BES Express Send-As permission issues on Windows 2008 R2 \ Exchange 2010
I've finished a fresh BES Express installation on my organization.
All pre-requisites were met and the installation run smoothly. When testing a user account I've found that Send-As permissions failed. c:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Server\Utility> IEMSTest.exe BlackBerry Enterprise Server Utility - IEMSTest.exe (IExchangeManageStore), Vers ion 1.0 Copyright (c) Research In Motion, Ltd. 1999. All rights reserved. Opening Default Message Store Mailbox - BeseAdmin Test User: Opening message store using /o=Domain/ou=OU/cn=Recipients/cn=Test User /o=Domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn= Configuration/cn=Servers/cn=ExchangeSVR/cn=Microsoft Private MDB Test User: Mailbox opened successfully Test User: Root Folder opened successfully Test User: Folder created successfully Test User: Test folder deleted successfully Test User: MAPI test completed successfully Test User: CDO Server Name: ExcahngeSVR Test User: CDO Mailbox DN: /o=my Domain/ou=IMA/cn=Recipients/cn=test User Test User: CDO logon successful Test User: Get default calendar folder successful Test User: Get calendar folder name successful: 'Calendar' Test User: CDO test completed successfully Test User: No Send As permission for the {MOLDES\Besadmin} account oper ator. I've managed to set Send-As permissions in AD, but failed to do it running Exchangeshell cmdlet: Add-ADPeermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-As -User "BesAdmin" -Identity "CN=Users,DC=mydomain,DC=pt" 1. Exchange 2010 Update role up 3. 2. BES Express 5.0.1.13 3. Single BES Express Server (Hyper-V) |
Moved to a more appropriate section.
|
Run it on a user and see what the results are.
FYI Assign Send As permissions to all users via Active Directory 1. Open Active Directory. 2. Select the "View" menu and ensure "Advanced Features" is checked. 3. Right mouse click on your domain name and select Properties 4. Select the Security tab 5. Press the Advanced button at the bottom on the security tab 6. Select "Add" and enter your Blackberry Service Account name (e.g. BESadmin) and select OK 7. When the permissions screen appears change "Apply onto:" to "User Objects" (or xxx8220;Descendant User Objectsxxx8221; on Server 2008) 8. In the permissions box scroll down and check the Allow box beside "Send As" and press OK 9. Press Apply and OK to exit |
That was already done.
The Send As Permissions are replicated trough all AD DCs. |
Hey thanks...
But guess what - Server updates and Update4 exchange 2010 breaks BES express (5.0.1.13). tearing my hair out Everything was working fine unitl midnight on 2 Aug - Applied new updates to exchange server - built new BES sserver (no updates) - all permissions are in place error message now are: (W) GetFreeBusyFodler - OpenEntry(2) (0x8000405) (W) MailboxManager::SUbsystemINitiaalize - GetFreeBusy (0x80004005) (E) Failed to retrive the Server DN, shutting down (E) BlackBerry Messaging Agent ---- Agent 1 failed to start error code 5305 frustrated.. anyone have any idea (runnign update 4 exchange 2010) |
Dont know, why the Messaging agent terminates, but, have a closer look in the Logs folder which is in the Applications folder of the BES server, maybe you find more then just the "failed to retrieve the Server DN" - which means then BES is unable to locate the Exchange server.
Is the Windows Firewall on - turn it of to check if this makes a difference. Is your DNS and WINS server working properly ? Recreate the MAPI profile for the BES user: KB10285 - View Document regarding the Active directory permissions, try to use a program from rim: http://www.blackberry.com/DST2007/pa...Permission.exe Also, add the besadmin user manually in the exchange console the send as permissions to the user(s) |
is BES installed on a dedicated server?
|
All times are GMT -5. The time now is 06:19 PM. |
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.