BESX install question. Exchange Management Shell code

I am working on getting BESX installed on my Exchange server running 2007. I am using this source (http://blackberryrocks.com/2010/03/03/video-installing-blackberry-enterprise-server-express-guide/). In image 1 below we are told to do a certain command. When I run that comment it errors out like shown in image 2. Please help me understand what I have wrong in my statement so I can continue my install.

Thanks.

-Josh
BESXinstall2.jpg
BESXinstall1.jpg
EvensTimeAsked:
Who is Participating?
 
esmith69Connect With a Mentor Commented:
Yes, that all appears to be correct.  Deny-False just means it's not a deny permission.  Inherited-false means it's a permission that you manually specified (rather than a permission that's automatically being applied from a higher level).
0
 
esmith69Commented:
Doubt it will help, but have you tried putting a space after "evensexch00" (but before the |) ?

Also it looks like you need to put in a space after "-extendedrights" (before the "Receive-As")
0
 
EvensTimeAuthor Commented:
Good point. I thought I had caught all my typo's. Thank you for pointing them out.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
EvensTimeAuthor Commented:
Ha, now I get this.
BESXinstall3.jpg
0
 
esmith69Commented:
I saw something similar on an SBS-related page, and they suggested to launch powershell using the "run as administrator" right click option in order to prevent the error.
0
 
EvensTimeAuthor Commented:
Do think this is what I would have expected to see as my result?? For some reason "False" for Deny and Inherited doesn't seem right but I do not know.
BESXinstall4.jpg
0
 
EvensTimeAuthor Commented:
Ok then, running it as Administrator was the way to go.
0
 
EvensTimeAuthor Commented:
So I am following all the steps in the powerpoint link I provided above. I have installed the SQL express on the local server with the BESX and also my Exchange 2007. I did the restart and now I get this error. Any ideas.

I really appreciate all your help.

I obviously am not an IT person.
BESXinstall5.jpg
0
 
esmith69Commented:
Go into Start->Microsoft SQL Server 2005->Configuration Tools->SQL Server Configuration Manager.  Go into SQL Server 2005 Network Configuration, then you should have an entry that says "protocols".  It may list more than one if you have more than one instance of SQL on the server.  If so, select the instance that corresponds to the Blackberry service.

Once in there, select the entry for TCP/IP and make sure is says  "enabled" next to it.  IF not, change it to enabled and follow any prompts about restarting the SQL services, then re-try the blackberry steps.
0
 
EvensTimeAuthor Commented:
Unfortunately TCP/IP was already set to enabled for the "BLACKBERRY" protocol.
0
 
esmith69Commented:
is this by any chance an SBS server?  Or is it just the regular version of Windows?
0
 
EvensTimeAuthor Commented:
It is running windows server 2003 and exchange 2007.
0
 
esmith69Commented:
Can you click OK in that error message and then re-post the screenshot?  I want to see what settings are behind that window.
0
 
EvensTimeAuthor Commented:
0
 
esmith69Commented:
If you go into start->run, type in "services.msc" (without  the quotes), then scroll down to the SQL server entry in the list, make sure it says it is running.  If not, right click on it and choose "start"
0
 
EvensTimeAuthor Commented:
It was already running unfortunately.
BESXinstall7.jpg
0
 
esmith69Commented:
When you created the SQL Express Blackberry instance, did it ask you to create a username/password?  If so, try clicking the button that says "SQL authentication" and then specifying the login info that you used during the SQL setup.
0
 
EvensTimeAuthor Commented:
Going back through the powerpoint I do not see anywhere where I was asked for SQL username/password. I was however asked for information to set up the BESX.
BESXinstall8.jpg
0
 
esmith69Commented:
You may need to go into the SQL server instace and configure it for Windows authentication.  I would also check the event logs to see if there are any errors related to SQL that are occuring at the same time as you're getting that error in the BES installation about it not being able to connect to the database.
0
 
EvensTimeAuthor Commented:
I am able to get into the BLACKBERRY SQL express using windows auth. Where do I go to check the log files??

