Setting up 1 single user Blackberry Enterprise Server

What problems are you having and what are you trying to do?

I'm trying to get the single user Enterprise server set up so our Presidents Blackberry can communicate with our Exchange 2003.  The problem is when I try to start Blackberry mgr. it asks me for the user to connect to Exchange.  No matter what user I enter it never connects.  However, I found out over the weekend the ESM tools need to be on the server, which it does not state in the pre-requisites portion of BES.
I'm installing the tools now.  I've uninstalled BES and I still have to uninstall MSDE then I'll start over.
Any help would be appreciated.

Thanks,

J.R.

Welcome to the BES world.  You are correct you need to have ESM installed before the BES was installed and that will help.  You also need to copy the mapi.dll and cdo.dll from your exchange server and copy them to your c:\winnt\system32 or c:\windows\system32 folder and register them.  Make sure you install the BES using the BES account and ensure that the BES account is a local admin of the server.  

That would of been very helpful to know in their tutorial.  That was the other problem was I set up the BES user on a different server and it wasn't a local admin.  I deleted the user from AD.  How do I ensure that when I add the BESADMIN back in that it is a local Admin?

Just add the BES Service account to the Local Adminstrators group on the Server.

You also need to make sure your BES account has SEND as and RECEIVE as permisson to the mailbox store.

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB02276&sliceId=SAL_Public&dialogID=55704622&stateId=0%200%2030197829

To register the files I just type "register (file name" at the run command, correct?

regsvr32 c:\winnt\mapi.dll
regsvr32 c:\winnt\cdo.dll

Assuming that is where the files are located.

I was about to copy the two files and there is only a cdosys.dll amd a mapi32.dll.  I wanted to verify these are correct.

Thanks

There should be a cdo.dll about 600-700kb as well.  You don't need to copy the cdosys.dll just the cdo.dll and the mapi32.dll.  You should be able to find them on your exchange server by doing a serch.  

I just verified there is no cdo.dll

What version of Exchange are you running?  Do you have hidden and system files set to be viewable?  

2003 SP2.  I just unchecked the hide protected files and it's still not there

Is there already a cdo.dll on your BES server from when you installed the exchange system tools?  If so then leave it as it is and use that one.

It there but it's in the software distribution download folder

Odd.  Copy it to winnt\sytem32 and register it.  do you know what version it is?

version 6.5.7651.61

Cool actually the right version that should be good to copy and use.

Thanks.  I'm going to clean up the MSDE files in the registry and then start the install again.  I'll keep you posted.  Thanks for all the help.

When I tried to register the mapi32.dll I got this error.  mapi32.dll was loaded, but the DllRegisterServer entry point was not found.  The file can not be registered.
What should I do?

When I add the new user besadmin, it doesn't make it a member of the local admin.  only domain users.  What am I doing wrong?  I know when you add a user to a workstation you get a choice, but there is no choice when adding them via AD Users.

Just logon to the BES server itself and add the new bes account to the local administrators group.  The mapi error was probably because it was already registered so you should not have to worry too much there.  

Sorry to seem lame, but there is no "local administrator" group on a member server that I can find.  Please advise how.

Right click my computer, choose manage, click local users and groups, click groups, double click administrators, and add the bes admin account you created.  

got it thanks

Geting frustrated.  I want to remove the MSDE that was installed during the first BES instalIation.  I got the article below from another Expert and I'm going through it and none of the registry key it states to remove are there.  I uninstalled BES via the control panel.  Is it poosibe it properly removed the MSDE

http://clearinghouse4.fgdc.gov/enraemed/faq/all_html2.php?prog=enraemed&lang=en 

I've started through the BES tutorial and I'm concerned that event though I selected to install the ESM tools only, the BES server is showing up as one of the Exchange servers in ESM.  Is this OK?

In the tutorial it has me add Adminiser information store, read and send permissions for the besadmin account.  I did it but the besadmin account only shows up in the mailbox properties of the ESM on the BES server.  If this is all correct, then great.  The tutorial doesn't tell you if you should be doing all of this from the Exchange Server or it's own server.

Again I apprecaite your help.  We can't afford for me to hire someone to do this.  I'll stop until I get your replies.

More problems.  When I try to log on to the server as besadmin I get "the local policy of this system does not permit you to log on interactively.
I'm getting ready to SCREAM

Man I missed a lot.  Ok let me start from your last post.  You can't logon interactively because either the besadmin account is still not a local admin or you have a local policy preventing who logs on.  

