?
Solved

Setting up 1 single user Blackberry Enterprise Server

Posted on 2007-10-06
83
Medium Priority
?
918 Views
Last Modified: 2009-04-28
I wor for the Society for The Prevention of Cruelty To Animals.  Our President got a new Blackberry and I'm havig trouble setting it up.  Is anyone out there willing to help?
0
Comment
Question by:J.R. Sitman
  • 47
  • 36
83 Comments
 
LVL 10

Expert Comment

by:duffman76
ID: 20033896
What problems are you having and what are you trying to do?
0
 

Author Comment

by:J.R. Sitman
ID: 20034124
I'm trying to get the single user Enterprise server set up so our Presidents Blackberry can communicate with our Exchange 2003.  The problem is when I try to start Blackberry mgr. it asks me for the user to connect to Exchange.  No matter what user I enter it never connects.  However, I found out over the weekend the ESM tools need to be on the server, which it does not state in the pre-requisites portion of BES.
I'm installing the tools now.  I've uninstalled BES and I still have to uninstall MSDE then I'll start over.
Any help would be appreciated.

Thanks,

J.R.
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20034191
Welcome to the BES world.  You are correct you need to have ESM installed before the BES was installed and that will help.  You also need to copy the mapi.dll and cdo.dll from your exchange server and copy them to your c:\winnt\system32 or c:\windows\system32 folder and register them.  Make sure you install the BES using the BES account and ensure that the BES account is a local admin of the server.  
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:J.R. Sitman
ID: 20034249
That would of been very helpful to know in their tutorial.  That was the other problem was I set up the BES user on a different server and it wasn't a local admin.  I deleted the user from AD.  How do I ensure that when I add the BESADMIN back in that it is a local Admin?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20034283
Just add the BES Service account to the Local Adminstrators group on the Server.

You also need to make sure your BES account has SEND as and RECEIVE as permisson to the mailbox store.

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB02276&sliceId=SAL_Public&dialogID=55704622&stateId=0%200%2030197829
0
 

Author Comment

by:J.R. Sitman
ID: 20048307
To register the files I just type "register (file name" at the run command, correct?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20053129
regsvr32 c:\winnt\mapi.dll
regsvr32 c:\winnt\cdo.dll

Assuming that is where the files are located.
0
 

Author Comment

by:J.R. Sitman
ID: 20053498
I was about to copy the two files and there is only a cdosys.dll amd a mapi32.dll.  I wanted to verify these are correct.

Thanks
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20056395
There should be a cdo.dll about 600-700kb as well.  You don't need to copy the cdosys.dll just the cdo.dll and the mapi32.dll.  You should be able to find them on your exchange server by doing a serch.  
0
 

Author Comment

by:J.R. Sitman
ID: 20057140
I just verified there is no cdo.dll
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20058065
What version of Exchange are you running?  Do you have hidden and system files set to be viewable?  
0
 

Author Comment

by:J.R. Sitman
ID: 20058123
2003 SP2.  I just unchecked the hide protected files and it's still not there
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20058221
Is there already a cdo.dll on your BES server from when you installed the exchange system tools?  If so then leave it as it is and use that one.
0
 

Author Comment

by:J.R. Sitman
ID: 20058340
It there but it's in the software distribution download folder
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20058675
Odd.  Copy it to winnt\sytem32 and register it.  do you know what version it is?
0
 

Author Comment

by:J.R. Sitman
ID: 20058695
version 6.5.7651.61
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20058705
Cool actually the right version that should be good to copy and use.
0
 

Author Comment

by:J.R. Sitman
ID: 20058717
Thanks.  I'm going to clean up the MSDE files in the registry and then start the install again.  I'll keep you posted.  Thanks for all the help.
0
 

Author Comment

by:J.R. Sitman
ID: 20058790
When I tried to register the mapi32.dll I got this error.  mapi32.dll was loaded, but the DllRegisterServer entry point was not found.  The file can not be registered.
What should I do?
0
 

Author Comment

by:J.R. Sitman
ID: 20059646
When I add the new user besadmin, it doesn't make it a member of the local admin.  only domain users.  What am I doing wrong?  I know when you add a user to a workstation you get a choice, but there is no choice when adding them via AD Users.
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20060030
Just logon to the BES server itself and add the new bes account to the local administrators group.  The mapi error was probably because it was already registered so you should not have to worry too much there.  
0
 

Author Comment

by:J.R. Sitman
ID: 20060196
Sorry to seem lame, but there is no "local administrator" group on a member server that I can find.  Please advise how.

