Remote Server Support | Remote Desktop Support

Remote Server Support | Remote Desktop Support

Digging on the web, I found only more and more articles either repeating the steps from the Microsoft article or stating similar problems, with no solutions, to mine.

Firstly, let me declare the obvious: port 123 (SNTP) was forwarded to my domain controllers IP, both TCP and UDP, on my ADSL router. (NAT)

I tried my silver-bullet: unregister w32time and start again. I created the following batch script:

net stop w32time

w32tm /unregister
w32tm /register

w32tm /config /manualpeerlist:192.43.244.18 /syncfromflags:MANUAL /reliable:YES

net start w32time

w32tm /config /update

w32tm /resync /rediscover

The first line stops the NT service. You then unregister it and re-register it, recreating all the registry keys with default values, giving you a standard starting point. After that, I configure it, specifying an NTP server’s ip address as a peer (this IP is time.nist.gov) and that it should synch from the manual peer list. I also mark this server as a reliable time server. I then start the service again, tell it to update its configuration, just in case, and then resync.

Extra Steps :-

You have to be very sure you followed the instructions for using an external time source correctly. I’ve used these instructions on many a 2K3 server without issue, so to recap:

1. Change Windows to use the NTP protocol for time synchronization:
Key: HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
Value: Type
Data: NTP

2. Configure the AnnounceFlags value:
Key: HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Config\AnnounceFlags
Value: AnnounceFlags
Data: 5

3. Enable the NTP server value:
Key: HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer
Value: Enabled
Data: 1

4. Specify the NTP server to use:
Key: HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\NtpServer
Value: NtpServer
Data: time.nist.gov,0×1

5. Select the NTP polling interval:
Key: HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient\SpecialPollInterval
Value: SpecialPollInterval
Data: 900

6. Configure the time correction settings:
Key: HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Config\MaxPosPhaseCorrection
Value: MaxPosPhaseCorrection
Radix: Decimal
Data: 3600

Key: HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Config\MaxNegPhaseCorrection
Value: MaxNegPhaseCorrection
Radix: Decimal
Data: 3600

After this, stopping and restarting the NTP service should get you working. If it does not, check the value configured in step 4 – this being misconfigured is the only time I’ve seen errors in the Windows Time service like the ones you’ve posted, so it’s possible this is incorrect in your registry. I would also suggest using a time server OTHER than time.nist.gov, as it is a VERY busy time server and you are likely to miss one or two time syncs to it before you get a good one. I would suggest using another time server, preferrably a stratum-2 NTP server closer to you. You can find these listed here:
http://www.eecis.udel.edu/~mills/ntp/clock2a.html

Remote Server Support |  Remote Desktop Support

To resolve this, close outlook and look for mapisvc.inf and delete this file, and restart your outlook.

in the ldif.err shows

Entry DN: CN=ms-Exch-Resource-Schema,CN=Schema,CN=Configuration,DC=buckleyschoolnyc,DC=org
Add error on line 180: No Such Attribute
The server side error is “The parameter is incorrect.”
An error has occurred in the program

You have to use adsiedit and modify some attributes in AD
go to the ms-Exch-Resource-Schema under schema configuration
then where it says display name if you see anything that says DUP with some numbers, remove the DUP and numbers and should just show the schema atrribute for example ms-Exch-Resource-Schema should show as ms-Exch-Resource-Schema not as DUP12312311ms-Exch-Resource-Schema

 Second go to
ms-exch-resource-property-schema
change ldapdisplayname that had a dup prefix and guid suffix to: msExchResourcePropertySchema

Explanation

User Action

To resolve this issue, use the ADSI Edit, or a similar tool, to determine whether the Public Folders container exists and the msExchOwningPFTreeBL attribute is properly configured to point to the relevant Public Store.
To determine the cause of the error

1. Using ADSI Edit or a similar tool, locate each administrative group object in Active Directory.

The Administrative Group object can be found at:

CN=Configuration,CN=Services,CN=Microsoft Exchange,CN=Organization,CN=Administrative Groups,CN=Administrative group

2. Expand each Administrative Group and check for the existence of a CN=Folder Hierarchies container. If the CN=Folder Hierarchies container exists, highlight the container and verify that a CN=Public Folders object exists in the right-hand pane. If no CN=Public Folders object exists under any Administrative Group, move on to Solution 1, Recreate Folder Hierarchies and Public Folders containers. If you do find a CN=Public Folders container, proceed to step 3.

