Link to home
Start Free TrialLog in
Avatar of FASTECHS
FASTECHSFlag for United States of America

asked on

SINGLE BLACKBERRY USER UNABLE TO SEND - GETS UNABLE TO SUBMIT MESSAGE ERROR

I am having a heck of a time with my blackberry. About a week or two ago I have stopped  being able to send messages, I can receive but just can't send, and Exchange DOES have send as permission.

Since that time I totally deleted my email box on exchange, and my user name in active directory. I deleted my name in BES and made sure my name was purged. I then resetup everything. My blackberry would receive and receive for a few hours and then stopped being able to send.

I have checked the send as permission, and made sure send as is applied to user objects. I have also made sure the user is not a member of any domain administrators group. The user can receive emails perfectly fine, but can not send. When they send they get the usual red x "Desktop Email program unable to submit message" error that you would get if you don't have the send as permission. The thing that is so goofy is that my user account has the send as permission!

When I run IEMSTest, everything completes successfully. I must say however the problem did seem to start happening again once I imported my mailbox backup. Does the blackberry have a limitation on mailbox size?



Event Type:      Warning
Event Source:      BlackBerry Alert
Event Category:      None
Event ID:      20000
Date:            5/10/2007
Time:            12:48:19 PM
User:            N/A
Computer:      BLACKBERRY
Description:
The description for Event ID ( 20000 ) in Source ( BlackBerry Alert ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: EventLog::DisplayEntries: Event log externally changed.  Resetting connection..'

Event Type:      Warning
Event Source:      BlackBerry Messaging Agent BLACKBERRY Agent 1
Event Category:      None
Event ID:      20265
Date:            5/10/2007
Time:            12:51:56 PM
User:            N/A
Computer:      BLACKBERRY
Description:
{FTUser@FasTechs.com} MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed

Event Type:      Warning
Event Source:      BlackBerry Messaging Agent BLACKBERRY Agent 1
Event Category:      None
Event ID:      20000
Date:            5/10/2007
Time:            12:51:56 PM
User:            N/A
Computer:      BLACKBERRY
Description:
{FTUser@FasTechs.com} Send() failed: ERR_SUBMIT_MAIL, Tag=12111


C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Utility>iemstest
BlackBerry Enterprise Server Utility - IEMSTest.exe (IExchangeManageStore), Vers
ion 1.0
Copyright (c) Research In Motion, Ltd. 1999. All rights reserved.
Opening Default Message Store Mailbox - blackb.
Opening message store for FT User using /o=FASTECHS/ou=first administrativ
e group/cn=Recipients/cn=FTUser /o=FASTECHS/ou=first administrative group/cn=C
onfiguration/cn=Servers/cn=EXCHANGE/cn=Microsoft Private MDB.
FT User's Mailbox opened successfully.
Root Folder opened successfully.
Folder created successfully.
Test folder deleted successfully.
Test completed successfully for FT User.

C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Utility>iemstes
t
BlackBerry Enterprise Server Utility - IEMSTest.exe (IExchangeManageStore), Vers
ion 1.0
Copyright (c) Research In Motion, Ltd. 1999. All rights reserved.
Opening Default Message Store Mailbox - blackb.
Opening message store for FT User using /o=FASTECHS/ou=first administrativ
e group/cn=Recipients/cn=FTUser /o=FASTECHS/ou=first administrative group/cn=C
onfiguration/cn=Servers/cn=EXCHANGE/cn=Microsoft Private MDB.
FT User's Mailbox opened successfully.
Root Folder opened successfully.
Folder created successfully.
Test folder deleted successfully.
Test completed successfully for FT User.

I HAVE DOUBLE, TRIPLE CHECKED THE SEND AS PERMISSION IS APPLIED. I AM ALSO TAKEN MYSELF OUT OF EVERY GROUP EXCEPT FOR DOMAIN USERS. IEMSTEST PASSES WITH NO ISSUES, AND NO OTHER USER ON OUR BEST SERVER IS HAVING ANY PROBLEMS.

YOUR HELP IS GREATLY APPRECIATED!
Avatar of Member_2_3772578
Member_2_3772578

Is your user account having send as rights, or the BESADMIN account.