Once again thanks for all your help.
0
 
EvensTimeAuthor Commented:
I can log into the MSQL express no problem using windows auth. I am not sure why the software can not gain access.
BESXinstall9.jpg
0
 
esmith69Commented:
Are you logged in to the computer with the username oasisinfolink when you're running the BES installation?  You may need to make sure they're added in as a SQL user as those error messages indicate that it's not able to connect to the Blackberry instance of SQL using that username.
0
 
EvensTimeAuthor Commented:
Yes I am logged into the computer as "oasisinfolink" to install and run the BESX. Logged in as "oasisinfolink" I am able to gain access to Microsoft SML Server Management Studio Express using windows auth shown in the image here. Any ideas??
BESXinstall10.jpg
0
 
EvensTimeAuthor Commented:
Here in this image you can see the logins already created and just for fun I just create the bottom one for "evenstime\oasisinfolink" and I still get the error.
BESXinstall11.jpg
0
 
esmith69Commented:
Now that you've added that explicit username into SQL, what are the errors that show up in the event logs while you run the BES install?  Before the errors were saying that evenstime\oasisinfolink couldn't connect to SQL but I'd be curious as to what the errors are now.
0
 
EvensTimeAuthor Commented:
They are the same. I was thinking the same thing as you.
0
 
esmith69Commented:
Can you look in the following location for the SQL error log?

C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG


The exact path that yours is in may vary due to the presence of several instances of SQL.  You'll want to find the path corresponding to the Blackberry instance obviously.

Once you find the log file, open it up and look for the events corresponding to the logon failures that were recorded in the Windows event logs. Within each of those failures, there should be something that says "State" that will give you a number indicating why the logon failure occurred.  The following link gives more info about what each "state" number means:  http://blogs.msdn.com/sql_protocols/archive/2006/02/21/536201.aspx
0
 
EvensTimeAuthor Commented:
Error: 18456, Severity: 14, State: 16.
ERRORLOG
0
 
Alex_DevConnect With a Mentor Commented:
State 16 means the DB can't be found or the user doesn't have permissions.  It sounds like the Blackberry DB (BESMgmt) wasn't created.  What step is this supposed to be done at and have you done it?

I'd say this seems to be the problem.
0
 
EvensTimeAuthor Commented:
Your right there is no "BESMgmt" database to gain access to....
BESXinstall12.jpg
0
 
esmith69Commented:
I assumed the DB was already created, but I bet maybe only the SQL instance was created.  I thought that step of the BES process would create it automatically but it appears it's not doing that.  It may have something to do with the fact that you have multiple SQL instances already on the server--maybe it's confusing the setup into thinking that the DB has already been created.

You should be able to manually create the database in SQL but I don't have an official guide with those steps handy right now.
0
 
esmith69Commented:
I think you can just right click on "Databases" and create a new one called BESMgmt...
0
 
EvensTimeAuthor Commented:
But then what about all the tables that will not be there? Will we assume the rest of the BES install will create those tables?

Hard to say.
0
 
esmith69Commented:
I believe it will do that part automatically.
0
 
EvensTimeAuthor Commented:
What do you think about this.      

http://www.blackberry.com/btsc/microsites/search.do?cmd=displayKC&docType=kc&externalId=KB18313&sliceId=1&docTypeID=DT_SUPPORTISSUE_1_1&dialogID=439520788&stateId=0 0 439514768

I do have this 'BESMgmt.cfg' file

I haven't seen anywhere where I would have had to do this on my own though.
0
 
esmith69Commented:
I think that will work.  Usually you don't need to manually create the database but it definitely seems like that is the issue you're facing, and I don't see any other way around it.
0
 
EvensTimeAuthor Commented:
It looks to me like I am still have a database rights or connection issue. This text below was pulled from the log file that was created when attempted to run the BESMgmt.cfg file. It says it is trying to connect to 'database=master' which is there. Maybe I need to give some permissions to that db and try this again. Let me know what you guys think. Maybe it is trying to connect to the default 'master' db in order to create the desired 'BESMgmt' db???  I have no idea. I'm throwing darts here.



