01-27-2009 02:32 PM
We had a consultant set up our BB server a year and a half ago. The server had to be rebuilt several months ago and instead of using the BESadmion account, we just installed everything with the domain admin account. It's been working relatively fine, but we seem to have issues with a few users not getting meeting requests on their BBs.
I checked the MAPI profile and the startup services and all are bound to the domain admin account. If I change it to BESadmin, things start going awry. Does this need to be re-done? Or are my problems related to something else? Certain users are plagued by the Event ID 20216 sync errors and these are the ones having problems with their calenders.
BTW, we're running Exchange 2007 SP1, BES 126.96.36.199.
01-27-2009 02:35 PM
01-27-2009 02:51 PM
Right, but here's a problem I'm having. I can't seem to apply the correct permissions to BESadmin on the mail server. If I try either of these commands, I get an error (I so hate you people at MS for forcing us to use this command line interface!!!):
get-mailboxserver <mail_server_name> | add-exchangeadministrator BESAdmin –role ViewOnlyAdmin
get-mailboxserver <mail_server_name> | add-adpermission –user BESAdmin –accessrights ExtendedRight –extendedrights Send-As, Receive-As, ms-Exch-Store-Admin
01-27-2009 03:01 PM
Have you tried without server name? I assume you are logged on to Exchange server as Administrator.:
For Microsoft Exchange 2007
To set an Exchange View Only Administrator role:
add-exchangeadministrator <BESAdmin> -role ViewOnlyAdmin
Where < BESAdmin> is the name of the BlackBerry Enterprise Server service account.
To verify an Exchange View Only Administrator role:
get-exchangeadministrator | Format-List
To set Send As, Receive As, and Administer Information Store permissions, complete the following steps:
Where <Exchange2007> is the name of the Microsoft Exchange 2007 Server and <BESAdmin> is the name of the BlackBerry Enterprise Server service account.
get-mailboxserver <Exchange2007> | add-adpermission -user <BESAdmin> -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin
To verify the Send As, Receive As, and Administer Information Store permissions, complete the following steps:
get-mailboxserver Exchange2007 | get-ADpermission -user BESAdmin | Format-List
To grant the Send As permission on a single account for all BlackBerry smartphone users in a Microsoft® Active Directory® domain or container, complete the following steps:
Note: If Advanced Features is not selected, the Security tab will not be visible for domain and container objects.
01-27-2009 03:17 PM
OK, I went through all of that and it seems to already have the appropriate permissions.
But if I change the MAPI profile to use BESadmin, I get an error on launching the BES Manager.
01-27-2009 03:21 PM
Might be a good idea to read through the install guide if you haven't
01-29-2009 12:18 PM - edited 01-29-2009 12:20 PM
Well if you used some other acct. (hopefully not domain admin account) just stick with it and do not change profile. You can use this to migrate to a new service account.