3. Right-click the CN=Public Folders object, and then click Properties.

4. In the Attributes list, select the msExchOwningPFTreeBL attribute, and then click Edit.

5. Make sure that the affected Public Folder Store is shown in the Values list. If it is not listed, proceed to Step 2

Step 1: Recreate Folder Hierarchies and Public Folders containers

Open adsiedit.msc.

Select Configuration-Configuration-Services-Microsoft Exchange-Orgname-Administrative Groups-Exchange Administrative Group.

Create the “Folder Hierarchies” under the Exchange Administrative Group

1. Right click on Exchange Administrative Group

2. Select New Object

3. Select msExchPublicFolderTreeContainer for the class and click Next

4. Enter the following for the value: Folder Hierarchies, click Next

Create Public Folder Tree Object

1. Right click CN=Folder Hierarchies -> New Object

2. Selected msExchPFTree for the class

3. For the value we entered, “Public Folders” and clicked next

4. Clicked on the “More Attributes” button, selected msExchPFTreeType and set the

value to 1. Note: This is very important that this value is set to a value of 1 as

this tells Exchange that this is a MAPI Tree

Step 2: Repopulating the value of the msExchOwningPFTreeBL attribute for the Public Folders container object

Populate msExchOwningPFTreeBL attribute object of the PF Stores in the organization

(Since this attribute is not directly editable, you have to follow the below steps

. Get properties of the newly created “Public Folders” Tree object in ADSIEdit.

2. Copy the distinguishedname value to the clipboard and then click cancel.

3. Navigate to the Storage group that contains the Public Folder Store for this

server and get properties of the server. In my case it was : Configuration – CN=Services – CN=Microsoft Exchange – CN= Administrative Group -
CN=Servers – CN=E2007 – CN=InformationStore – CN=Second storage group. Right click on CN=Public folder Database

4. Locate the msExchOwningPFTree attribute and paste in the value that was copied

to the clipboard in step 2. Click OK.

5. Restart the Information Store Service

6. Now try to  mount the PF store and see if we can access it fine now.

• BlackBerry® Enterprise Server software version 2.1 through 4.1 for Microsoft® Exchange
• BlackBerry® Enterprise Server software version 2.1 through 4.1 for IBM® Lotus® Domino®
• Microsoft® SQL Server™ 2000 Service Pack 3
• Microsoft® SQL Server™ 2005
  

  Procedure

  The BlackBerry Enterprise Server services must be stopped during the process described in this article.

  Important: Restarting certain BlackBerry Enterprise Server services will delay email message delivery to BlackBerry smartphones. For more information, see KB04789.

  To move the BlackBerry Configuration Database to a new Microsoft SQL Server or instance, complete the following tasks:

  Note: In a Microsoft Exchange environment, complete the tasks using the BlackBerry Enterprise Server service account unless otherwise stated.

  1. Back up the BlackBerry Configuration Database.
  2. Prepare the new Microsoft SQL Server.
  3. Restore the BlackBerry Configuration Database.
  4. Configure the BlackBerry Enterprise Server.

  ---

  Task 1 – Back up the BlackBerry Configuration Database

  To back up the BlackBerry Configuration Database, complete the steps for the appropriate environment.

  Microsoft SQL Server

  1. Open Enterprise Manager (Microsoft SQL Server 2000) or Microsoft® SQL Server Management Studio (Microsoft SQL Server 2005).
  2. Right-click the BlackBerry Configuration Database (for example, BESMgmt).
  3. Select Backup Database.
  4. Click Add to specify the Directory Name and File Name.
  5. Click OK to accept the settings.
  6. Click OK again to start the backup process.
  7. Close Enterprise Manager when the process is complete.

  Microsoft SQL Server Desktop Engine (MSDE)

  1. From a command prompt, type osql -E and press ENTER.Note: If you are logging in to a named instance of the Microsoft SQL Server, use the following command syntax to log in:
     

     osql -E -S <Microsoft_Server_name>\<instance_name>

  2. Type the following commands in the specified order:1> backup database <BlackBerry_Configuration_Database_name> to disk = “C:\<BlackBerry_Configuration_Database_name>.bak”2> go1> quit
  3. Close the command prompt.

