Tuesday, February 9, 2010

Removing Application Lock on Windows Mobile Standard Devices

Articles Written by: Mike Temporale on Friday, September 4, 2009 9:30am

MobileJaw-ApplicationLock Now that we know about Application Lock and the general principles behind it, we need to look at how to remove it from our phone so that you can install any application and make more customizations to your device.

Using an XML Provisioning file, you can load and change a number of settings, more commonly referred to as Configuration Service Providers, on your Windows Mobile device. You can find a really good list of the different Configuration Service Providers that can be changed here on MSDN. Depending on the configuration service you want to set, there are different delivery options available to use. When it comes to Application Lock, we’re interested in 4 specific settings.

Security Policy 4102 – This policy decides if the device can run unsigned applications. A value of zero (0) means that it’s locked and that no 3rd party signed applications, like Mobile2Market will be allowed. A value of one (1) means that the setting is unlocked and that 3rd party signed applications should be allowed to run. This policy is related to the following registry location: HKLM\Security\Policies\Policies\00001006. We need to set this to the unlocked state of 1.

Security Policy 4122 – This policy determines if a user should be prompted when an unsigned application attempts to run. The settings are reverse of 4102. A value of zero (0) means that there are no prompts. A value of one (1) means that the security is turned on and that you will be prompted when a unsigned application attempts to run. This policy is related to the following registry location: HKLM\Security\Policies\Policies\0000101a. We need to set this value to the unlocked state of 1. However, that means that we will be prompted when unsigned applications attempt to run.

Security Policy 4123 – This policy decides if the device should act as a two-tier or one-tier security. A value of zero (0) means that the device will act in the two-tier security profile. A value of one (1) means that it would act in the one-tier security profile. This policy is related to the following registry location: HKML\Security\Policies\Policies\0000101b. By default, Windows Mobile Standard devices have this value set to 0 – two-tier security. We need to set this to a value of 1.

Security Policy 4097 – This policy determines what level or rights a desktop computer has when making calls over the ActiveSync (RAPI) channel. A value of zero (0) means disabled and that an application running on the desktop computer has no rights on the mobile device. A value of one (1) means allowed and that an application running on the desktop computer has access and rights on the mobile device. a third value of two (2) means restricted and that an application on the desktop computer has the same level of permissions as the user on the device. This policy is related to the following registry location: HKLM\Security\Policies\Policies\00001001. We need to set this value to 1.

Now that we know what security policies we want to change and what registry settings they reflect, we can just change those registry values and be done, right? Unfortunately, it’s not that easy. Remember, the device is still application locked at this point. So we need an application that is considered to be trusted to be installed on the device to make changes to those values. In the past, there has been hacks that allowed you to application unlock your device. They typically involved a number of steps like; changing a registry value or two, then rebooting, then running a desktop tool, and then rebooting, and then maybe, just maybe, you might be able to change the rest of the registry and have an unlocked device.

Now that we know the security policies we need to work with, we can put them together into an XML format that can be run on the device. Here’s the resulting XML:

<wap-provisioningdoc>
<characteristic type=”SecurityPolicy”>
<parm name=”4102″ value=”1″ />
<parm name=”4122″ value=”1″ />
<parm name=”4123″ value=”1″ />
<parm name=”4097″ value=”1″ />
</characteristic>
</wap-provisioningdoc>

Now we need an application that has privileged access on the device so that we can use it to change the security policies. Unfortunately, applications that are privileged signed are not easy to come by. Typically, the privileged access is reserved applications that are aimed at enterprise users and not the average consumer. SOTI, the makers of Pocket Controller Pro, have just such a product – MobiControl. MobiControl is a full featured device management tool that is privileged signed, allowing you to have full control over every aspect of your fleet of mobile devices.

Once you’ve downloaded and installed MobiControl, you simply build an agent for your device, install it onto said device and then you can use that agent to run the XML Provisioning document outlined above. SOTI offers a full featured 30 day trial version. Which means you don’t have to pay anything to do this.

