Blackberry Server (BES) installed on the Windows 2003 SBS domain controller?

I made the first visit to a new client today and discovered that a previous tech setup the BES software on the client's only server, the Windows 2003 SBS domain controller.  (It also runs the Exchange server.)  All of the Blackberry services and MAPI profile are running under the Administrator account!  I have three questions below.

I've read the white papers and am experienced in managing all of the software involved--when it is setup as the manufacturers recommend.  

Everything appears to be working correctly (I have not yet had time for a detailed survey of system health.)  The load on the server is very low: 4 users, two of which have blackberries.  So I am not worried about hardware resources in this situation.

1) Upon searching I have seen it mentioned in passing that BES can be installed on the SBS server (along with Exchange.)  Is this true, and if so are there foreseeable problems that may arise from this setup?

I have not investigated all of the security workarounds that had to be implemented to get BES to run under the Administrator account, but based on past experience I know some restrictions had to be lifted from the Administrators group to get BES to function.  (Running SBS SP1 and Exchange SP2.)

2) Since this BES install is running on the SBS server are there any special cases/reasons that would require BES to run under the Administrator account?

3) If not, I plan to create a "BESADMIN" account with the recommended permissions and run the BES server under that.  What steps will need to be taken to resecure the administrator account?
Adam RayAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
I've installed BES Express on SBS's without any problem whatsoever.

Be sure to follow Gary's Guide to doing this though...

Adam RayAuthor Commented:
Thanks for the quick response.  Unless I hear otherwise I'll take that to mean the two can run in harmony when configured properly.

Does anyone what will likely have to be done to resecure the administrator account to it's default rights?
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Actually it's not that loose... if you read through Gary's how-to.. you'll see that all you add is "Log on Locally" and "log on as a service".  Those are already enabled on the built-in administrator account.

Then the only other things are the Send as and receive as permissions on the mailbox... no big deal to leave those alone.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Adam RayAuthor Commented:
With the release of the Blackberry Proffesional Software, this seems to be a moot point.  As BPS is pretty much functionally equivelent to BES (for the Small Business market) and certified to run on Exchange servers.

Note: There are differences (mainly no MDS) between BPS and BES, so be sure to do your homework before "upgrading" your BES to BPS, but it seems to be a good idea since it uses less reasources.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.