Solved

BES 5 - Moved users to new Exchange server, now they cannot send

Posted on 2011-09-02
2
521 Views
Last Modified: 2012-05-12
Migrated users to a new BES server (4.1 -> 5.0) a few days ago and all was fine. Moved a few users to a new Exchange server (2003 -> 2010) and now some of those moved users cannot send or receive email. BES is working for other users. Not really sure where to look or to make sure BES is talking to Exchange 2010 SP1 correctly.

CDO version is 6.5.8211.0
0
Comment
Question by:mvalpreda
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 
LVL 7

Accepted Solution

by:
d3ath5tar earned 500 total points
ID: 36476513
Has BES been Added to the View-Only Organization group?
Add-RoleGroupMember "View-Only Organization Managent" -Member "YourBesAdmin"

What is the scope of the BES Admin User for SendAs? Try reapplying permissions...
Add-ADPermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-AS -User "YourBESAdminUser" -Identity "DC=domain,DC=local"

If it's a new DB the user is in, have you assigned permissions on the DB?
Get-MailboxDatabase -Identity YourMailDB | Add-ADPermission -User "YourBESAdminUser" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin

Have you set the BES Throttling Policy for OAB?
New-ThrottlingPolicy BESPolicy
Set-ThrottlingPolicy BESPolicy -RCAMaxConcurrency $null -RCAPercentTimeInAD $null -RCAPercentTimeInCAS $null -RCAPercentTimeInMailboxRPC $null -EWSMaxConcurrency $null -EWSPercentTimeInAD $null -EWSPercentTimeInCAS $null -EWSPercentTimeInMailboxRPC $null -EWSMaxSubscriptions $null -EWSFastSearchTimeoutInSeconds $null -EWSFindCountLimit $null
Set-Mailbox “YourBESAdmin” -ThrottlingPolicy BESPolicy

And finally....
Is the BESAdmin user had the application permissions set for using Ex2010 EWS Service?
New-ManagementRoleAssignment -Name "BES-EWS" -Role ApplicationImpersonation -User "YourBESAdmin"

Cheers
Ad
0
 
LVL 7

Expert Comment

by:d3ath5tar
ID: 36476517
Additional.... you may also need to run a "handheldcleanup -u" from the utility folder on the bes server....
And sometimes MSExchangeIS service need to be reset....

Cheers
Ad
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
This video discusses moving either the default database or any database to a new volume.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses
Course of the Month6 days, 8 hours left to enroll

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question