  ---

  Task 2 – Prepare the new Microsoft SQL Server

  To prepare the Microsoft SQL Server, complete the following four steps:

  Step 1

  Depending on the environment, assign the appropriate permissions.

  Note: Complete this task using an account with administrator access to the new Microsoft SQL Server. Microsoft SQL Server 2005 requires the following server role permissions: System Administrator, Database Creator.

  Microsoft SQL Server

  1. Open Enterprise Manager (Microsoft SQL Server 2000) or Microsoft SQL Server Management Studio (Microsoft SQL Server 2005).
  2. Go to Microsoft Server Group > <Microsoft_Server_name> > Security.
  3. Right-click Logins and select New Login.
  4. From the General tab, click the double quotation marks ( “” ) button.
  5. From the Global Address List, select the name of the BlackBerry Enterprise Server service account.
  6. Click Add, then click OK.
  7. On the Server Roles tab, select Server Administrators and Database Creators.Note: In BlackBerry Enterprise Server software version 4.1, the System Administrator role is needed for role-based administration.
  8. Close Enterprise Manager (Microsoft SQL Server 2000) or Microsoft SQL Server Management Studio (Microsoft SQL Server 2005).

  MSDE

  1. Log in to the new Microsoft SQL Server.
  2. Right-click My Computer, and then click Manage.
  3. Expand Local Users and Groups.
  4. Select Groups, and then open the Administrators group.
  5. Click Add.
  6. Type the name of the BlackBerry Enterprise Server service account, and then click Check Name.
  7. Click OK, and then close the Computer Management window.

  Step 2

  Depending on the environment, turn on the correct server protocols.

  MSDE or Microsoft SQL Server 2000

  1. Click Start > Run, type svrnetcn and click OK. The Microsoft Server Network Configuration Utility opens.
  2. Make sure that TCP/IP and Named Pipes are both listed as protocols that have been turned on.
  3. Close the Microsoft Server Network Configuration Utility.
  4. If a protocol is turned on in step 2, restart the Microsoft SQL services.

  Microsoft SQL Server 2005 Express or Microsoft SQL Server 2005

  1. Click Start > Microsoft SQL Server 2005 > Configuration Tools > Microsoft Server Configuration Manager > Microsoft Server 2005 Network Configuration.
  2. Select the Microsoft SQL Server instance that will be used for the BlackBerry Configuration Database.
  3. If necessary, turn on the TCP/IP and Named Pipes protocols.
  4. If a protocol is turned on in the previous step, restart the Microsoft SQL services.

  Step 3

  Make sure the Microsoft Server Agent service is running.

  Note: This service does not exist in Microsoft SQL Server 2005 Express.

  1. Open the Windows® Control Panel, and then open Administrative Tools > Services.
  2. Verify that the Microsoft Server Agent service is started and that the Startup type is set to Automatic.
  3. Close the Services window.

  Step 4

  Update the BlackBerry Configuration Database schema.

  Important: If the BlackBerry Enterprise Server software was installed to create a blank BlackBerry Configuration Database on a new Microsoft SQL Server instance, do not perform the following task because the schema has already been updated.

  1. Download the installation package for the version of the BlackBerry Enterprise Server being used.
  2. Extract the contents of the installation package.
  3. Copy the Database folder to the new Microsoft SQL Server.
  4. Go to the Database folder and open the BESMgmt.cfg file in a text editor, such as Notepad.
  5. Locate the DB_NAME=BESMgmt line and make sure that the name specified matches the BlackBerry Configuration Database name.
  6. If you are using a named instance of Microsoft SQL Server, change the SERVER=local line to SERVER=<Microsoft_Server_Name>\ <instance_name> and close the file. Save the changes.
  7. From a command prompt, go to the Database directory.
  8. Type createdb.exe BESMgmt.cfg and press ENTER.
  9. After the command has finished executing, close the command prompt.

  ---

  Task 3 – Restore the BlackBerry Configuration Database

  Depending on the environment, use one of the methods below to restore the BlackBerry Configuration Database.