When the tutorial talks about adding send as, and recieve as permissions that is all done from the Exchange server.  You really do nothing with the ESM except to have it on the BES.  You could use the ESM to connect to your exchange box and add the permissons to the store but it is usually easier to do it from the Exchange server.  

When you install the BES make sure you install it using the BESAdmin account that you created otherwise it will not work right.

I think that I add a new user BBadmin because they're seems like there might be something left over from the firs besadmin I added.  My biggest concern is that when I added the ESM tools to the bes server the server became an additional Exchange server with mailboxes and all Exchange features.  Should I uninstall ESM fro the bes server and try ti install only the tools again?

It should just have the system tools.  You may have had one of the main drop down menus selected on accident when you installed Exchange.  it is not too hard to do on that setup.  

I'll uninstall it and start over

should I be worried about the MSDE?

No I would not worry too much.  The automated uninstall should remove the registry entries which is why you did not see them.  If you would uninstall the whole thing manually you would need to clear out those entries.

thanks. I'll get back to you

Before I go any further, I've got the ESM install set to "custom" for the action on the 1st line which is Microsoft Exchange and "install" for the action on the tools.  I believe this is what I did wrong last time by not choosing "custom".  Please verify before i proceed.

Thanks

Yep that would be what happend.  I have done the same thing.  You should only have tools selected for install.  It sounds like it is all correct now.

great

I've made it as far as adding the security permissions for the bes account, administer info store, receive as and send as.   Then the tutorial tells me to check the properties of the mailbox store, and verify the permissions are there.  The problem is the besadmin account isn't listed in the mailbox security properties.   HELP.
I thought it was going well.

You are fine.  Just open up your Exchange server and right click on the store and add the BESAdmin account.  Give it the permissions that it is asking for and it will work.  

OK

I'm at thepoint when it's creating the databases, In the tutorial it is supposed to create the first database and then go to the next screen to create the mdss and mdss_dis databases.  I get the message "your attempt to connect to the MDS Services database as bbadmin is unsuccessful.  Confirm that your database server supports mixed mode authentication.
I have a feeling it's because the first install when that database was created I used besadmin.  However, I've deleted that account in an attempt to start fresh.   HELP.

You probably do not even use MDS since most people don't.  You could have not installed it and probably would have been fine.  MDS is always a pain.  I assume you are using an MSDE database and not a SQL server.  If it is a sql server then add the besadmin account as a local admin of the sql server and that will clear up the problem.  You can remove the rights after it is finished.  If you are using an MSDE database then you really can't see the database to see what is wrong.  Do you have a sql datbase that you can get onto?  If so, you can open up sql enterprise manager and connect to the BES MSDE database and then delete the old mds database.  That is probably what you will need to do but If you don't have a way to look at the msde database I don't know how it is going to work.

You can also try changing the name of the MDS database to something other then the default.  That should then create a new database using your new besadmin account and hopefully get around the error.

Since I knew you were gone when I e-mailed you, I changed the name of the two MDS databases and added a 2 at the end.  That solved that problem.  It seemed to be working, but I got an e-mail from our President that she sent from her laptop and it stated she is receiving but it's not sending.  I e-mailed her this morning to see if it is still a problem.  According to the BES server the logs shows it communicating properly.
One problem she is definitely having is there are 3 addresses in contacts that won't sync.  It does't show which ones are bad.  How do I fine the bad contacts

The blackberry states searching for cdma and it gets a red x.  Any ideas what's wrong/

With sending.  You may have to resend her the service book from the server.  Could be a carrier issue but probably not.  Check eventviewer and see if any errors show that look like anything.  

Event viewer info.
{MBernstein@spcala.com} MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed
{MBernstein@spcala.com} Send() failed: ERR_SUBMIT_MAIL, Tag=91

There are many of these

It looks like you are are still missing permissons on that persons account for the BESAdmin account.  Follow this link and make sure the account has all of the right permissions.

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB02276&sliceId=SAL_Public&dialogID=57336345&stateId=0%200%2031439899

The only other thing could be that the mapi32.dll is not under winnt\system32 and registered.

I tried registering the mapi32 again and get the same message "DllRegisterServer entry point was not found.  The file can not be registered."

I read the securtity article and all permissions are correct.  What now?

can you unregister the mapi32.dll?  regsvr32 winnt\system32\mapi32.dll /u

If that works unregister and reregister it.  Those event errors are pretty much always admin account permissions or different mapi then the exchange server, or it is not registered.  The only other thing to try would be to rebuild the mapi profile on the BES server.  It is under blackberry, server configuration.