But that seems like a lot of work just to disable the application lock on your device. So I’ve gone ahead and built an agent that will automatically disable Application Lock on Windows Mobile Standard devices during the agent install. Simply download MobileJaw-ClearSecurity-MobiControl and run it on your device. After the install is complete, open the Start menu / Settings / Remove Programs and be sure to uninstall SOTI MobiControl from your device. If you leave this agent on your device it will have an adverse effect on your battery life as the agent will continually try and connect back to the device management server. I used a non-routable internal IP Address (192.168.1.128). So there’s no worry about it actually connecting back to some backend server and uploading all your data.

MobileJaw-ClearSecurity-Confirmation.png

That’s all there is to it. Just install and remove this agent and then Application Lock will be disabled on your device. This works on any Windows Mobile Standard device running Windows Mobile 5, 6, or 6.1. So it doesn’t matter if you have a BlackJack, Ozone, Jack, Snap, Matrix Pro, or Moto Q. It even works on upcoming 6.5 devices from HTC, LG, Samsung, Motorola, and other manufacturers. It’s a little early to say if it will work on Windows Mobile 7 devices. But we’ll cross that bridge when the time comes.

UPDATE (24-Oct-2009) – With the release of Windows Mobile 6.5, application lock can now be found on touch screen devices. This was never the case before. If you have a touch screen device (Windows Mobile Professional), please use this CAB file – MobileJaw-ClearSecurity-MobiControl-TouchScreen – to remove application lock on your device.

Anyone with non-touch screen devices (Windows Mobile Standard) should continue to use this CAB file – MobileJaw-ClearSecurity-MobiControl – to remove their application lock.


Comments

77 Responses to “Removing Application Lock on Windows Mobile Standard Devices”

  1. Pony99CA on September 4th, 2009 9:00 pm
    Pony99CA

    Looks like a nice tool to help people out. Good job.

    Steve

    P.S. I think you meant leaving it installed will have an “adverse” effect on battery life. :D

  2. Earl on September 6th, 2009 12:23 am
    Earl

    Worked great for a first time smartphone user.

    Was finally able to install the Google mobile apps package.

    Tnx, Earl

  3. Simon Mason on September 6th, 2009 9:31 pm
    Simon Mason

    Hi Mike, I have installed the .cab file on my phone (HTC Snap S523) and execute it from the My documents folder and I get an error message. “SOTI MobiControl Device Agent” cannot be installed.

    To try installing again to a different location, choose a location.

    Device

    I have selected both the device and the Storage Card and I end up with the error “Installation of MobileJaw-ClearSecurity-MobiControl.cab was unsuccessful.

    Any ideas?

  4. Simon Mason on September 7th, 2009 8:04 pm
    Simon Mason

    Nevermind, I found that the cab had to be installed on the SD Card and ran from there also.

  5. Mike Temporale on September 7th, 2009 8:37 pm
    Mike Temporale

    @Pony99CA – Thanks Steve! Silly Spell checker. I’ll fix it up now.

  6. Mike Temporale on September 7th, 2009 8:40 pm
    Mike Temporale

    @Simon Mason – Where did you get the Snap from? is this an HTC version? or is it from T-Mobile, Verizon, Telus, or some other carrier?

    The reason I ask is because it shouldn’t failed. The only reason I can think of is that there wasn’t enough free space on the internal memory of the device. Do you have it loaded with programs and/or music?

    I will try it on my Snap when I get into the office tomorrow.

  7. Simon Mason on September 8th, 2009 2:44 am
    Simon Mason

    Its a Telecom New Zealand HTC Snap 523. It definately had enough space on the Device. I’m just grateful that it worked. What a pain this application lock stuff is.

  8. Mike Temporale on September 8th, 2009 9:16 am
    Mike Temporale

    @Simon Mason – I tested it on my T-Mobile Snap and it installed without any problems. Not sure why you had issues, but I’m glad to hear you got it working.

    :)

  9. Michael Brown on September 15th, 2009 11:05 am
    Michael Brown

    I was able to make this work and install an unsigned app. However, when I uninstall SOTI MobiControl from my device, I can no longer install unsigned apps. Does the uninstall remove the registry edits too?