  BlackBerry Configuration Database on a Microsoft SQL Server with the same directory structure

  1. Copy the BlackBerry Configuration Database backup to the C:\ path of the new Microsoft SQL Server.
  2. From a command prompt, type osql -E and press ENTER.Note: When logging in to a named instance of the Microsoft SQL Server, use the following command:
     

     osql -E -S <SQL_Server_name>\<instance_name>

  3. Type the following commands in the specified order:1> restore database <BlackBerry_Configuration_Database_name> from disk = “c:\<BlackBerry_Configuration_Database_name>.bak” with recovery, replace2> go1> quit
  4. Close the command prompt.

  BlackBerry Configuration Database on a Microsoft SQL Server with a different directory structure

  1. Copy the BlackBerry Configuration Database backup to the C:\ path of the new Microsoft SQL Server.
  2. From a command prompt, type osql -E and press ENTER.Note: When logging in to a named instance of the Microsoft SQL Server, use the following command:
     

     osql -E -S <SQL_Server_name>\<instance_name>

  3. Type the following commands in the specified order:1> restore database <BlackBerry_Configuration_Database_name> from disk = “C:\<BlackBerry_Configuration_Database_name>.bak” with move “<BlackBerry_Configuration_Database_name>_data” to “<new_path>\MSSQL\Data\<BlackBerry_Configuration_Database_name>.mdf”, move “<BlackBerry_Configuration_Database_name>_log” to “<new_path>\MSSQL\Data\<BlackBerry_Configuration_Database_name>.ldf”2> go1> quit

     Note: To determine the logical file names <BlackBerry_Configuration_Database_name>_data and <BlackBerry_Configuration_Database_name>_log for the BlackBerry Configuration Database, complete the following steps:

     1. On the Microsoft SQL Server hosting the BlackBerry Configuration Database, open a command prompt and type the following command:
        OSQL -E or OSQL -E -S <SQL_Server_name>\<instance_name>
     2. Type the following commands in the specified order, pressing ENTER after each command:1>exec sp_helpdb <BlackBerry_Configuration_Database_Name>2> go
     3. The items circled in the following image are the two logical file names for the BlackBerry Configuration Database:
     4. Close the command prompt.

  Detach and re-attach the BlackBerry Configuration Database

  Depending on the environment, complete one of the procedures below.

  Microsoft SQL Server

  1. Open the Control Panel, and then open Administrative Tools > Services.
  2. Stop each service that has a name that begins with BlackBerry.
  3. Log in to the existing Microsoft SQL Server.
  4. Open Enterprise Manager.
  5. Right-click the BlackBerry Configuration Database name.
  6. Select All Tasks, and then click Detach Database.
  7. Close Enterprise Manager.
  8. Go to the Microsoft SQL Server Data directory and copy the MDF and LDF files.Note: The default path is C:\Program Files\Microsoft SQL Server\MSSQL\Data\ and the default filenames are BESMgmt.mdf and BESMgmt.ldf.
  9. Move the file copies to the new Microsoft SQL Server.
  10. Log in to the new Microsoft SQL Server.
  11. Open Enterprise Manager.
  12. Right-click the BlackBerry Configuration Database name.
  13. Select All Tasks, then click Detach Database.
  14. Move the files that were copied in step 8 to the Microsoft SQL Server Data directory. When prompted to overwrite the files, click Yes.
  15. In Enterprise Manager, right-click the Database folder, then click All Tasks.
  16. Select Attach Database.
  17. Select the MDF file to attach, then click OK.
  18. Close Enterprise Manager.

  MSDE

  1. Open the Control Panel, and then open Administrative Tools > Services.
  2. Stop each service that has a name that begins with BlackBerry.
  3. Log in to the existing MSDE Server.
  4. From a command prompt, type osql -E and press ENTER.Note: When logging in to a named instance of the Microsoft SQL Server, use the following command:
     

     osql -E -S <SQL_Server_name>\<instance_name>

  5. Type the following commands in the specified order:1> exec sp_detach_db @dbname = “<BlackBerry_Configuration_Database_name>“2> go1> quit
  6. Go to the Microsoft SQL Server Data directory and copy the MDF and LDF files.Note: The default path is C:\Program Files\Microsoft SQL Server\MSSQL\Data\ and the default filenames are BESMgmt.mdf and BESMgmt.ldf.
  7. Move the files that were copied in step 6 to the new Microsoft SQL Server.
  8. Log in to the new MSDE Server.
  9. From a command prompt, type osql -E and press ENTER.Note: When logging in to a named instance of Microsoft SQL Server, use the following command:
     

