BlackBerry® Enterprise Server Version 5.0

[joemailey]

I'm trying to follow the steps in the Preinstallion tasks for Configure a Microsoft Exchange 2010 Messaging environment.

When I run step 4 of Configure Microsoft Exchange 2010 permissions for the Windows account
4. Type Add-ADPermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-As -
User "BESAdmin" -Identity "CN=Users,DC=<domain_1>,DC=<domain_2>,DC=<domain_3>" where <domain_1>,
<domain_2>, and <domain_3> form the name of the domain.
For example, if the domain name is www.example.com, type www for <domain_1>, example for <domain_2>, and com for
<domain_3>.

I get the below error


[PS] C:\Windows\system32>Add-ADPermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-A
 -User "BESAdmin" -Identity "CN=Users,DC=antrim,DC=gov,DC=uk"


Active Directory operation failed on xxxxxx. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03151E04, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
    + CategoryInfo          : WriteError: (0:Int32) [Add-ADPermission], ADOperationException
    + FullyQualifiedErrorId : BA6E6F27,Microsoft.Exchange.Management.RecipientTasks.AddADPermission

[BBAma]

Try right clicking on the Exchange Management Shell (not powershell) and select Runas Administrator.

[cini]

I have exactly the same problem ..

i've already spend housr trying solve the problem, but no solutions ..

any idea is very appreciate

[anotherITguy]

Has anyone come up with a solution for this issue?  I'm seeing the same thing.

[DavidMAllen]

I am encountering this roadblock as well. Any solutions?

[knottyrope]

Try

Assign Send As permissions to all users via Active Directory

1. Open Active Directory.
2. Select the "View" menu and ensure "Advanced Features" is checked.
3. Right mouse click on your domain name and select Properties
4. Select the Security tab
5. Press the Advanced button at the bottom on the security tab
6. Select "Add" and enter your Blackberry Service Account name (e.g. BESadmin) and select OK
7. When the permissions screen appears change "Apply onto:" to "User Objects" (or “Descendant User Objects” on Server 2008)
8. In the permissions box scroll down and check the Allow box beside "Send As" and press OK
9. Press Apply and OK to exit

[DavidMAllen]

Mine is already setup just as knottyrope has described, but still that error persists. I have successfully activated a single user (with a repeating error in the BES MAGT log), but cannot activate any further devices.