  10. Mike Temporale on September 15th, 2009 1:19 pm
    Mike Temporale

    @Michael – No, the security settings are not removed when you uninstall the CAB file.

    What program are you trying to install? Are you sure that you have the non-touch / Standard version of the application? Some Windows Mobile Professional apps may work, but not all. Make sure you get the correct application for your device!

  11. Michael Brown on September 15th, 2009 3:20 pm
    Michael Brown

    @Mike
    Samsung Propel Pro WM 6.1 Standard

    When I try to install the Google Search App, I get the same old “does not have sufficient system permissions” error.

    I successfully installed PockeTwit, which I was not able to install before.

  12. Mark Kellaway on September 15th, 2009 11:07 pm
    Mark Kellaway

    Fantastic, thank you so much!!! I’ve been completely frustrated by this since getting my device.

  13. Mike Temporale on September 16th, 2009 8:15 am
    Mike Temporale

    @Michael – There shouldn’t be any problems. Can you post a link to the download? I’ll take a look and see what’s going on.

  14. Michael Brown on September 16th, 2009 9:19 am
    Michael Brown

    @Mike
    I decided to reset my device and try again. Worked perfectly this time. Thanks for your help.

  15. Jed on September 20th, 2009 6:07 am
    Jed

    I too have a Telecom NZ HTC Snap – this application worked brilliantly – Thank you.

  16. Alan brown on October 4th, 2009 4:51 pm
    Alan brown

    Hi Mike

    I have a BT htc 620 running Windows Mobile 6 I have Successfully installed the program but it still will not allow unsigned apps to run. Any ideas

  17. Mike Temporale on October 4th, 2009 10:16 pm
    Mike Temporale

    What apps are you looking to install? If my CAB file installed, then there is nothing preventing you from installing unsigned CABs.

  18. Alan brown on October 6th, 2009 3:12 pm
    Alan brown

    Hi

    I have attempted to install geovision and a few other remote camera viewing software to enable me to view my home cameras on my phone .I have tried to install a few programs but keep getting “access denied The program cannot start because it is not digitally signed with a trusted certificate “ have read a little on Bt forums and there are others with the newer phones running windows mobile 6 with the same problems those with windows 5 can get round it by editing the registry.
    regards Alan

  19. Robin on October 14th, 2009 8:23 am
    Robin

    I am trying to find the CAB file but its not working. I need to remove the app block from 400 SNAP devices.

    Please help

    Robin

  20. Tisha on October 16th, 2009 6:08 pm
    Tisha

    Hi Mike,

    So I got a bit daring and decided to try and get rid of the AT&T startup animation, and bricked my phone (Jack i637). I had to do a master reset, and all my tweaks are gone. I tried to run this again and it’s not working for some reason. CAB installs fine, but I never get the app unlock confirmation message. When I open mobicontrol it just says connecting to the IP. If I select ‘connect’ it repeatedly says it’s connecting (but nothing else happens). Maybe I’m forgetting to do something else first? I can’t customize my start menu or edit the registry anymore (sniff, whimper). Any ideas?

  21. Mike Temporale on October 17th, 2009 12:17 am
    Mike Temporale

    @Robin – I don’t understand what you mean by “trying to find the CAB file but its not working”. Are you having problems running the CAB on your device? Or are you saying you can’t locate the download link in the above article?

    Regardless, if you have 400 devices to manage, then you need to install a full featured device management application. This custom CAB is not the solution for you.

  22. Mike Temporale on October 17th, 2009 12:21 am
    Mike Temporale

    @Tisha – NO! Oh, I wish you had held off a little longer. I have learned that lesson and have full details on exactly how far you can push the Jack. :(

    In terms of getting this to run, try doing the reset again – make sure you pick the full master clear option. Then you should be fine to run this CAB on the device.

    Running the MobiControl application and hitting the connect button won’t actually do anything. (When you do that, the program is looking for the remote management server, which it will never find).

  23. Tisha on October 17th, 2009 7:35 am
    Tisha

    OK thanks! I will try it. In regards to your info on the Jack, are you planning an article on it? I would be very interested in reading it.

