BlackBerry Forums Support Community

BlackBerry Forums Support Community (http://www.blackberryforums.com/index.php)
-   BES Admin Corner (http://www.blackberryforums.com/forumdisplay.php?f=21)
-   -   BES Express Send-As permission issues on Windows 2008 R2 \ Exchange 2010 (http://www.blackberryforums.com/showthread.php?t=232325)

ITGS 08-03-2010 10:38 AM

BES Express Send-As permission issues on Windows 2008 R2 \ Exchange 2010
 
I've finished a fresh BES Express installation on my organization.

All pre-requisites were met and the installation run smoothly.

When testing a user account I've found that Send-As permissions failed.

c:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Server\Utility> IEMSTest.exe

BlackBerry Enterprise Server Utility - IEMSTest.exe (IExchangeManageStore), Vers
ion 1.0
Copyright (c) Research In Motion, Ltd. 1999. All rights reserved.
Opening Default Message Store Mailbox - BeseAdmin

Test User: Opening message store using
/o=Domain/ou=OU/cn=Recipients/cn=Test User
/o=Domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=
Configuration/cn=Servers/cn=ExchangeSVR/cn=Microsoft Private MDB
Test User: Mailbox opened successfully
Test User: Root Folder opened successfully
Test User: Folder created successfully
Test User: Test folder deleted successfully
Test User: MAPI test completed successfully
Test User: CDO Server Name: ExcahngeSVR
Test User: CDO Mailbox DN: /o=my Domain/ou=IMA/cn=Recipients/cn=test User
Test User: CDO logon successful
Test User: Get default calendar folder successful
Test User: Get calendar folder name successful: 'Calendar'
Test User: CDO test completed successfully
Test User: No Send As permission for the {MOLDES\Besadmin} account oper
ator.

I've managed to set Send-As permissions in AD, but failed to do it running Exchangeshell cmdlet:

Add-ADPeermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-As -User "BesAdmin" -Identity "CN=Users,DC=mydomain,DC=pt"

1. Exchange 2010 Update role up 3.

2. BES Express 5.0.1.13

3. Single BES Express Server (Hyper-V)

Dubdub 08-03-2010 10:51 AM

Moved to a more appropriate section.

knottyrope 08-03-2010 12:25 PM

Run it on a user and see what the results are.

FYI
Assign Send As permissions to all users via Active Directory

1. Open Active Directory.
2. Select the "View" menu and ensure "Advanced Features" is checked.
3. Right mouse click on your domain name and select Properties
4. Select the Security tab
5. Press the Advanced button at the bottom on the security tab
6. Select "Add" and enter your Blackberry Service Account name (e.g. BESadmin) and select OK
7. When the permissions screen appears change "Apply onto:" to "User Objects" (or xxx8220;Descendant User Objectsxxx8221; on Server 2008)
8. In the permissions box scroll down and check the Allow box beside "Send As" and press OK
9. Press Apply and OK to exit

ITGS 08-04-2010 03:59 AM

That was already done.
The Send As Permissions are replicated trough all AD DCs.

matt_the_katt 08-07-2010 07:57 PM

Hey thanks...

But guess what - Server updates and Update4 exchange 2010 breaks BES express (5.0.1.13). tearing my hair out

Everything was working fine unitl midnight on 2 Aug
- Applied new updates to exchange server
- built new BES sserver (no updates)
- all permissions are in place

error message now are:
(W) GetFreeBusyFodler - OpenEntry(2) (0x8000405)
(W) MailboxManager::SUbsystemINitiaalize - GetFreeBusy (0x80004005)
(E) Failed to retrive the Server DN, shutting down
(E) BlackBerry Messaging Agent ---- Agent 1 failed to start error code 5305

frustrated..

anyone have any idea (runnign update 4 exchange 2010)

nobody7290 08-08-2010 04:34 AM

Dont know, why the Messaging agent terminates, but, have a closer look in the Logs folder which is in the Applications folder of the BES server, maybe you find more then just the "failed to retrieve the Server DN" - which means then BES is unable to locate the Exchange server.
Is the Windows Firewall on - turn it of to check if this makes a difference.
Is your DNS and WINS server working properly ?
Recreate the MAPI profile for the BES user:
KB10285 - View Document


regarding the Active directory permissions, try to use a program from rim:
http://www.blackberry.com/DST2007/pa...Permission.exe
Also, add the besadmin user manually in the exchange console the send as permissions to the user(s)

knottyrope 08-09-2010 08:36 AM

is BES installed on a dedicated server?


All times are GMT -5. The time now is 06:19 PM.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.