0
 
LVL 10

Expert Comment

by:duffman76
ID: 20060230
Right click my computer, choose manage, click local users and groups, click groups, double click administrators, and add the bes admin account you created.  
0
 

Author Comment

by:J.R. Sitman
ID: 20060252
got it thanks
0
 

Author Comment

by:J.R. Sitman
ID: 20060980
Geting frustrated.  I want to remove the MSDE that was installed during the first BES instalIation.  I got the article below from another Expert and I'm going through it and none of the registry key it states to remove are there.  I uninstalled BES via the control panel.  Is it poosibe it properly removed the MSDE

http://clearinghouse4.fgdc.gov/enraemed/faq/all_html2.php?prog=enraemed&lang=en 
0
 

Author Comment

by:J.R. Sitman
ID: 20061106
I've started through the BES tutorial and I'm concerned that event though I selected to install the ESM tools only, the BES server is showing up as one of the Exchange servers in ESM.  Is this OK?
0
 

Author Comment

by:J.R. Sitman
ID: 20061166
In the tutorial it has me add Adminiser information store, read and send permissions for the besadmin account.  I did it but the besadmin account only shows up in the mailbox properties of the ESM on the BES server.  If this is all correct, then great.  The tutorial doesn't tell you if you should be doing all of this from the Exchange Server or it's own server.

Again I apprecaite your help.  We can't afford for me to hire someone to do this.  I'll stop until I get your replies.
0
 

Author Comment

by:J.R. Sitman
ID: 20061208
More problems.  When I try to log on to the server as besadmin I get "the local policy of this system does not permit you to log on interactively.
I'm getting ready to SCREAM
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20064703
Man I missed a lot.  Ok let me start from your last post.  You can't logon interactively because either the besadmin account is still not a local admin or you have a local policy preventing who logs on.  

When the tutorial talks about adding send as, and recieve as permissions that is all done from the Exchange server.  You really do nothing with the ESM except to have it on the BES.  You could use the ESM to connect to your exchange box and add the permissons to the store but it is usually easier to do it from the Exchange server.  

When you install the BES make sure you install it using the BESAdmin account that you created otherwise it will not work right.
0
 

Author Comment

by:J.R. Sitman
ID: 20065460
I think that I add a new user BBadmin because they're seems like there might be something left over from the firs besadmin I added.  My biggest concern is that when I added the ESM tools to the bes server the server became an additional Exchange server with mailboxes and all Exchange features.  Should I uninstall ESM fro the bes server and try ti install only the tools again?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20065849
It should just have the system tools.  You may have had one of the main drop down menus selected on accident when you installed Exchange.  it is not too hard to do on that setup.  
0
 

Author Comment

by:J.R. Sitman
ID: 20065859
I'll uninstall it and start over
0
 

Author Comment

by:J.R. Sitman
ID: 20065917
should I be worried about the MSDE?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20066276
No I would not worry too much.  The automated uninstall should remove the registry entries which is why you did not see them.  If you would uninstall the whole thing manually you would need to clear out those entries.
0
 

Author Comment

by:J.R. Sitman
ID: 20066291
thanks. I'll get back to you
0
 

Author Comment

by:J.R. Sitman
ID: 20066551
Before I go any further, I've got the ESM install set to "custom" for the action on the 1st line which is Microsoft Exchange and "install" for the action on the tools.  I believe this is what I did wrong last time by not choosing "custom".  Please verify before i proceed.

Thanks
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20066573
Yep that would be what happend.  I have done the same thing.  You should only have tools selected for install.  It sounds like it is all correct now.
0
 

Author Comment

by:J.R. Sitman
ID: 20066759
great
0
 

Author Comment

by:J.R. Sitman
ID: 20069184
I've made it as far as adding the security permissions for the bes account, administer info store, receive as and send as.   Then the tutorial tells me to check the properties of the mailbox store, and verify the permissions are there.  The problem is the besadmin account isn't listed in the mailbox security properties.   HELP.
I thought it was going well.
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20069201
You are fine.  Just open up your Exchange server and right click on the store and add the BESAdmin account.  Give it the permissions that it is asking for and it will work.  
0
 

Author Comment

by:J.R. Sitman
ID: 20069305
OK
0
 

Author Comment

by:J.R. Sitman
ID: 20069603
I'm at thepoint when it's creating the databases, In the tutorial it is supposed to create the first database and then go to the next screen to create the mdss and mdss_dis databases.  I get the message "your attempt to connect to the MDS Services database as bbadmin is unsuccessful.  Confirm that your database server supports mixed mode authentication.
I have a feeling it's because the first install when that database was created I used besadmin.  However, I've deleted that account in an attempt to start fresh.   HELP.
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20071051
You probably do not even use MDS since most people don't.  You could have not installed it and probably would have been fine.  MDS is always a pain.  I assume you are using an MSDE database and not a SQL server.  If it is a sql server then add the besadmin account as a local admin of the sql server and that will clear up the problem.  You can remove the rights after it is finished.  If you are using an MSDE database then you really can't see the database to see what is wrong.  Do you have a sql datbase that you can get onto?  If so, you can open up sql enterprise manager and connect to the BES MSDE database and then delete the old mds database.  That is probably what you will need to do but If you don't have a way to look at the msde database I don't know how it is going to work.
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20071059
You can also try changing the name of the MDS database to something other then the default.  That should then create a new database using your new besadmin account and hopefully get around the error.
0
 

