How to remove an IT policy from a BlackBerry smartphone

[BESadmin]

Remove an IT policy from a BlackBerry smartphone

Doc ID : KB14202
Last Modified : 2008-06-16
Document Type : How To

Environment

• BlackBerry® Device Software 4.2.2
• BlackBerry® Enterprise Server version 4.1 Service Pack 4 (4.1.4)

Procedure

To remove an IT policy from a BlackBerry smartphone, the BlackBerry Enterprise Server administrator must perform the following steps:


Note: The BlackBerry Enterprise Server administrator must first apply the Erase Data and Disable Handheld IT policy rule to the BlackBerry smartphone user account for the Remote Wipe Reset to Factory Defaults IT policy rule to be effective.

1. In BlackBerry Manager, in the left pane, click BlackBerry Domain.
2. On the Global tab, click Edit Properties.
3. Click IT Policy.
4. Assign the Remote Wipe Reset to Factory Defaults IT policy rule to the BlackBerry smartphone user account to remove the IT policy and reset the BlackBerry smartphone to factory defaults.

Note: This IT policy rule is located in the Security Policy Group.
Additional Info

Prior to BlackBerry Enterprise Server version 4.1.4, remote removal of an IT policy from a BlackBerry smartphone by a BlackBerry Enterprise Server administrator was not possible. When a BlackBerry smartphone activates on a BlackBerry Enterprise Server, the BlackBerry smartphone retrieves the IT policy and locks it in a read-only state that prevents the removal of the IT policy.

To remove the IT policy from earlier versions than BlackBerry Enterprise Server version 4.1.4, please refer to KB04750 or the ITPolicy.exe file located in the BlackBerry Enterprise Server installation directory.

With the release of BlackBerry Enterprise Server version 4.1.4 and BlackBerry Device Software 4.2.2, the Remote Wipe Reset to Factory Defaults IT policy rule allows BlackBerry Enterprise Server administrators to remove the IT policy from a BlackBerry smartphone.


When a BlackBerry Enterprise Server administrator applies the Remote Wipe Reset to Factory Defaults IT policy rule to a BlackBerry smartphone user account, the following actions occur on the BlackBerry smartphone:

• All data is erased
• All third-party applications are removed
• The IT policy is removed

[Panther]

In the document above you state you must enable

"Erase data and disable handheld" must be applied before you can select

"Remote Wipe reset to factory defaults"

Please can you direct me to where it says "Erase data and disable handheld" in the policy screens as i have looked through all the policies available and cannot find the setting. I rechecked the Security policy 3 times and still can't find it

Is it worded different on the BES compared to this article?

Thanks in advance

[GaryCutri]

Originally Posted by Panther

In the document above you state you must enable

"Erase data and disable handheld" must be applied before you can select

"Remote Wipe reset to factory defaults"

Please can you direct me to where it says "Erase data and disable handheld" in the policy screens as i have looked through all the policies available and cannot find the setting. I rechecked the Security policy 3 times and still can't find it

Is it worded different on the BES compared to this article?

Thanks in advance

Hi,

If you have BES 4.1.4 or higher it is in the "Security Policy Group". From memory it's right down the bottom (about the 9th or 10th last item).

Thanks,

Gary

[Panther]

Thanks for the reply

But the screen shot below shows the "remote Wipe...." setting but not the "erase setting


I have attached the screen shot

[GaryCutri]

I have updated the KB article above and I can confirm you only have to set "Remote Wipe reset to factory defaults" in I.T Policy. When you need to wipe a device from the BES just right click a user and then select "Erase Data and Disable Handheld".

[giulianog]

I have a related question.
I recently left my company and was allowed to keep my BB 8100. The BB was under a BES plan. The company must have sent a wiping command because all data was deleted, still a number of applications and the IT security policy (which prevents applications from being deleted, among others) is still there.
The BB is now registered in my name with BIS service (Vodafone Ireland) and works for basic phone / email but is hardly modifiable. Firewalls and other mechanisms basically prevent the use of gmail, opera, etc.
I tried to reset the BB through the "security options / general / wipe handheld / blackberry" procedure but the situation did not improve after that.
Could you explain me how I can bring the BB back to its "Out of factory" status?

Thanks
G

[Panther]

Basically this is what i would do...pesky It Policies

1. Install the blackberry handheld manager for desktops, then go to BlackBerry and go to the downloads section and download the latest software for the phone and then use the application loader in the blackberry desktop manager to load a new version of the software over the one on your blackberry...then ask you next company to re-sync your blackberry but if you are using it as a normal phone...gather that would sort your problem

2. If your previous compaany (this could be a long shot) has Blackberry Enterprise Server 4.1.4 or above, there is a security policy that will erase the handheld and set it to factory setting, but your previous companies IT guys would need to do that

3. Give it to your new companies IT people and ask them to Nuke the handheld....this will wipe all software from the device...and then from there you can use the application loader again to install the latest version of the handhelds software

Thanks

[platinum1345]

On the screen is a circle with a line through it, inside the circle is a window with another circle, square and a triangle, with the numbers 507 at the bottom of it, does anyone know what that is? If so can it be fixed and do you have the fix for it or know where it is?

Thanx!

[giulianog]

Originally Posted by Panther

Basically this is what i would do...pesky It Policies

1. Install the blackberry handheld manager for desktops, then go to BlackBerry and go to the downloads section and download the latest software for the phone and then use the application loader in the blackberry desktop manager to load a new version of the software over the one on your blackberry...then ask you next company to re-sync your blackberry but if you are using it as a normal phone...gather that would sort your problem

2. If your previous compaany (this could be a long shot) has Blackberry Enterprise Server 4.1.4 or above, there is a security policy that will erase the handheld and set it to factory setting, but your previous companies IT guys would need to do that

3. Give it to your new companies IT people and ask them to Nuke the handheld....this will wipe all software from the device...and then from there you can use the application loader again to install the latest version of the handhelds software

Thanks

Panther,
Thank you very much for your reply.

At the moment I am not on a BES server and I tried all the suggestions you mentioned that were not BES specific, with some benefit - I now can use Opera and Gmail software, but still no bluetooth, etc.

Vodafone does not seem to have a BES available for customer support (this looks awkward, doesn't it? These are the guys you buy the stuff from and pay your bills to) so they were of no help, too.

My old company has policies which prevent it from retaking control of my BB, regardless of the fact that they are the source of the problem.

If some of you know of someone who could register my BB with their BES server just to issue the "wipe all" policy and then release it, that is probably the only remaining option until I finally work with a BES-enabled company. Private messages can be sent to giulianog67 at yahoo dot it

Thanks
g

[Panther]

Platinum 1345

the 507 on the device means

That the handheld software is no longer on the handheld, all you need to do is reload the software via desktop manager

Download desktop manager from the blackberry.com website, then install it and the download the latest version of the handheld software...also at the same site. (you will need to install both on your PC first)

Once thats done, open up desktop manager and plug blackberry device onto computer with USB cable, click on application loader in desktop manager and then go through the steps...you will then see it will start loading the software onto the phone...takes +-15 minutes

Once done the phone will turn on by itself and voila...clean blackberry with new software on it