Make shure that the BesAdmin account has send as rights! This error messages indicates that the rights are not correct.....
I saw a similar issue with our BES after the DST update. We found that if a BES user is Domain ADmin, they are unable to send mail. We ended up haveing to create seperate ADmin accounts different from our BES accounts. (this is a good idea anyway). Once the accounts were mdified, send mail from the BB started working again. Don't ask me why, that is just how it was fixed. I hope this helps.
Avatar of FASTECHS

ASKER

The only group that the account is a member of is domain admins.  The account has the send as permission and passes IESMTest. According to my understanding from BlackBerry support if the IESMTest passes everything is ok; however this user is definately not ok.

It is only this user that has the problem, other users on the same computer.
I also totally wiped the users device, deleted the windows 2003 account, deleted the users mailbox, deleted the user from BES, rebooted both Exchange and BlackBerry Server, setup fresh user, setup blackberry user, made sure send as ok, activated the device. It seemed to work for ok for a while. Oddly the send as problem seemed to start when we imported the users old emails.
With all of the work you have done... Just for kicks and gigles I would try the following:

Make the user account a Domain User.
Give the user a second account as a domain Admin so that they have their access.
Reset the BB.
I bet the user will be able to send mail.

Second Option:

setsendaspermission -a username -u user@abc.com

I have only seen this work a few times. It doesn't always work.

Good luck
ASKER CERTIFIED SOLUTION
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The member is not a part of domain admins, just domain users. I totally deleted my account again, deleted my exchange mailbox, and deleted from bes, wiped handheld. I resetup everything and even after adding send as I get unable to submit message. IEMSTest passes with flying colors.
How long did you wait after granting the send as permission? It can take a couple of hours before it takes effect.

Simon.
To correct the "Send As" issue I have outlined the steps I use to quickly resolve this issue:

1. Stop the Blackberry Router service.

2. Open Active Directory and from the View menu select "Advanced Features". Then go to each user that will be added to the BES and open their properties, go to the security tab and add the user BESadmin and add the security permission "Send As".

3. Run the following script logged on as Administrator
Note: Only use this step if you have BlackBerry users that are members of Admin groups. Using best practice methods it is recomended that mobile user accounts aren't members of any administration groups.

dsacls "cn=adminsdholder,cn=system,dc=domainname,dc=c om " /G "DOMAINNAME\BESadmin:CA;Send As"

Example 1: dsacls "cn=adminsdholder,cn=system,dc=experts-exchange,dc=com " /G "EXPERTS_EXCHANGE\BESadmin:CA;Send As"

Example 2: dsacls "cn=adminsdholder,cn=system,dc=blackberryforums,dc =com,dc=au " /G "BLACKBERRYFORUMS\BESadmin:CA;Send As"

Example 3: dsacls "cn=adminsdholder,cn=system,dc=mobilenetwork,dc=lo cal" /G "MOBILENETWORK\BESadmin:CA;Send As"

NOTE: dsacls can be found in the Windows Server 2003 SP1 Support Tools pack: Download details:
http://www.microsoft.com/downloads/details.aspx?FamilyId=6EC50B78-8BE1-4E81-B3BE-4E7AC4F0912D

4. Wait 20 minutes and then restart the BlackBerry Router service.

5. Restart the BES server.
Basically if you don't wait the 20 minutes Exchange can't clears it cache and your permission changes won't be taken into effect.
For anyone after detailed instruction on this process with Exchange 2007 I have written an install guide on my site:

http://www.blackberryforums.com.au/forums/microsoft-exchange/687-exchange-2007-bes-install-guide.html

Note: This guide allows BES 4.1.3 to operate at 100% with Exchange 2007.  

I'm having similiar issues. I've given BESADMIN SendAs rights to the account but I'm still not able to send. I can receive. The BESADMIN account is a member of the Administrators/Builtin group and Domain Users.

Should I still run the dsacls "cn=adminsdholder,cn=system,dc=domainname,dc=c om " /G "DOMAINNAME\BESadmin:CA;Send As" command?

The Blackberry user is not a member of any admin groups.
gmanz1 - This is a question that is over six months old. EE doesn't work like a forum, you cannot bump questions to the top of the list. No one else will see this question other than the original posters.
I would suggest that you ask your question as a new question where it will get attention from active experts.

Simon
Exchange Server Zone Advisor.