The unregister didn't work same error.  Should I delete it and get it from the Exchange server, then register it?

Ah oddly that is a good sign.  Yes take the one from the exchange server and then try to register that.  Your errors are probably because that never registered.

I renamed the mapi32.dll on the bes server, copied the one from Exchange and the registration still fails

Under Server Configuration I don't see anything about rebuilding the MAPI

Please read this and see if it make sense.  In the solution portion where it states to add besadmin to the users security tab, there is no "security" tab for the users.  I think something is missing from the article.

https://www.experts-exchange.com/questions/22043062/Blackberry-users-cannot-send-emails-when-their-email-accounts-are-on-the-BES-so-same-machine.html

I think the person in that post may have confused AD properties with folder properties.  In Ad assuming you have the exchange tools installed, Open the properties of the user, click exchange advanced, and click mailbox rights.  If you do not see this from AD users and computers on your own machine access it from the Exchange server.

In the advanced tab it has read and full mailbox access checked.   The President is bringing the BB to me around 9 am.  Will you be available today?

I should be available.  Full mailbox access does not give it send as and recieve as rights though.

There is no send and receive as permissions in the advanced tab

You have to go onto your Exchange box and open up the system manager, choose your server right click and choose properties and then you will see a security tab.  I haven't done that for awhile so I had to look check my exchange box.  

The besadmin account has send as and recieve as.  Should I add the user and give her the same permissions?

No that would not help.  I am still wondering why your dll file will not register.  Do you have the blackberry manager closed when you try to register?   You will probably need to stop the blackberry services such as the blackberry router in order to unregister and register the service.

I have the BB.  It is critical I get this solved today, because she is leaving for a meeting in Sacramento tomorrow.  So I REALLY appreciate if you hang in there with me to solve this.  I stopped all the services and it still won't register.

Anything else in event viewer or is it just a bunch of mapi errors still?  I assume all of the service start without an issue?  Right now you can recieve email but not send any email?

This is the only other thing that recently showed up.  Nothing else.  I sent a message from the Server via the Enterprise Mgr and it was received.  But still can't send or reply from the BB

CMDSAGView: Bad hResult, -2147467261 - Object reference not set to an instance of an object., from AG web service call MDSAGAdminMgmt(testWsAccess - getServerStatus. Asking user to get SSL certificate.)

Are you using the default policy or have you put a security policy in place?  

In the tutorial it instructed me to add a policy.  So I'm not using the default.  Should I change it back to the default for the user?

You should have a policy in place eventually but for now turn it back to the default just for testing.  Is your user part of domain admins or any type of high level adminstrative group?  There was a microsoft hotfix that removes all send as permissions for those type of users.  

These groups specifically

" Administrators
" Account Operators
" Server Operators
" Print Operators
" Backup Operators
" Domain Admins
" Schema Admins
" Enterprise Admins
" Cert Publishers

Also, can you try removing the service book and resending it to the unit?

On the handheld
go to options
Advanced Options
Service Book
Delete Desktop [cmime]

From the BES server right click the user's name and resend service book.

She was an Administrator.  I removed it.  I have the BB but whn I get to Desktop cmime exactly how do I delete it?

highlight it click the options button or scrollwheel and choose delete.

Got it.  I resent it from the server then sent a message from the BB and it's still getting the same MAPI error in the event log.

YOU DID IT.  I can't thank you enough.   One more thing.   After an e-mail is deleted from the BB or from Outlook how long before it deletes from the each other.

Awsome.  This was turning into a life goal.  Generally almost instant to about 3 minutes.  You can manually click reconcile now if you want to do it quicker.

If I delete from outlook it deletes from the BB but if I delete from BB it's not deleting from Outlook

This one is easy.  On the handheld open the messages folder.

Click the options button or trackwheel
Click Options
Click Email Reconciliation
Change Delete on to Mailbox & Handheld.
Save options.

Great.  It's working.  Again I can't thank you enough.
One final thing.  All of her folders are one the BB.  If we want to delete certain folders can we.

What answer should I accept?

The folders are usually all there but they are probably blank.  It all depends on what you have set to sync.  Assuming you are using the blackberry desktop manager 4.2 do the following.

click Email Settings
Click Advanced tab
Click Choose folders
Choose which ones you want

Accept the last post with how to set Send As.

Yep, they're blank.

Thanks for all your help and PATIENCE.

duffman76 are you available to help with replacing a BB with a new one?