    Tisha :)

  24. Michael on October 21st, 2009 9:55 pm
    Michael

    i used your program on my matrix pro, works like a charm, but ever since i did that, when messages is open in any form (whether it be email or text) i get a blinking loading sign, itll go on for a couple secs, then stop then come back again, i did uninstall the app like it says, so idk whats wrong

  25. Mike Temporale on October 22nd, 2009 8:36 am
    Mike Temporale

    @Tisha – Yes, it’s almost done. It would have been up sooner but I was travelling last week and got lazy. ;)

  26. Mike Temporale on October 22nd, 2009 8:40 am
    Mike Temporale

    @Michael – I’m not sure what you mean by a blinking loading sign. Is that the spinning beachball? or is this the bar along the bottom when opening a message?

    Either way, that’s not related to unlocking the device. It may be related to an application that you have loaded now that it’s unlocked.

    Just a thought – do you have HTML emails turned on? Could this be related to your email attempting to download some sort of content?

  27. Michael on October 22nd, 2009 6:35 pm
    Michael

    yeah, the beachball, thats a good word for it lol, anyways, yes i have html emails on but im pretty sure its not that, cause it wasnt doing that before the unlock, the only thing i put on was the google search app

  28. Keith on October 22nd, 2009 11:23 pm
    Keith

    Thanks for this. I’m about to try it on the new HTC Imagio with Verizon as the carrier. I’m hoping it works because they have it so locked down I can’t even install the Mobi Pocket Ebook reader that is directly from that site.

  29. Keith on October 23rd, 2009 12:06 am
    Keith

    Ok, won’t work on the HTC Imagio. I even found a reg editor and I’m getting access denied when trying to change those settings manually.

  30. Keith Ramsey on October 23rd, 2009 11:37 am
    Keith Ramsey

    Its morning and I have slept. I just got a registry editor on to the HTC Imagio and manually edited those values. Then did a reset on the phone. Changes held but still will not allow any “3rd party” software to be installed. Ive been testing with Mobireader, because I trust it and its free.
    I’ll be taking the phone back today sense Verizon has this thing so locked down that I can’t even install programs from their handango website either.
    Just to restate… This is the new HTC Imagio VX6975 – USA – Verizon – WM6.5

  31. Belisario Garcia on October 23rd, 2009 11:53 am
    Belisario Garcia

    HI… I BOUGHT AN ATT PHONE AND UNLOCKED IT TO USE IT ON ANOTHER COUNTRY, I CANT SEEM TO INSTALL ANY FILE TO THE PHONE (SAMSUNG JACK I637), I HAVE TRIED RESETING AND STILL THE SAME PROBLEM, BASICALLY, WHAT HAPPENS IS THAT THE PHONE FREEZES WHEN RECEIVING OR MAKING CALLS. HOPE YOU CAN HELP ME.

    ALSO, WHEN I TRIED INSTALLING YOUR SOFTWARE TO CLEAR SECURITY VIA CABViaActiveSync it displays a message that acces is denied to SOTI Mobicontrol device agent.

  32. Mike Temporale on October 23rd, 2009 12:47 pm
    Mike Temporale

    @Keith – This cab file was not designed to clear the security on a Pocket PC or Touch screen device as this was never enabled on those devices. However, it appears that WinMo6.5 changed that.

    Give me a couple hours and I’ll post an update here with a new CAB file to remove the security on 6.5 touch enabled devices. :)

  33. Mike Temporale on October 23rd, 2009 12:52 pm
    Mike Temporale

    @Belisario – I have no idea why you are unable to make calls. There is nothing in this CAB that would ever interfer with that.

    I would suggest you start fresh with a Master Clear (as outlined over here – http://www.mobilejaw.com/articles/2009/07/hard-reset-the-samsung-jack/ ). Once that is done, test your device to be sure that the call functionality works. Then return to this post and install the cab file to remove your security. Again, test to ensure that your call functionality still works.

  34. Belisario Garcia on October 23rd, 2009 1:15 pm
    Belisario Garcia

    I tried doing the master reset and still no call functionality, it detects network and I was able to use 3g internet after some trying, but still, freezes when trying to make/receive calls or SMS. Any other Idea?

