Blackberry Professional Software and SBS 2003 R2

[jralph]

I am really stuck here. I have Blackberry Prosessional Server installed on a SBS 2003 SP1 server. I purchased a new server configured it, created the a BESadmin account with send as permissions (went through every article I could find and made sure that all permissions were correct). But I still cannot activate devices either wirelessly or through USB. The error message I am getting indicates a permission error, however I have checked and re-checked my settings. RIM claims that they do not support R2. Has anybody been successful with R2? If so are there any tricks?
The errors I am getting are the follwing. When assigning the device via USB:
The user is not yet know to the blackberry again.
I also see the following in the MAGT log:
[40430] (04/06 20:15:50.031):{0x918} {myuser@mydomain.com} MAPIMailbox::MAPIMailbox(2) - Mailbox opened on session 0x013c25f8 (RPMSVR)
[40405] (04/06 20:15:50.062):{0x918} {myuser@mydomain.com} MAPIMailbox::OpenIPMSubtree - OpenEntry (0x8004010f) failed
[40205] (04/06 20:15:50.078):{0x918} MailboxManager::CloseMailboxSession - closing session
[20154] (04/06 20:15:50.078):{0x918} User myuser not started

[GaryCutri]

This error generally occurs when the Exchange permissions haven't been set correctly. As a quick summary I have outlined the steps below to install BlackBerry Professional. Can you please confirm these against the steps you took to install the software?

1. Create a new user called BESadmin and ensure you create a mailbox. Ensure this user is ONLY a member of "Domain users"

2. Make BESadmin a local Administrator of the server. This is done in AD via the "Built-in" Administrators group

3. Go to Admin Tools on open "Domain Controller Security Policy" and expand the "Local Policies" and "User Right Assignment". You need to add BESadmin to "Log on Locally" and "log on as Service".

4. Open Exchange System Manager and right mouse click on "DOMIANNAME (Exchange)" and select Delegate Control. Follow the steps and add BESadmin as an Exchange View Only Administrator.

5. In Exchange manager expand the servers folder and right mouse click on your server name and select properties. On the properties windows select BESadmin and add the permissions "Administer Mailbox Store, Receive As, Send As". Then under your server name select "First Storage Group" and right mouse click "Mailbox Store (SERVERNAME)" and select properties, from the security tab ensure the BESadmin permissions have propagated down (e.g. you need to ensure BESadmin is present with "Administer Mailbox Store, Receive As, Send As" rights).

6. Open Active Directory and from the View menu select "Advanced Features". Then go to each user that will be added to the BES and open their properties, go to the security tab and add the user BESadmin and add the security permission "Send As". (This will overcome some MS patches that prevent BES sending emails)

8. Log on as BESadmin and install the BES software. Follow the prompts of the install and the server will be required to restart half way through the install. Restart the server and log back on as BESadmin and the install will continue. (Make sure the Connect Test works and the SRP ID etc is validated during the install)

9. After the install is finished open BlackBerry Manager, an error will appear about MAPI client which you can just hit OK. The MAPI setting windows will appear so just add the server name back in and select "Check Name", if it resolves just hit OK and the manager will start.

[jralph]

Yes, I have followed those exactly. Still no go. I have even uninstalled and reinstalled the server and recreated the DB.
I ran the BBsrpTest utlity and everything came back ok.
The one thing I just noticed is that I am on Exchange SP1. Not sure if that makes a different, but I am going to try to apply SP2.

[GaryCutri]

Yes, I have followed those exactly. Still no go. I have even uninstalled and reinstalled the server and recreated the DB.
I ran the BBsrpTest utlity and everything came back ok.
The one thing I just noticed is that I am on Exchange SP1. Not sure if that makes a different, but I am going to try to apply SP2.

From the command line go to "<drive>:\Program Files\Research In Motion\BlackBerry Enterprise Server\Utility" and run IEMSTest.exe and ensure you test both MAPI files against the account you are trying to activate (Please post back the results). Also I have updated step 5 above so please check the additional step included (i.e. Mailbox Store Permissions).

[jralph]

Looks like the permissions did NOT propogate down to the Mailbox Store. I have added those.
Also I have 2 MAPI profiles.
Blackberry - this one works
Outlook - This one shows a blank screen in the Select Mailbox box. So it fails.

[GaryCutri]

Looks like the permissions did NOT propogate down to the Mailbox Store. I have added those.
Also I have 2 MAPI profiles.
Blackberry - this one works
Outlook - This one shows a blank screen in the Select Mailbox box. So it fails.

On the Mailbox Store Security tab go to “Advanced” and ensure "Allow inheritable permissions from the parent ... etc" is selected. If you have Outlook installed on the server is "Highly" recommended that you uninstall it. Also it is recommended that you remove and the re-add these users now that the BES has the correct permission to Exchange. Due to your previous error it is common that once users are removed you may not be able to re-add them as it may believe they already exist, if this happens please follow these steps:

Open the command prompt and type osql -E and then enter the following commands:

1>use BESMgmt
2>select DisplayName from UserConfig
3>go

A list of users will now be displayed, note down the user that can't be removed e.g. Gary Cutri (This example name has been added to the next step)

1>use BESMgmt
2>delete from UserConfig where DisplayName="Gary Cutri"
3>go
1>exit

[jralph]

Ok, I made sure that permissions were inherited on the mailbox Store.
Outlook was installed for testing purposes, but uninstalled.
I just used MS MAPI Profile manager to remove the leftover profile (kb228736).
Hopefully this should take care of the issues.
Thanks for your help and quick responses.

[GaryCutri]

Ok, I made sure that permissions were inherited on the mailbox Store.
Outlook was installed for testing purposes, but uninstalled.
I just used MS MAPI Profile manager to remove the leftover profile (kb228736).
Hopefully this should take care of the issues.
Thanks for your help and quick responses.

Just in case you have issues removing and re-adding users I have added some addition steps above. Please post back if you have any further issues.

[jralph]

Problem solved.
It was a combination of the bad MAPI profile and permissions on the Mailbox Store that had not propagated.
Thanks again

[GaryCutri]

Problem solved.
It was a combination of the bad MAPI profile and permissions on the Mailbox Store that had not propagated.
Thanks again

It's great to hear you got it all sorted.