     osql -E -S <SQL_Server_name>\<instance_name>

  10. Type the following commands in the specified order:1> exec sp_detach_db @dbname = “<BlackBerry_Configuration_Database_name>“2> go2> quit
  11. Move the files that were copied in step 6 into the Microsoft SQL Server Data directory. When prompted to overwrite the files, click Yes.
  12. From a command prompt, type osql -E and press ENTER.Note: If you are logging in to a named instance of Microsoft SQL Server, use the following command syntax to log in:
      

      osql -E -S <SQL_Server_name>\<instance_name>

  13. Type the following commands in the specified order:1> exec sp_attach_db @dbname = “<BlackBerry_Configuration_Database_name>“,2> @filename1 = “C:\Program Files\Microsoft SQL Server\MSSQL\Data\<BlackBerry_Configuration_Database_name>.mdf”,3> @filename2 = “C:\Program Files\Microsoft SQL Server\MSSQL\Data\<BlackBerry_Configuration_Database_name>.ldf”

      4> go

      1> quit

  14. Close the command prompt.

  ---

  Task 4 – Configure the BlackBerry Enterprise Server

  To configure the BlackBerry Enterprise Server to connect to the new BlackBerry Configuration Database, complete the following steps:

  1. On the BlackBerry Enterprise Server, click Start > Programs > BlackBerry Enterprise Server > BlackBerry Server Configuration.
  2. On the Database Connectivity tab, select Change Database.
  3. In the Change Database Wizard, specify the new Microsoft SQL Server name and the existing BlackBerry Configuration Database name.
  4. Continue with the wizard. Make sure that the Start Services check box is selected, and then click Finish.
  5. Open Administrative Tools > Services and make sure all the BlackBerry Enterprise Server services started successfully.Note: The BlackBerry Database Consistency Service may be disabled. This is normal behavior.
  6. Open BlackBerry Manager and make sure that the correct database is set up by completing the following:For BlackBerry Enterprise Server software version 4.0
     1. Right-click BlackBerry Manager, select Properties.
     2. Select the Properties tab and verify that the Microsoft SQL Server information and BlackBerry Configuration Database name are correct.

     For BlackBerry Enterprise Server software version 4.1

     1. Go to Tools > Options > Database and verify that the Microsoft SQL Server information and BlackBerry Configuration Database name are correct.
     2. Verify all the BlackBerry smartphone user accounts appear on BlackBerry Manager.
  7. If you have a remote BlackBerry Manager, make sure to check the settings from step 6.
  8. Test email message flow from the BlackBerry smartphone.

  For BlackBerry Enterprise Server software version 4.1, install the database notification system.

  1. Copy the RimEsp.dll file to the C:\Program Files\Microsoft SQL Server\MSSQL\Binn folder on the new Microsoft SQL Server.
  2. In Microsoft Query Analyzer, go to the Database\DBInstallScripts\SQLServer\4.1 folder on the installation media.
  3. Open the NotifyInstall.sql file and replace <_databasename> with the name of the BlackBerry Configuration Database.
  4. Run the script.
  5. Confirm that the Microsoft Query Analyzer displays the following message:
     

     Function dbo.xp_RIM_xxxx registered.

  ---

  Additional Info

  When moving from an MSDE server instance to a full Microsoft SQL Server instance on a separate computer, see KB04039 for information on how to increase the mail agent limitation on the BlackBerry Enterprise Server.

  If you receive an error that the BlackBerry Configuration Database is in use, complete the following steps:

  1. Remove all the BlackBerry smartphone user accounts from the BlackBerry Configuration Database by typing the following commands at a command prompt:
     

     OSQL -E1> use master2> alter database database_name set single_user with rollback immediate3> go1> use <database_name>2> go1> exit

  2. Detach the BlackBerry Configuration Database by typing the following commands at a command prompt:
     

     OSQL -E1> use master2> sp_detach_db @dbname = <database_name>3> go1> exit

  3. Attach the BlackBerry Configuration Database by typing the following commands at a command prompt:
     

     OSQL -E1> use master2> exec sp_attach_db @dbname = “<database_name>”,3> @filename1 = “C:\<Path_to_database_file>\<database_name>.mdf”,4> @filename2 = “C:\<Path_to_transaction_log_file>\<database_name>.ldf”5> go1> exit