Author Comment

by:J.R. Sitman
ID: 20071073
Since I knew you were gone when I e-mailed you, I changed the name of the two MDS databases and added a 2 at the end.  That solved that problem.  It seemed to be working, but I got an e-mail from our President that she sent from her laptop and it stated she is receiving but it's not sending.  I e-mailed her this morning to see if it is still a problem.  According to the BES server the logs shows it communicating properly.
One problem she is definitely having is there are 3 addresses in contacts that won't sync.  It does't show which ones are bad.  How do I fine the bad contacts
0
 

Author Comment

by:J.R. Sitman
ID: 20071182
The blackberry states searching for cdma and it gets a red x.  Any ideas what's wrong/
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20072126
With sending.  You may have to resend her the service book from the server.  Could be a carrier issue but probably not.  Check eventviewer and see if any errors show that look like anything.  
0
 

Author Comment

by:J.R. Sitman
ID: 20072215
Event viewer info.
{MBernstein@spcala.com} MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed
{MBernstein@spcala.com} Send() failed: ERR_SUBMIT_MAIL, Tag=91

There are many of these
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20077358
It looks like you are are still missing permissons on that persons account for the BESAdmin account.  Follow this link and make sure the account has all of the right permissions.

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB02276&sliceId=SAL_Public&dialogID=57336345&stateId=0%200%2031439899

The only other thing could be that the mapi32.dll is not under winnt\system32 and registered.
0
 

Author Comment

by:J.R. Sitman
ID: 20077461
I tried registering the mapi32 again and get the same message "DllRegisterServer entry point was not found.  The file can not be registered."

I read the securtity article and all permissions are correct.  What now?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20077550
can you unregister the mapi32.dll?  regsvr32 winnt\system32\mapi32.dll /u

If that works unregister and reregister it.  Those event errors are pretty much always admin account permissions or different mapi then the exchange server, or it is not registered.  The only other thing to try would be to rebuild the mapi profile on the BES server.  It is under blackberry, server configuration.
0
 

Author Comment

by:J.R. Sitman
ID: 20077570
The unregister didn't work same error.  Should I delete it and get it from the Exchange server, then register it?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20077582
Ah oddly that is a good sign.  Yes take the one from the exchange server and then try to register that.  Your errors are probably because that never registered.
0
 

Author Comment

by:J.R. Sitman
ID: 20077665
I renamed the mapi32.dll on the bes server, copied the one from Exchange and the registration still fails
0
 

Author Comment

by:J.R. Sitman
ID: 20077805
Under Server Configuration I don't see anything about rebuilding the MAPI
0
 

Author Comment

by:J.R. Sitman
ID: 20077857
Please read this and see if it make sense.  In the solution portion where it states to add besadmin to the users security tab, there is no "security" tab for the users.  I think something is missing from the article.

http://www.experts-exchange.com/Programming/Wireless_Programming/Blackberry/Q_22043062.html
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20077910
I think the person in that post may have confused AD properties with folder properties.  In Ad assuming you have the exchange tools installed, Open the properties of the user, click exchange advanced, and click mailbox rights.  If you do not see this from AD users and computers on your own machine access it from the Exchange server.
0
 

Author Comment

by:J.R. Sitman
ID: 20078011
In the advanced tab it has read and full mailbox access checked.   The President is bringing the BB to me around 9 am.  Will you be available today?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20078047
I should be available.  Full mailbox access does not give it send as and recieve as rights though.
0
 

Author Comment

by:J.R. Sitman
ID: 20078101
There is no send and receive as permissions in the advanced tab
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20078566
You have to go onto your Exchange box and open up the system manager, choose your server right click and choose properties and then you will see a security tab.  I haven't done that for awhile so I had to look check my exchange box.  
0
 

Author Comment

by:J.R. Sitman
ID: 20078631
The besadmin account has send as and recieve as.  Should I add the user and give her the same permissions?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20078648
No that would not help.  I am still wondering why your dll file will not register.  Do you have the blackberry manager closed when you try to register?   You will probably need to stop the blackberry services such as the blackberry router in order to unregister and register the service.
0
 

Author Comment

by:J.R. Sitman
ID: 20079486
I have the BB.  It is critical I get this solved today, because she is leaving for a meeting in Sacramento tomorrow.  So I REALLY appreciate if you hang in there with me to solve this.  I stopped all the services and it still won't register.
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20079909
Anything else in event viewer or is it just a bunch of mapi errors still?  I assume all of the service start without an issue?  Right now you can recieve email but not send any email?
0
 