  35. Keith Ramsey on October 23rd, 2009 3:12 pm
    Keith Ramsey

    OK, Mike.. spent a lot of time looking…

    ADD this line to your XML
    HKEY_LOCAL_MACHINE\Security\Policies\Policies001005 = 40
    Just did that.. reboot and it installed the mobireader.

  36. Mike Temporale on October 23rd, 2009 9:49 pm
    Mike Temporale

    @Tisha – Article about changing the startup image/animation has been posted. You can find it here – http://www.mobilejaw.com/articles/2009/10/changing-the-att-startup-and-shutdown-animation/

    :)

  37. Mike Temporale on October 23rd, 2009 9:53 pm
    Mike Temporale

    @Belisario – if you’ve run master clear on the phone and still can’t place a call then there is a problem with your SIM or physically with the phone. :(

  38. Mike Temporale on October 23rd, 2009 10:51 pm
    Mike Temporale

    @Keith – Not sure what policy 001005 relates to, but it’s not one of the application lock values. Weird that changing that value allowed you to install the application.

    I’ve uploaded another CAB for touch screen devices. Try this and it should work for you now. (I’ve also included the link the original post above)

    http://www.mobilejaw.com/content/2009/09/MobileJaw-ClearSecurity-MobiControl-TouchScreen.cab

  39. Michael on October 24th, 2009 9:47 am
    Michael

    well first i dont even know how to do that, anyways i just did a master clear because it was driving me up a wall and killing my battery, so thanks but your programs created more problems than it fixed

  40. Mike Temporale on October 24th, 2009 11:18 am
    Mike Temporale

    @Michael – Sorry that you’re having problems, but this CAB has no impact on the phone functionality of your device.

    I first created this CAB for my Matrix Pro and for the other sites involved in the big Matrix Pro giveaway we ran a couple months back. As such, it’s been run on more than a dozen Matrix Pro’s that I have a connection with and none of those devices had any problems with the phone after running this.

    Anyway, glad to hear your phone is working again.

  41. Michael on October 24th, 2009 12:12 pm
    Michael

    yeah, it was probly just a combination of factors coming to that end result, not just your program, thank you for the help tho

  42. Michael McComber on December 23rd, 2009 1:50 pm
    Michael McComber

    Mike: Worked as stated. Thanks. IDK why MS would think people would just CHUCK all of their previously purchased WORKING FINE UP UNTIL NOW applications. What, repurchase them? Duh, no… We’ll be vindicated on this issue when v7 comes out and it includes some sort of feature that handles this.

  43. Mike Temporale on December 23rd, 2009 9:18 pm
    Mike Temporale

    @Michael – I don’t expect that this will change come version 7. Carriers and manufacturers are looking to ensure that their devices are safe from risks. The application lock was designed to do that. In WinMo6.5, Microsoft has extended the application lock to include touch screen devices as well. :(

  44. Yuri on December 26th, 2009 6:02 pm
    Yuri

    Hi Mike!
    I was so hopeful towards your solution but unfortunately it did not work for me. I have samsung omnia 2 with windows mobile 6.1.
    Tried all Cab files mentioned in the article and comments, but with no luck.
    Please help.

  45. Mike Temporale on December 26th, 2009 10:56 pm
    Mike Temporale

    @Yuri – The Omnia 2 is a Windows Mobile Professional device – with a touch screen. This solution is for devices WITHOUT a touch screen.

    You should not be having any application lock issues with a Windows Mobile professional 6.1 device as Microsoft had not enabled this in that version. However, 6.5 is a different story. You can check that out over here – http://www.mobilejaw.com/articles/2009/10/application-lock-makes-its-way-to-touch-screen-windows-mobile-6-5-devices/

  46. Walt Barnes on December 31st, 2009 6:47 am
    Walt Barnes

    Aloha Mike – Crazy but I can’t get it to work on my AT&T Samsung Blackjack II flashed to 6.1. If I just install your MobileJaw-ClearSecurity-MobiControl cab file and use file manager to try to execute it I get the install unsuccessful becuase not digitally signed with a trusted certificate. I get the same thing if the cab is in main memory or on the storage card. Interestingly enough. If I download and install MobiControl and then go through the progress of making a default agent for my phone, that does install OK. Any suggestions how to get your cab working? Or what I need to do to install the security policy to allow other installs via MobiControl. Thanks.

