BESAdmin.info - Your Technical Support Source

Yahoo Buzz Technorati Stumbleupon Reddit Myspace Digg Delicious

Recommended Microsoft Active Directory groups for the BlackBerry Enterprise Server service account

Contents [show]

Doc ID: KB04557
Modified Date: 11-11-2009
Document Type: Support

Products

  • BlackBerry® Enterprise Server for Microsoft® Exchange



Environment

  • BlackBerry® Enterprise Server version 2.1 to 5.0
  • Microsoft® Exchange 2000, 2003 and 2007
  • Microsoft® Active Directory®



Overview

If the BlackBerry Enterprise Server is installed on a member server, the Windows® account should only be a member of the Domain Users group. The Windows account should not be part of any protected Microsoft Active Directory groups. For more information, see KB12309. If it is in any of these groups, BlackBerry smartphone users may experience wireless calendar synchronization issues on their BlackBerry smartphones.

By default, protected Microsoft Active Directory groups have the Deny permission set on Send As and Receive As in Microsoft Exchange 2000, 2003 and 2007 environments.

Note: The Deny permission will override any Allow permissions.

If the BlackBerry Enterprise Server is installed on a Domain Controller, the Windows account should be a member of the Domain Users group and the Built-in Administrators group.

Important: Failure to follow this recommendation may cause wireless calendar synchronization issues on the BlackBerry smartphone. Please see article KB04293 to correct this issue. Please see article KB05270 for more information on one-way calendar synchronization issues.