• BlackBerry® Enterprise Server software version 4.0 or later for Microsoft® Exchange
• Microsoft® SQL Server™
• Microsoft® SQL Server Desktop Engine (MSDE)
  

  Procedure

  To change the BlackBerry Enterprise Server service account for BlackBerry Enterprise Server software versions 4.0 or later for Microsoft® Exchange, complete the following tasks:

  Summary of Tasks

  1. Create a new service account and mailbox.
  2. Set the local permissions.
  3. Assign the new service account to the Local Administrators group.
  4. Add the appropriate Microsoft Exchange Server permissions.
  5. Add the Send As permission in Microsoft® Active Directory® Users and Computers.
  6. Stop all BlackBerry Enterprise Server services.
  7. Configure BlackBerry Enterprise Server services to log in with the new service account.
  8. Export the Research In Motion® (RIM®) folder from the old service account.
  9. Import the Research In Motion folder to the new service account.
  10. If you have a Microsoft SQL Server, assign the Server roles.
  11. Edit the Messaging Application Programming Interface (MAPI) profile.
  12. Start all BlackBerry Enterprise Server services.

  ---

  Task 1

  Create a new BlackBerry Enterprise Server service account and mailbox. For detailed instructions, see the BlackBerry Enterprise Server for Microsoft Exchange: Installation Guide.
   

  For information on assigning permissions to the BlackBerry Enterprise Server administration account, see KB02276.

  ---

  Task 2

  Depending on where the BlackBerry Enterprise Server is installed, set the local permissions by completing one of the procedures below.

  On a member server

  If the BlackBerry Enterprise Server is installed on a member server, set the local permissions as follows:

  1. In the Microsoft® Windows® Control Panel, go to Administrative Tools > Local Security Policy.
  2. Expand Local Policies, and then select User Rights Assignment.
  3. Depending on the Windows environment, do one of the following:
     • In Microsoft Windows 2003, right-click Allow log on locally, click Properties, and click Add User or Group. Type the domain name of the new service account and then click OK.
     • In Microsoft Windows 2000, right-click Log on locally and click Properties. Select the Local Policy Setting check box next to the new service account name and then click OK.
  4. Also, specify the option Log on as a service.

  On a domain controller

  If the BlackBerry Enterprise Server is installed on a domain controller, set the local permissions as follows:

  Warning: There are performance issues associated with installing the BlackBerry Enterprise Server on a domain controller. This is not a recommended configuration.

  1. In the Microsoft Windows Control Panel, open Administrative Tools > Domain Controller Security Policy.
  2. Expand Local Policies and then select User Rights Assignment.
  3. Depending on the Windows environment, do one of the following:
     • In Microsoft Windows 2003, right-click Allow log on locally, click Properties, and click Add User or Group. Type the domain name of the new service account and then click OK.
     • In Microsoft Windows 2000, right-click Log on locally, and then click Properties. Select the Local Policy Setting check box next to the new service account name and then click OK.
  4. Also, specify the option Log on as a service.

  ---

  Task 3

  Depending on where the BlackBerry Enterprise Server is installed, add the new BlackBerry Enterprise Server service account to the Local Administrators group on the BlackBerry Enterprise Server by completing one of the procedures below.

  On a member server

  If the BlackBerry Enterprise Server is installed on a member server, add the new BlackBerry Enterprise Server service account to the Local Administrators group as follows:

  1. Open Administrative Tools > Computer Management, then expand System Tools.
  2. Select Local Users and Groups.
  3. Double-click Groups and then double-click Administrators. The Administrators Properties window appears.
  4. Click Add, type the new BlackBerry Enterprise Server service account name, and then click OK.
  5. Click OK again to close the Administrators Properties window.

  On a domain controller

  If the BlackBerry Enterprise Server is installed on a domain controller, add the new BlackBerry Enterprise Server service account to the Local Administrators group as follows:

  1. Open Administrative Tools > Active Directory Users and Computers, and then select the Builtin folder.
  2. Double-click Administrators, and then select the Members tab.
  3. Click Add, type the new BlackBerry Enterprise Server service account name and then click OK.
  4. Click OK again.

  ---

  Task 4

  Depending on the Microsoft Exchange environment, add the appropriate Microsoft Exchange Server permissions by completing one of the procedures below.

