

1. Connect the BlackBerry smartphone to the computer.

2. From the Start menu, select Programs > Accessories > Command Prompt.
If using Microsoft Windows Vista, may need to right-click the Command Prompt application and choose Run as administrator.

3. Navigate to the Apploader folder by typing cd C:\Program Files\Common Files\Research In Motion\Apploader and then pressing the Enter key.
For computers using a 64 Bit version of Microsoft Windows, navigate to C:\Program Files (x86)\Common Files\Research In Motion\Apploader

4. Type loader.exe /resettofactory.
5. Enter the BlackBerry smartphone password if prompted.

My carrier tech person said that they could. I thought that was strange that anyone who knows one's PIN/IMEI can make the device IT Policy Enabled - even if it was purchased from a retail store and never was enabled in the first place.

jsconyers · 04-09-2010, 08:59 AM

Your "carrier tech person" lied to you. That is not possible. The device would need to be activated on the BES, and would need a BES data plan to do so. So how would this work on any device without a data plan or let alone a BES data plan?

Don't always believe what the CSR's tell you.

DGBB · 04-09-2010, 10:01 AM

Thank you for the response.

Just to recap:

1. Based on what I did (the steps outlined in my previous post), my device should not be IT Policy Enabled. I don't see IT Policy Enabled on Data and Voice Usage under the Options>Status and typing BUYR.
Correct?

2. In order to re-enable my device, there would need to be a BES data plan with the company?

3. Do they need to have physical possession of the device to enable it or could they do it remotely?

Thank you again - you have been a great help.

jsconyers · 04-09-2010, 10:03 AM

1) Correct

2) You would need a BES data plan on your account to activate it on a BES

3) They could activate it remotely (with the correct data plan on your account), but you would have to put in your email and EA password. So without your interaction, it cannot be done.

The policy is removed and will not be added back. You're good to go.

DGBB · 04-09-2010, 10:16 AM

Thank you for the peace of mind.

By the way, the tech support at my carrier had said that the IT Policy removal could only be done by the company's IT department.
Also, they had said it is still enabled if under the voice and data usage it doesn't show IT Policy Disabled. I told them in my case, it shows the actual usage - such as 2.5 minutes, 250K. They said it should say IT Policy Disabled.

I just got a call from the vendor and he told me that his company is about to disable IT policy on its end. If they do issue blank IT Policy (I think that is the terminology), will it do anything to my device? In particular, will it reset it back to factory settings and wipe my data on the device?

Sorry for the neurotic questions.

Thanks again!

TheRinger · 04-09-2010, 10:26 AM

Quote:

Originally Posted by DGBB

I just got a call from the vendor and he told me that his company is about to disable IT policy on its end. If they do issue blank IT Policy (I think that is the terminology), will it do anything to my device? In particular, will it reset it back to factory settings and wipe my data on the device?

Thanks again!

...

Quote:

Originally Posted by jsconyers

The policy is removed and will not be added back. You're good to go.

jsconyers · 04-09-2010, 10:33 AM

Quote:

Originally Posted by DGBB

Thank you for the peace of mind.

By the way, the tech support at my carrier had said that the IT Policy removal could only be done by the company's IT department.
Also, they had said it is still enabled if under the voice and data usage it doesn't show IT Policy Disabled. I told them in my case, it shows the actual usage - such as 2.5 minutes, 250K. They said it should say IT Policy Disabled.

I just got a call from the vendor and he told me that his company is about to disable IT policy on its end. If they do issue blank IT Policy (I think that is the terminology), will it do anything to my device? In particular, will it reset it back to factory settings and wipe my data on the device?

Sorry for the neurotic questions.

Thanks again!

Again, the CSR is not properly informed or trained. You do NOT have an IT policy on the device and as you have found out, you can remove it without going through a company's IT department.

If they still have the user on the server, they can send a blank policy. It will show a "sent" status and then most likely go to an "error" status as it will never reach your device.

DGBB · 04-09-2010, 10:35 AM

Thank you again! So, issuing a blank IT Policy on the other end will not do anything to my device.

TheRinger · 04-09-2010, 10:37 AM

Quote:

Originally Posted by DGBB

Thank you again! So, issuing a blank IT Policy on the other end will not do anything to my device.

Correct. I answered that in the private message you just sent me.

No offense, but asking the same question different ways does not change the answer

jsconyers · 04-09-2010, 10:41 AM

Quote:

Originally Posted by TheRinger

No offense, but asking the same question different ways does not change the answer

Although, it is nice to get clarification.

DGBB · 04-09-2010, 10:42 AM

Thank you everyone for your help. I'm good to go!!!!!

Like I had said, I did not mean to ask the same question twice - not a tech guy - just want to be sure of its removal

Thanks again!!!!

DGBB · 04-09-2010, 10:45 AM

Thank you for your patience!