Blackberry Enterprise Activation Fails; Reconcile on existing users not working

Well I select email activation password, and the user gets it in their exchange mailbox is that what you mean?

Here is how it goes, I add the user, i email them their activation password, i have them go to enterprise activation on their phone and put in their email address and activation password.  On some model units, there is a field called "activation server address".  I leave this field blank.  

When they click activate, I just hangs at "activating".......

on the server, it says "initializing" and those event logs I attached with the submit message failed errors appear in the event log

PSS-I agree with the permissions comment, I've been troubleshooting it from that angle primarily.  I've gone through numerous documents,etc about permissions and verified I set them up properly.  But for some reason, it seems the besadmin account still doesn't have the appropriate effective permissions.

message tracking in exchange?  

just a reminder this is BB professional, i don't know if it is any different for enterprise server.

will have user check with provider

what about the fact that users have to manage items on both outlook and their device? it used to reconcile properly.  any suggestions on that portion or is that permission related also?

The core functionality of BES and BPS are the same. They activate in the same way. The limits are mainly on functionality of the server and the user limit. From a troubleshooting point of view they are identical.

Message tracking in Exchange is what I am referring to. That will show if the activation message actually reached your server and what happened to it. I have seen them blocked by antispam in the past for example, which would be shown (by the message stopping at the categoriser).

Simon.

ok, so the activation thing is due to the user not being on the right data plan.  so that's that.  now, the reconcile not working properly.  permissions---where to look?

i've gone through the permissions over and over again....

Primary reason is that the besadmin is a member of Administrators or Domain Admins at the domain level.

Simon.

not a member of domain admins.  I read on an MS document article # 912918 and it said to add the besadmin to the builtin administrators group.  So  i did, but it wasn't working before i did that.  

What permissions does the account have? Which method did you use to grant the permissions? Server level, mailbox level, something else?

Simon.

I gave the besadmin account send as permissions on the entire users container in Active Directory.

Then in system manager in exchange, I used the delegation of control wizard to give Exchange View Only Administrator on the administrative group.

On the server level and the mailbox store it has send as, receive as, and administer information store along with the other permissions it inherited from the delegation of control

These were the permissions from the setup documentation from Blackberry and from Microsoft.  

I am pretty sure it is a permissions issue, so you may have to start removing permissions and then resetting them. Remember that Exchange caches permissions, the only way to clear the permission cache without waiting two hours is to restart the information store.

Simon.

Ok, well I am not quite sure what really fixed it.  It could be the permissions issue.  I had given the besadmin account full permissions at the users container lever.  However when i went to a user, besadmin did not show up in the permissions, so i had to manually add there.

In addition, I enabled "hard deletes" on the blackberry server Blackberry KB article 04853

Also on the devices, the "delete on" option was set to handheld, so i changed it to "mailbox & handheld" (BB KB article 00285)

I also followed through the steps in MS KB article 912918 to verify permissions and setup.  However, after doing one of the three items above, I was able to resolve the issue with users having to manage email on both the device and their outlook.