  Microsoft Exchange 2000 and 2003

  1. Open Exchange System Manager.
  2. Right-click the Microsoft Exchange administrative group name and then click Delegate Control.
  3. Click Next and then click Add to open the Delegate Control window.
  4. Click Browse to open the Select Users, Computers or Groups window and then select the new BlackBerry Enterprise Server service account.
  5. From the Role drop-down list, select Exchange View Only Administrator and then click OK.
  6. Click Next and then click Finish.
  7. Open Exchange System Manager, expand Administrative Groups > First Administrative Group, and select Servers.
  8. Right-click the Microsoft Exchange Server name, select Properties. Select the Security tab and click the Advanced button.
  9. Select the BlackBerry Enterprise Server service account name.  
     1. If you are not able to locate the BlackBerry Enterprise Server service account name, click Advanced, and then select the Allow inheritable permissions from parent to propagate to this object check box. 
     2. Click Apply and then click OK. You should now be able to find and click the BlackBerry Enterprise Server service account.
  10. Select the appropriate check boxes to allow permissions for Administer information store, Receive As, and Send As.
  11. Click Apply and then click OK.

  Microsoft Exchange 5.5

  In Exchange Administrator, turn on the Service Account Admin permission for the new service account in both the Site and Configuration containers. For more information on setting permissions, see the Microsoft Exchange 5.5 documentation.
  Microsoft Exchange 2007

  1. Open the Microsoft Exchange Shell by going to Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  2. To set the Exchange View Only Administrator role, type the following command:add-exchangeadministrator BESAdmin -role ViewOnlyAdminWhere BESAdmin is the name of the BlackBerry Enterprise Server service account.
  3. To check the Exchange View-Only Administrator role, type the following command:get-exchangeadministrator | Format-ListThe service account should be displayed with a ViewOnlyAdmin role.
  4. To set the Send As, Receive As, and Administer Information Store permissions, type the following command:get-mailboxserver server_name | add-adpermission -user BESAdmin -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

     Where server_name is the name of the Microsoft Exchange Server 2007 or Microsoft Exchange Cluster and BESAdmin is the name of the BlackBerry Enterprise Server service account.

  5. To check the Send As, Receive As, and Administer Information Store permissions, type the following command in Exchange Management Shell:get-mailboxserver Exchange2007 | get-ADpermission -user BESAdmin | Format-ListWhere Exchange2007 is the name of the Microsoft Exchange Server 2007 or Microsoft Exchange Cluster and BESAdmin is the name of the BlackBerry Enterprise Server service account.

  ---

  Task 5

  In Active Directory Users and Computers, add the Send As permission by completing the following steps:

  To grant the Send As permission for a single account on all users in a Microsoft Active Directory domain or container, complete the following steps:

  1. Open Administrative Tools > Active Directory Users and Computers.
  2. From the View menu, select the Advanced Features option. If this option is not selected, the Security page will not be visible for domain and container objects.
  3. Right-click the appropriate domain or container, and then click Properties.
  4. Select the Security tab.
  5. If the BlackBerry Enterprise Server service account that requires the Send As permission is not listed, click Add, and then select the appropriate BlackBerry Enterprise Server service account. Click OK. 
  6. Select the BlackBerry Enterprise Server service account and then click Advanced.
  7. Under the Permissions tab select the BlackBerry Enterprise Server service account and then select Edit.
  8. Under the Object tab in the Applies Onto list, select User Objects.
  9. Select the Send As check box.
  10. Click Apply, and then click OK.
  11. Close the Properties window, and then close Active Directory Users and Computers.

  Note: For additional methods of assigning the Send As permission, search for article 912918 in the Microsoft Support Knowledge Base.

  ---

  Task 6

  Stop all BlackBerry Enterprise Server services by completing the following steps:

  1. Open Administrative Tools > Services.
  2. Right-click each BlackBerry Enterprise Server service and then click Stop for each service.

  ---

  Task 7

  Configure any BlackBerry services that use the old BlackBerry Enterprise Server service account to log in with the new BlackBerry Enterprise Server service account by completing the following steps:

  Important: Do not include the BlackBerry Attachment Service, BlackBerry® Mobile Data System services, Apache Tomcat™ service, or BlackBerry Instant Messaging Connector in this procedure. These services are always set to the local system.