Author Comment

by:J.R. Sitman
ID: 20079970
This is the only other thing that recently showed up.  Nothing else.  I sent a message from the Server via the Enterprise Mgr and it was received.  But still can't send or reply from the BB

CMDSAGView: Bad hResult, -2147467261 - Object reference not set to an instance of an object., from AG web service call MDSAGAdminMgmt(testWsAccess - getServerStatus. Asking user to get SSL certificate.)
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20079983
Are you using the default policy or have you put a security policy in place?  
0
 

Author Comment

by:J.R. Sitman
ID: 20080006
In the tutorial it instructed me to add a policy.  So I'm not using the default.  Should I change it back to the default for the user?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20080070
You should have a policy in place eventually but for now turn it back to the default just for testing.  Is your user part of domain admins or any type of high level adminstrative group?  There was a microsoft hotfix that removes all send as permissions for those type of users.  
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20080072
These groups specifically

" Administrators
" Account Operators
" Server Operators
" Print Operators
" Backup Operators
" Domain Admins
" Schema Admins
" Enterprise Admins
" Cert Publishers
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20080101
Also, can you try removing the service book and resending it to the unit?

On the handheld
go to options
Advanced Options
Service Book
Delete Desktop [cmime]

From the BES server right click the user's name and resend service book.
0
 

Author Comment

by:J.R. Sitman
ID: 20080163
She was an Administrator.  I removed it.  I have the BB but whn I get to Desktop cmime exactly how do I delete it?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20080281
highlight it click the options button or scrollwheel and choose delete.
0
 

Author Comment

by:J.R. Sitman
ID: 20080375
Got it.  I resent it from the server then sent a message from the BB and it's still getting the same MAPI error in the event log.
0
 
LVL 10

Accepted Solution

by:
duffman76 earned 2000 total points
ID: 20080510
Alright we have to be missing something simple.  Everything points to a send as permission error.  That is what that error means in event viewer however you have checked it a couple of times.  To make sure we are not crazy follow these steps from Microsoft.  Make sure you have advanced features selected in AD as it says below.

1. Start the Active Directory Users and Computers management console.  
2. On the View menu, make sure that the Advanced Features option is selected. If this option is not selected, the Security page will not be visible for User account objects.
3. Open the properties of the user account that owns the mailbox.  
4. Click the Security tab.  
5. If the account is not already in the list of group or user names, add the account that should have the Send As permission for this user.
6. In the Permissions box, click Allow for the Send As permission for the appropriate account.  
7. Click OK.

Add the BESAdmin account for the user in question and click sendas.
0
 

Author Comment

by:J.R. Sitman
ID: 20080753
YOU DID IT.  I can't thank you enough.   One more thing.   After an e-mail is deleted from the BB or from Outlook how long before it deletes from the each other.
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20080820
Awsome.  This was turning into a life goal.  Generally almost instant to about 3 minutes.  You can manually click reconcile now if you want to do it quicker.
0
 

Author Comment

by:J.R. Sitman
ID: 20080903
If I delete from outlook it deletes from the BB but if I delete from BB it's not deleting from Outlook
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20080940
This one is easy.  On the handheld open the messages folder.

Click the options button or trackwheel
Click Options
Click Email Reconciliation
Change Delete on to Mailbox & Handheld.
Save options.
0
 

Author Comment

by:J.R. Sitman
ID: 20081047
Great.  It's working.  Again I can't thank you enough.
One final thing.  All of her folders are one the BB.  If we want to delete certain folders can we.

What answer should I accept?
0
 
LVL 10

Expert Comment

by:duffman76
ID: 20081123
The folders are usually all there but they are probably blank.  It all depends on what you have set to sync.  Assuming you are using the blackberry desktop manager 4.2 do the following.

click Email Settings
Click Advanced tab
Click Choose folders
Choose which ones you want

Accept the last post with how to set Send As.
0
 

Author Comment

by:J.R. Sitman
ID: 20081233
Yep, they're blank.

Thanks for all your help and PATIENCE.
0
 

Author Comment

by:J.R. Sitman
ID: 24251457
duffman76 are you available to help with replacing a BB with a new one?
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With the release of BlackBerry Enterprise Server (BES) 5.0 and the large amount of new features on offer, many administrators, IT architects and professionals will be looking very seriously (if not already considering) at migrating to, or deploying,…
I've already touched on keyboard shortcuts that can be used in a BlackBerry to make navigation much more easy but there are also another set of commands which are hidden for different reasons. Standard users won't need these unless under exceptional…
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
Suggested Courses

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question