BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 06-03-2008, 08:28 PM   #1 (permalink)
LIR
New Member
 
Join Date: May 2008
Model: 8310
PIN: N/A
Carrier: Personal Argentina
Posts: 9
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default BES Installation Rights

Please Login to Remove!

Dear all:

I need to install several BES servers, and I don´t give a security administrator password to do it. I know that during the installation I have to provide the service account password (global one), but I am asking about run the installation, not that password.

If a create an AD group and assign it to enterprise BES role, will they be able to run the installation until the point where I will join them an enter the service account password?

Your help will be really appreciated

Best regards
LIR
Offline  
Old 06-04-2008, 07:52 AM   #2 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2007
Model: Z10
OS: 10.1.0.19
Carrier: Fido
Posts: 1,068
Post Thanks: 6
Thanked 30 Times in 29 Posts
Default

It is crucial BES is installed while logged on on future BES as BESAdmin service account. BESAdmin account should be just in Domain Users group , so simple ordinary domain user account with proper privileges on exchange and user's mailbox.
Offline  
Old 06-04-2008, 07:56 AM   #3 (permalink)
LIR
New Member
 
Join Date: May 2008
Model: 8310
PIN: N/A
Carrier: Personal Argentina
Posts: 9
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

So I can't use any other account than BESadmin to install a BES server?
Offline  
Old 06-04-2008, 07:59 AM   #4 (permalink)
BlackBerry God
 
penguin3107's Avatar
 
Join Date: Jan 2005
Model: iOS 5
Carrier: VZW
Posts: 11,701
Post Thanks: 1
Thanked 237 Times in 219 Posts
Default

Quote:
Originally Posted by LIR View Post
So I can't use any other account than BESadmin to install a BES server?
You can create and use any account you want, as long as it's set up with the proper permissions as per the BES documentation. The BlackBerry services on BES need to run as the user account which performed the installation of BES.
__________________
BCSA
BES 5.0.3 MR4 :-: Exchange 2007 SP3 RU3
http://port3101.org
Offline  
Old 06-04-2008, 08:05 AM   #5 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2007
Model: Z10
OS: 10.1.0.19
Carrier: Fido
Posts: 1,068
Post Thanks: 6
Thanked 30 Times in 29 Posts
Default

What is such a big deal about passwords? You can always change it later and assign people to a roles through the BES itself...
Offline  
Old 06-06-2008, 03:27 PM   #6 (permalink)
LIR
New Member
 
Join Date: May 2008
Model: 8310
PIN: N/A
Carrier: Personal Argentina
Posts: 9
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

The big deal is that they don't wanna give any exchange permissions to local administrators. Only Install and admin local BES server. What about those?

1. add-exchangeadministrator "Service Account Name" -role ViewOnly Admin
2. set-mailboxserver "Exchange Server Name"|add-adpermission -user "Service Account Name" -accessrights ExtendedRight -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin.

They don't want to give exchange permissions, but they want they install BES server by they own.

Best regards
LIR
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright © 2004-2014 BlackBerryForums.com.
The names RIM © and BlackBerry © are registered Trademarks of BlackBerry Inc.