We help IT Professionals succeed at work.

Blackberry Enterprise Server Permissions

Tim
Tim asked
on
I am having problems configuring a new BES server for our organization. The issue is this. On one of the steps it tells me to go to my Exchange System Manager\Administrative Groups\First Administrative Group\Servers\<Exchange Name> and right-click, choose properties, click security and choose\Add besadmin to the tab and give it Send As, Receive As, and Administer Information Store. Since I had a BES server already the besadmin account was already added but Send As and Receive As are checked as allow and Deny. When I try to change the settings it says that this object is inheriting its rights from the parent object and the only way to change this is to uncheck the inherit permissions from Parent. What is the Parent object?

Also, Exchange Domain Servers, Domain Admins, Enterprise Admins, and Administrator all have the Send As, and Receive As Deny setting set. I don't quite understand. I'm sure this is an issue from the previous administrator but now I am trying to correct and don't want to break the whole system trying to fix this problem. Can anyone shed some light on this?  If I uncheck the Allow inheritable Permissions checkbox will this affect all the Group\User names or just that user? Sorry for writing a book want to include as much info as possible.

Thanks
Comment
Watch Question

Top Expert 2010
Commented:
Did you add besadmin to Domain Admins and Administrator groups in AD ?

Also please check this.
Assign Local Security Policy permissions for the BlackBerry account
http://www.howtonetworking.com/email/blackberry2.htm

TimSr. System Admin

Author

Commented:
I just re-added it. It was setup like that originally but when going through the document it didn't say anything about adding those roles to that user. It probably does later in the document but I haven't got there and thought that maybe that was the problem in the beginning so I removed those roles. After thinking about it I re-added those roles to that user so that I didn't break our current BES server. I will investigate if that fixed the problem and update this question.  
Top Expert 2010

Commented:
Is the issue still open ?
TimSr. System Admin

Author

Commented:
Not really, I decided to move forward and not worry so much about the permissions, since the other BES is working, so I tried the MAPI test and it failed. What is the name of that .dll that needs to be the same version on the Exchange server as it is on the BES?  
Top Expert 2010

Commented:
RIMesp.dll  ?