  47. Mike Temporale on December 31st, 2009 8:01 am
    Mike Temporale

    @walt – Interesting. I’m not sure why the agent is failing to install. When you try and run it, you should be prompted with a message “Do you trust this application”. If you say Yes to that, you shouldn’t have any problems. Are you using the AT&T BJII? Or is it from another carrier?

    Regardless, if you went through the hassle of downloading, installing and building an agent in MobiControl. Then all you need to do is copy the XML from above to a text file and rename the file to .XML. Copy the text file to your device in the root folder. Then remote control the device, click the DOS screen and type the following:

    xmlconfig \{yourtextfile.xml}

    And that will remove the application security lock on your device. :)

  48. Jon Bond on January 2nd, 2010 5:37 am
    Jon Bond

    Another Telecom NZ HTC Snap 523 successfully unlocked. No SD card in this one. Install/uninstall went 100% according to the instructions
    Thanks Mike.

  49. Walt Barnes on January 2nd, 2010 3:00 pm
    Walt Barnes

    Bizarre – there must be some underlying other problem with my AT&T BJ II WM 6.1 phone. The symptom was anything unsigned I tried to install went directly to the “install unsuccessful… no valid signed certificate” without prompting me if I wanted to continue the install. Even the custom made agent provided here got the same result. On my other WM 5, 6, and 6.1 phones I am used to getting the prompt, saying “yes” and continuing the install. Also attempts to run imported, built exe applications failed.

    I was able to install the entire MobiControl demo, make my own agent, and install that to gain remote control over the phone. As suggested, using a remote DOS window I was able to xmlconfig and make the registry changes as suggested. Yea.

    Now I can run imported, built exe applications and using a local registry editor I can verify the specific registry changes have been made. And I can make other registry changes if I want to.

    Now for the bad news… I still am stuck with exactly the same “install unsuccessful… no valid signed certificate” when I try to install any application .cab file.

    Could there be some other security registry setting I might need?

    Could there be some other problem with the default certificates I should have that is shutting me down before I even get to the typical prompt?

  50. Jon Bond on January 3rd, 2010 10:33 pm
    Jon Bond

    Just used this on another Telecom NZ HTC Snap 523. This one had been upgraded to Windows Mobile 6.5

    No problems at all.

  51. Mike Temporale on January 3rd, 2010 10:46 pm
    Mike Temporale

    @walt – there must be something weird going on under the covers with your BJII. I have an AT&T BJII here and this works like a charm.

    If you can, I would suggest hard reseting the BJII and then trying this again. It’s almost like something is wrong with the default certificates on the device.

  52. Mike Temporale on January 3rd, 2010 10:50 pm
    Mike Temporale

    @Jon – Excellent! :)

  53. Imagio on January 9th, 2010 11:13 am
    Imagio

    Has anybody tried this on a verizon Imagio?

  54. Robert on January 9th, 2010 3:42 pm
    Robert

    I tried it on My Samsung Jack it will not accept it.

  55. Mike Temporale on January 10th, 2010 11:28 am
    Mike Temporale

    @Imagio – This is for non-touch devices (also known as Windows Mobile Standard). I have setup a version for touch screen devices (Windows Mobile Professional) running 6.5, but I don’t have a device to test it on. Please check out this post and see how things work for you.

    Remove Application Lock on Touch devices:
    http://www.mobilejaw.com/articles/2009/10/application-lock-makes-its-way-to-touch-screen-windows-mobile-6-5-devices/

  56. Mike Temporale on January 10th, 2010 11:31 am
    Mike Temporale

    @Robert – I’m sorry you’re having problems. I can assure you that this does work on the Jack, as I have personally used it on numerous Samsung Jack’s, BlackJacks, and BlackJack II’s.