[30000] (04/22 16:42:45.402):{0xFE4} [ENV] Running Process: CreateDB.exe, ID: 7892

[30000] (04/22 16:42:45.433):{0x1FF8} CBESDBInstaller::CBESDBInstaller - working directory is [D:\Research In Motion\BlackBerry Enterprise Server 5.0.1\Database]

[30000] (04/22 16:42:45.652):{0x1FF8} Schema is being installed

[30000] (04/22 16:42:45.652):{0x1FF8} Scripts loading from: D:\Research In Motion\BlackBerry Enterprise Server 5.0.1\Database\DBInstallScripts\SqlServer\

[30000] (04/22 16:42:45.652):{0x1FF8} Determining progress bar range

[30000] (04/22 16:42:45.980):{0x1FF8} ADO ConnectionTimeout value = 30s

[30000] (04/22 16:42:45.980):{0x1FF8} ADO ConnectionTimeout for re-initalizing the pool = 45s

[25137] (04/22 16:42:45.980):{0x1FF8} {ConnectionItem::ConnectToDB} Failed to connect.  Connection string is Provider=SQLOLEDB.1;Server=EVENSEXCH00\BLACKBERRY;Database=master;Network=dbmssocn;Trusted_Connection=Yes

[25000] (04/22 16:42:45.980):{0x1FF8} ConnectionItem::ConnectToDB: COM Error 0x800A0BB9 - Unknown error 0x800A0BB9 - Source: "(null)" - Description "(null)" - Command "ConnectionItem::ConnectToDB"

[20000] (04/22 16:42:45.996):{0x1FF8} [CBESDBInstaller::Connect] : Pool failed to initialize

====== END OF LOG ======



BESXinstall13.jpg
0
 
esmith69Connect With a Mentor Commented:
no, it looks like it's connecting to the correct SQL instance, which has its own "master" db.  is the username you're using a member of the local administrators group on that server?
0
 
fathermanIT ManagerCommented:
I agree with esmith69.  What are the rights of the username you are using?  
0
 
EvensTimeAuthor Commented:
I doubt this user is a local admin. Would I do that through 'Computer Management' or Active Directory?? The user is a domain admin.
0
 
esmith69Commented:
if the user is a domain admin then they're automatically a local admin. However, the user account you use for the BES installation and for running the BES services should NOT be a local admin.  See the following page for details:

http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB02276&sliceId=SAL_Public&dialogID=16846392&stateId=1%200%2016850218
0
 
esmith69Commented:
sorry...type in my last post.  I meant to say the user should not be a DOMAIN admin.  they definitely need to be a local admin on the BES server though
0
 
EvensTimeAuthor Commented:
I did know not to make the user a domain admin but I had not made them a local admin. So that is done, I need to search through the other things on this website you sent. I believe most of that was set through the Exchange Management Shell scripts we ran.

Thanks.
0
 
esmith69Connect With a Mentor Commented:
Usually the best thing to do is to create a  new domain user account, then run the powershell commands that grant that user account the required rights for BES to work. You'd also need to manually add that user to the "local administrators" group on the BES server.

If you use a domain administrator user, even if you run the commands to grant them the necessary rights, they will periodically get reset by Exchange.  By default, Exchange DENIES anyone that is a member of the domain administrators group certain levels of access and checks those permissions periodically to make sure they're still enforced.

So that is why they tell you to not use a domain administrator account.
0
 
tigermattCommented:
This question has been classified as abandoned and is being closed as part of the Cleanup Program.  See my comment at the end of the question for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.