Smartphone security unlocking

Most of Smartphones have, by default, somehow restricted security. In short, it means unsigned applications cannot run or, if they are permited to run, they cannot run do priviledged operations (e.g. call restricted APIs, access protected registry keys).

By security locked Smartphone is mostly meant the device has set two tier security model, unsigned cabs cannot add protected settings and unsigned application must be explicitly allowed to run. To unlock that, security configuration needs to be changed. Security in Windows Mobile is controled by policies. Changing security policies can done by provisioning device or by manual change in the registry.

Major security policies:

Name (name in dec.)	Common value	Suggested value	Short description what new value causes
0000101b (4123)	0	1	Switches security level to one tier
00001006 (4102)	0	1	Allows unsigned applications to run
0000101a (4122)	0	1	Disables prompt user of running unsigned application
00001005 (4101)	8	24	Unsigned cabs get full permissions
00001017 (4119)	8	24	Permission on protected resources is given to commonn role
00001001 (4097)	2	1	Gives desktop application full permission over RAPI

More about security policies on Windows Mobile devices are available at MSDN

As the security policies registry key is protected the change in registry requires trusted registry editor. The one is available here (you need to be a registered user in order to download files). Unpack the zip archive and copy regeditSTG.exe to the device (e.g. using Activesync).
Then launch regeditSTG.exe and navigate to the HKEY_LOCAL_MACHINE\Security\Policies\Policies registry key.
Change the view using left softkey to Values.
Modify desired value(s). Close the registry editor by several presses of the Back key.
Soft reset is not neccessary but sometimes device needs to be turned off and on again in order to change be successfully saved. This can be checked by review of written value by re-launching regedit.