    If you can provide some information about the problem you are having, I can help you get things working.

  57. Rodney on January 17th, 2010 12:42 pm
    Rodney

    I copied the cab file over to my WM 6.5 phone, tapped it in file explorer, but the cab file won’t execute. This is the same problem I’m having while trying to install other cab files, I thought it was because of this application lock?

  58. Mike Temporale on January 17th, 2010 1:05 pm
    Mike Temporale

    @Rodney – What device do you have? What programs are you trying to run that fail? What error do you get when you run the CAB file?

  59. Rodney on January 17th, 2010 1:32 pm
    Rodney

    I have a T-Mobile HTC Touch Pro 2. It doesn’t seem that any CAB files execute, including the one I downloaded from this page. I don’t get an error, just nothing happens when I tap the CAB file. Appreciate the help that you are giving.

  60. Mike Temporale on January 17th, 2010 1:50 pm
    Mike Temporale

    @Rodney – The Touch Pro 2 is a touch device. The application unlock CAB i have here is for non-touch devices.

    As far as I have seen, application lock is not enabled on the TP2. If you are having problems installing CABs, make sure that they are for TOUCH devices (sometimes called Pocket PC or Professional). If the CAB says Standard or Smartphone (these are terms used with non-touch devices) then chances are it won’t work on your device.

  61. Rodney on January 17th, 2010 4:15 pm
    Rodney

    Thanks again for your response, Mike. I pulled down the CAB file from your 10/24/2009 Update that was for touch screens, so I thought it applied to my phone. I was hoping that the application lock was the reason for my problem The CAB files that won’t install are for Touch screen phones, as I was using it on my HTC Touch Pro under WM 6.1. Strangely enough, Pocket Quicken would install on my new WM 6.5 phone, but not anything else. Things that wouldn’t install was Intelligolf, Tom Tom Navigator 6, and a Windows Mobile Stopwatch made by Time Central. None of those CAB files, like your utility, would even begin installing. When I tap the CAB file, nothing happens.

  62. Mike Temporale on January 17th, 2010 8:23 pm
    Mike Temporale

    @Rodney – Ah, ok. Now I’m following. That CAB file should work on your device. However, I still don’t expect application lock to be enabled on that device. It may be – based on the carrier and whatnot. But the ones I have seen don’t have it enabled. The Imagio is another story…

    From the sounds of it, there is something else going on with your device. If you try and run a CAB you should see something. It should at least come back with an error that the CAB is not supported on your device, or that it failed to install. If you’re not seeing any message, then there is a bigger problem.

    When you run a CAB file, there is a program called WCELOAD.exe that is used to unpack the CAB and install it’s contents. There can only be one copy of WCELOAD running at a time. I would start be rebooting your device. If WCELOAD is hung in memory or some other issue has come up with it, this should fix it.

    If rebooting doesn’t help, your next option would be a hard reset. :( That would return it to factory default settings and you will be good to go.

  63. Rodney on January 18th, 2010 2:00 am
    Rodney

    Mike – You’re a genius! A soft reset did the trick. So simple, I don’t know why I didn’t think of it. I’m new to this website. I know you don’t work for free. Are there products, etc. I should be looking at to make it worth your while? Thanks a bunch! Rodney

  64. Dawn on January 19th, 2010 11:38 am
    Dawn

    Hi. I followed you here from the XDA App Unlock thread for the Samsung Propel Pro.

    I downloaded the Clear Security .cab file provided in this article to my desktop computer. I then turned on my Propel Pro, and connected it to my computer, which automatically triggered ActiveSync. I then transferred the .cab file onto the phone.

    When I unplug my phone from the computer and look for the file in order to install it, it is not there! I have tried this several times with no luck. When I look at the contents of my folders with ActiveSync on my computer, I can see the file, but for some reason, it is not visible to my phone in Windows Mobile Standard 6.1.

    I have tried downloading the .cab file directly from this page using my phone’s browser, but instead of downloading the file, it shows a garbled text file instead. I think this is the result of the app lock itself which blocks .cab downloads.

    How can I run this .cab on my phone?

    Thanks for any help you can give me.

