BlackBerry® Professional Software and BlackBerry® Enterprise Server Express

[edigest]

Hi,

I'm trying to install a BES Express, but before running setup I'm using the IEMSTest utility to check that the BESAdmin account is correctly configured.

Scenario:

SRVMAIL: Exchange 2010 (8.0.535.0) on a Windows 2008 R2, domain: MYDOMAIN

SRVBES: Windows 2003 R2 SP2

Account: MYDOMAIN\BESAdmin (standard domain user, local administrator of SRVBES)

I installed Outlook 2007 on SRVBES and with logged as BESAdmin I succesfully tested that the SEND AS is working correctly (Besadmin can send emails with other users in the from address).

But I tested it with the IEMSTest utility and I get the following result:

BlackBerry Enterprise Server Utility - IEMSTest.exe (IExchangeManageStore), Version 1.0
Copyright (c) Research In Motion, Ltd. 1999. All rights reserved.
Opening Default Message Store Cassetta postale - BESAdmin
Test User: Opening message store using
        /o=MYDOMAIN/ou=first administrative group/cn=Recipients/cn=testuser
        /o=MYDOMAIN/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configur
ation/cn=Servers/cn=SRVBES/cn=Microsoft Private MDB
Test User: Mailbox opened successfully
Test User: Root Folder opened successfully
Test User: Folder created successfully
Test User: Test folder deleted successfully
Test User: MAPI test completed successfully
Test User: CDO Server Name: SRVBES
Test User: CDO Mailbox DN: /o=MYDOMAIN/ou=first administrative group/cn=Recipients/cn=testuser
Test User: CreateInstance failed (0x800401f3)
Test User: CDO test failed
Test User: No Send As permission for the {MYDOMAIN\besadmin} account operator.

As you can see the last 3 tests fail (and even the "send as" test, though I can succesfully send email from Besadmin using "Test User" in the send as field).

How can I fix these issues?

Can I install the BES Express and ignore them?

Thank you in advance,

  Edigest

[knottyrope]

run the test on a user and not on besadmin as it already has the rights to send emails from it self.

[edigest]

> run the test on a user and not on besadmin as it already has the rights to send emails from it self.

What do you mean with "run the test on a user and not on besadmin"?

What I have done:

1) logged in as Besadmin

2) launched the IEMSTest :

3) picked the Outlook profile (of user Besadmin) on the first IEMTest dialog box

4) selected a different user on the second IEMSTest dialog box (tried some, but all report the last three errors shown in my question; in my question the selected user is testuser)

5) viewed test results

Do you mean log on with a different user (1) and run IEMSTest.exe again selecting another user (4) ?

[knottyrope]

OK the test looked like it was BESADmin

800401f3 error is not common and not much showing other than permissions issue.

Chat version CDO are you using? Right click it and choose properties and gve the version of it.

[edigest]

Update

Thanks knottyrope: I thought that the CDO library was installed with Outlook 2007(ExchangeMapiCdo.exe setup gave me the following warning: "this package cannot be installed with Microsoft Outlook").

I downloaded and installed the ExchangeCDO.exe package, and now there is only one error reported by IEMSTest:

....

Test User: CDO logon successful
Test User: Get default calendar folder successful
Test User: Get calendar folder name successful: 'Calendario'
Test User: CDO test completed successfully
Test User: No Send As permission for the {MYDOMAIN\besadmin} account operator.

Any hints or suggestions to fix it ?

(remember that if I open Outlook with the besadmin account, I can choose "Test User" in the "Send as" field and succesfully send emails)

[knottyrope]

uninstall Outlook as it is not supported and then

CDO 1.2.1 from here
http://www.microsoft.com/downloads/details.aspx?FamilyID=94274318-27c4-4d8d-9bc5-3e6484286b1f&Displa...

KB15779 How to install or upgrade CDO 1.2.1

[edigest]

Thank you for the reply, but things are getting worse ... :

1) uninstalled Outlook

2) installed Messaging API and Collaboration Data Object 1.2.1

3) unregistered + registered CDO.dll

Now the IEMSTest command requires an email address as a parameter.

> IEMStest testuser@mydomain.com

when run by MYDOMAIN\besadmin account the above command gives the following error:

default: Initializing EWS Proxy... successful
testuser: Configuring User... successful
testuser: EWS calendar find request... failed
testuser: Begin inner failure
testuser:     SslPolicyError: RemoteCertificateChainErrorsWhile validating certificate...
[Subject]  CN=SRVMAIL
[Issuer]  CN=SRVMAIL
[Serial Number]  49022AA9A03C8E87458C1C943D3BD4C1
[Not Before]  20/07/2011 10.31.57
[Not After]  20/07/2016 10.31.57
[Thumbprint]  EC88A6771193EE5B783462B2B9B6D2FE5613DE61

testuser:     Accepting self-signed certificate from CN=SRVMAIL
testuser:     Exception caught:

System.Web.Services.Protocols.SoapException: The account does not have permission to impersonate the requested user.
   at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
   at EWS.EWS.ExchangeServiceBinding.FindItem(FindItemType FindItem1)
   at EwsTest.Program.Main(String[] args)

testuser: End inner failure

But in the Exchange Management Console --> Mailbox --> testuser --> right click --> Manage Send As Permissions

I correctly find MYDOMAIN\testuser account  ?!?!?

>>> Any hints ?

( I'm not playing a puzzle game, am I ? )

[knottyrope]

did you recreate the MAPI profile?

[edigest]

Ok, after recreating the MAPI profile ... (without Outlook it is not so easy)
... I still get the following errors from IEMSTest:

BlackBerry Enterprise Server Utility - IEMSTest.exe (IExchangeManageStore), Version 1.0
Copyright (c) Research In Motion, Ltd. 1999. All rights reserved.
Opening Default Message Store Mailbox - besadmin

Test User - testuser@mydomain.com: Opening message store using
        /o=MYDOMAIN/ou=first administrative group/cn=Recipients/cn=testuser
        /o=MYDOMAIN/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=SRVMAIL/cn=Microsoft Private MDB
Test User - testuser@mydomain.com: Mailbox opened successfully
Test User - testuser@mydomain.com: Root Folder opened successfully
Test User - testuser@mydomain.com: Folder created successfully
Test User - testuser@mydomain.com: Test folder deleted successfully
Test User - testuser@mydomain.com: MAPI test completed successfully
Test User - testuser@mydomain.com: CDO Server Name: SRVMAIL
Test User - testuser@mydomain.com: CDO Mailbox DN: /o=MYDOMAIN/ou=first administrative group/cn=Recipients/cn=testuser
Test User - testuser@mydomain.com: CDO logon successful
Test User - testuser@mydomain.com: Get default calendar folder successful
Test User - testuser@mydomain.com: Get calendar folder name successful: 'Calendario'
Test User - testuser@mydomain.com: CDO test completed successfully
Test User - testuser@mydomain.com: No Send As permission for the {MYDOMAIN\besadmin} account operator.
Test User - testuser@mydomain.com: Initializing EWS Proxy... successful
Test User - testuser@mydomain.com: Configuring User... successful
Test User - testuser@mydomain.com: EWS calendar find request... failed

Near to the solution, but still needing a fix .... can you help?

[knottyrope]

 Here is a good amount of info on send as

http://na.blackberry.com/eng/support/software/sendas.jsp

http://na.blackberry.com/eng/support/software/sendasfaq.jsp

Video on send as
https://www.blackberry.com/blackberrytraining/web/SendAs/Source/video/sendAs.html