  1. Open Administrative Tools > Services, double-click a BlackBerry Enterprise Server service that has a Log On account, and click the Log On tab.
  2. Select the This account option, and then type the new BlackBerry Enterprise Server service account name.
  3. In the Password and Confirm Password fields, type the BlackBerry Enterprise Server service account password.
  4. Click Apply, and then click OK.
  5. Repeat steps 1 to 4 for each of the remaining BlackBerry Enterprise Server services that have a Log On account.

  ---

  Task 8

  Export the Research In Motion folder from the old BlackBerry Enterprise Server service account.

  Note: To perform this task, you must be logged on using the account that was initially used to install the BlackBerry Enterprise Server software or service pack.

  Warning: The following procedure involves modifying the computer registry. This can cause substantial damage to the Microsoft Windows operating system. Document and back up the registry entries prior to implementing any changes.

  1. Log in to the old BlackBerry Enterprise Server service account.
  2. In the Registry Editor, go to HKEY_CURRENT_USER\Software\Research In Motion.
  3. Select the Research In Motion folder.
  4. Depending on the Windows environment, do one of the following:
     • For Windows Server 2003, select the File menu, and then click Export.
     • For Windows Server 2000, select the Registry menu, and then click Export Registry File.
  5. Choose a location to save the file, type a file name and click Save.
  6. Close the Registry Editor.

  ---

  Task 9

  Import the Research In Motion folder to the new BlackBerry Enterprise Server service account by completing these steps:

  Warning: The following procedure involves modifying the computer registry. This can cause substantial damage to the Microsoft Windows operating system. Document and back up the registry entries prior to implementing any changes.

  1. Log out of the current service account and log in with the new BlackBerry Enterprise Server service account.
  2. Locate the registry file you saved from Task 8.
  3. Double-click the registry file and it will import to the correct location in the registry.
  4. Open the Registry Editor.
  5. Confirm that the HKEY_CURRENT_USER\Software\Research In Motion directory exists.
  6. Close the Registry Editor.

  ---

  Task 10

  If you have a Microsoft SQL Server, assign the Server roles by completing the following steps:

  Note: If you are using MSDE, skip Task 10 and go to Task 11.

  1. In the SQL Enterprise Manager, go to Microsoft SQL Servers/SQL Server Group/<SQL_server_name>.
  2. Expand the Microsoft SQL Server and expand security.
  3. Right-click Logins and click New Login.
  4. On the General tab, click the button next to the Name field, as shown below:
  5. Select the new service account name from the Names list, click Add, and click OK.
  6. From the Server Roles tab, select Server Administrators and Database Creators from the Server Role list.Note: If you are running BlackBerry Enterprise Server software version 4.1 or later, add the System Administrators role to add BlackBerry smartphone users in a role-based administration environment. For instructions, see the BlackBerry Enterprise Server for Microsoft Exchange: System Administration Guide.
  7. On the Database Access tab, select the check box for the BlackBerry Configuration Database (for example, BESMgmt).
  8. In the Database Roles for <BlackBerry_Configuration_Database_name> list, select the db_owner check box.

  ---

  Task 11

  Edit the MAPI profile by completing these steps:

  1. Make sure BlackBerry Manager is closed.
  2. Click Start > Programs > BlackBerry Enterprise Server > BlackBerry Server Configuration.
  3. On the BlackBerry Server tab, click Edit MAPI Profile.
  4. In the Mailbox field, type the new BlackBerry Enterprise Server service account mailbox name.
  5. Click Apply and then click OK.

  ---

  Task 12

  Start all BlackBerry Enterprise Server services by completing the following steps:

  1. In BlackBerry Manager, right-click the BlackBerry Enterprise Server name, and then select Service Control > Start Service for each of the following services in the following order:
     • BlackBerry Router
     • BlackBerry Dispatcher
     • BlackBerry Controller
     • all other BlackBerry Enterprise Server services
  2. After starting the services, close BlackBerry Manager.Note: BlackBerry Enterprise Server services can also be started in Administrative Tools > Services.

  Important: Restarting certain BlackBerry Enterprise Server services will delay email message delivery to BlackBerry smartphones. For more information, see KB04789.

  ---

  Additional Info

  Please note that if your organization uses a single domain or multiple domains that are trusted in an Exchange organization, one BlackBerry Enterprise Server service account account is sufficient to manage the BlackBerry Enterprise Server.

Original Post Click Here