  65. Mike Temporale on January 19th, 2010 12:12 pm
    Mike Temporale

    @Dawn – Samsung has 2 file explorer apps, one called “My Stuff” and the other called “File Explorer” The first one is specific to Samsung devices and will only show certian file types – like documents, media files, etc.

    File Explorer can be found in the Applications folder and is the file browser that ships with Windows Mobile. It sounds to me like you might be browsing using My Stuff and not File Explorer.

    Also, when you copied it to the device, where abouts did you place the file?

  66. Dawn on January 20th, 2010 1:02 am
    Dawn

    Mike, you are absolutely right — I was mistakenly using My Stuff instead of File Explorer.

    I downloaded the .cab to My Documents and opened it up in File Explorer as you described, and this time I was able to install it, uninstall it, and thereby app unlock my phone.

    Thank you again for all your help.

  67. Sam on January 21st, 2010 5:14 am
    Sam

    I’ve got a HTC HD2. I’ve installed the touch screen cab file and the unsigned file is still not installing.
    Any ideas on how i could resolve this?

  68. Mike Temporale on January 21st, 2010 6:21 am
    Mike Temporale

    @Sam – what’s the CAB file you’re trying to install? What’s the error you’re getting on install?

  69. Sam on January 21st, 2010 11:58 pm
    Sam

    Mike im installing this CAB file – MobileJaw-ClearSecurity-MobiControl-TouchScreen.

    It installs fine, then when i try to install a setup on my phone i get the error “the file cannot be opened. Either it is not signed with a trusted certificate, or one of its components cannot be found. If the problem persists, try reinstalling or restoring this file.”

  70. Mike Temporale on January 24th, 2010 10:48 pm
    Mike Temporale

    @Sam – Ok, so there are no errors when you install the ClearSecurity CAB. That’s a good sign. What is the CAB file you are installing after? I’ll try it here on my HD2 and see if I get the same error.

  71. Robert on January 27th, 2010 8:50 pm
    Robert

    I tried to hard, clear reset and installed again, it worked great on my Jack, thanks!!!

  72. mike on January 28th, 2010 6:02 pm
    mike

    Hi,

    My Samsung with Windows mobile 5.1.525 with \messaging and security feature pack.\ no way. It doesn’t even install the program MobileJaw-ClearSecurity-MobiControl because its not digitally signed with a trusted certifiate !!

  73. Rick on February 2nd, 2010 12:36 am
    Rick

    Hi Mike – Does the MobileJaw Unlock CAB enable tethering on the Samsung Jack with Windows 6.5? I’ve seen this discussed in other forums, but would like to know before I unlock my device. In fact, this would be the main reason for unlocking and also to remove ATT pre-installed software and games. Thanks!

  74. mike on February 2nd, 2010 5:23 pm
    mike

    Rick, I can’t tell you because MobileJaw Unlock CAB doesn’t work with Windows mobile with MSFP (mine is Telefonica’s corporate Samsung terminal)

  75. Mike Temporale on February 2nd, 2010 5:36 pm
    Mike Temporale

    @mike – It should work with Windows Mobile 5.1. I can test this next week when I’m back home and have access to my Original BlackJack. Use the contact page to drop me an email (so I don’t forget) and I’ll see what I can find. It might be that I built the agent focused on WinMo 6. I should be able to rebuild it for 5 without any issues.

  76. Mike Temporale on February 2nd, 2010 5:40 pm
    Mike Temporale

    @Rick – application unlocking your device will allow you to make the needed changes to enable tethering.

  77. kris on February 6th, 2010 5:35 pm
    kris

    Hi, I have an HTC TP2 (vzw) WM6.5. I’ve run the clearsec-touch.cab and saw the expected ‘device is now app unlocked’ but I still cannot install a 3rd party .cab. I get “Installation was unsuccessful. The program or setting cannot be installed because it does not have sufficient permissions.” I have played with HKLM/sec/pol/pol/1001,1005,1006,1017,101a & 101b settings but cannot seem to drop the security enough to install this app. Any ideas?

Leave a Reply




Additional comments powered by BackType