I am an administrator for a law office. I installed the Blackberry Professional Manager for Exchange (4.1). Everything works fine except for when the client enters an appointment on her blackberry. It won't sync wirelessly to Outlook. In the event viewer on the server there is a warning about the sync failure (event id 20216).

I spent all morning trying to troubleshoot the problem. I checked the permissions, everything looked correct. I reinstalled the account in the blackberry software and wiped the blackberry (8830 curve on Sprint). No luck. Blackberry wants 250 dollars to just speak to a technician.

This software is running on a sbs 2003 with all of the updates. The tasks, address book, and email work just fine both ways. If you put an appointment in Outlook Calender, it syncs fine to the blackberry. Any help at all would be greatly appreciated.

I have been reading through the forums and so far a lot of the resolutions are for people with stand alone blackberry servers(or so it seems). I have installed a the Blackberry Professional Manager for Exhange on the SBS 2003 Server. It's a small network of 5 computers.

I will give an example of resolutions that don't fit,

I keep reading about the CDO.dll file being the wrong version #. But on my system there is only one CDO file. It's in the C:\Program Files\Exchsrvr\bin

Now I don't know if this has something to do with it but the DATA for Exchange is on my DATA mirror (E: Drive). The Exchange program file are on the C

Is it just happening to one of the users, or all of them?

There is only one user, one blackberry

Just to update, One solution is to make sure the BESAdmin isn't a domain Admin. So I took it out of the group, didn't fix

this is the warning in the Windows application event log

Blackberry Messaging Agent Server Agent 1

Event ID 20216

Description:
Synchronize() failed: ERR_FAIL, Tag=2982

the version # is 4.1.4.17

Are there any updates for this software that I am missing?

care to post your logs from a given day and I'll take a look at them? Zip up the entire days contents, and PM me where to get them.

Thank you I will do that, also I set this BPS Software under the Administrator account. I have logged in with the BESAdmin account on the server and stayed logged in locally throughout this process. All the services seem to be running (read somewhere there can be problems if you didn't install under the BESadmin account

Sorry, what does PM stand for?

does it stand for Personal Message?

P.S. new to the forum

Yes, PM is a 'private message'. Click on hdawg's name and there is an option to send him private message that only he will see.

He's a good chap to have helping you.

hdawg, I sent you a PM

sorry for the delay, I do IT work for many companies and stay pretty busy

Give these a review: KB05270 - One-way wireless calendar synchronization for one or more BlackBerry users

One way Calendar Tips/Fixes

Well, I tried to set all of the Blackberry services (there are about 6 of them) to run under the BESAdmin profile. Right now they are running under the Administrator account. It made everything stop working and I had to revert them back. Everything works again except for Calender. I did find in the logs that it's a permission issue but I have gone over every step and I can't find the permission that is incorrect.

Karama,
it does most likely not help only to change the account the services are running under.
login under the besadmin account, again install the Blackberry-Server software.
Maybe, to avoid trouble, first, change the account of the Services, also grant the besadmin account the right to run as a service.

Also complete all steps as outlined in the link hdawg posted under "Cause 2"

The services should be running as BESAdmin. It appears as though when you installed BES you didn't do it as the BESAdmin account. When you granted permissions during initial config did you do it for the administrator account or BESAdmin account? BlackBerry services should not be running as a Domain Admin.

Your right, I installed it under the administrator account (throught terminal services). But I did follow the white papers on creating the besadmin account and the permissions it needed before I installed the Blackberry Server Software.

Are you saying that if I changed the services back to run under BESAdmin and took it out of the Domain Admin group, that combination might fix the problem. I think I have tried both fixes but not at the same time

Also, the server console is logged in as Besadmin

Yes, do both it'll most likely fix it. ... that said, you need to do it to continue troubleshooting.

Okay, I got the calender fixed by removing from domain admin group, stopping all the blackberry services, i changed the account that they started under to the besadmin account. Logged off, logged on as besadmin and started all of the services. Then tested and it fixed the two-way syncing of the calender. I thought everything was good but now the user can't send email from the blackberry. Everything else is working and the email was working before I did my fix for the Calender. I am wondering if this BPS Software is worth the trouble Any help would be great

Okay, I am confused. I still had the account in the administrators group, not the domain admin group. I took it out of that group. After rebooting I saw that half the services weren't starting. I tried logging into the besadmin account and start the manager software and I was getting errors and it asking for account information for the database to run. I hit cancel and tried starting the blackberry services and they wouldn't start. I had to put the account back into the administrator group to get the software to run again. What am I doing wrong!!!

You really need to read through the installation documentation for BPS. It explains the permission requirements ... KB02276 - Assigning permissions for a BlackBerry Enterprise Server service account - Port3101.org : Your BES Connection

no offense but I have gone over these permissions ad nauseam. The email was working fine until i fixed the calender. Do i need to remove and reapply the persmissions because they all look correct. Here is one of the errors.

MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed

The besadmin must be be a member of the local administrators group. However, if you install on a Domain Controller (which is the case because this is a Small Business Server), there is no local administrator group.
In this case the besadmin user must be a member of the domain wide administrators group, but not member of the domain administrators group

again add the besdadmin user to the administrators group. Then fix the other problems.

in other words; fix the permissions.

No offense, but your ad nauseam is apparently not good enough. Maybe you should just create a new account to use as besadmin ... KB04293 - How to switch BlackBerry Enterprise Server service accounts - Port3101.org : Your BES Connection

I did add it to the administrators group, not the domain admin group and the email isn't working (but the services are loading)

Then, do a reinstall of the BPS software as the besadmin user, after that, apply any service-packs/updates if neccesary. That should not hurt. I dont think you will loose any vital information.
When I switched from a Windows 2000 Server to 2003 I also had similar problem (on 2000, BES/BPS can be run as administrator). Reinstalling helped, and, all User information was kept.

cool, i do appreciate the help. I want this software to work and it has been a little frustrating. The client is getting annoyed because it was my idea to go with this software.

Well, I setup a new service account, did exactly as the instructions said, and this is what shows up in the event log

first message in event log MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed

second message in event log Send() failed: ERR_SUBMIT_MAIL, Tag=8386

email still not sending but everything else is working

have you tried to:
verify the BESAdmin mapi profile, and then
(logged in as the besadmin account )
go to the /programs/Research in motion/Blackberry Enterprise Server/utility
execute: iemstest.exe
choose the user in question from the list.

what is the output ?

could this:
Microsoft patch - Blackberry workaround - Discussed in BES Admins & Professionals forum - PinStack.com - Smartphone Professionals Alliance.
be a reason ?

To actually check, if the besadmin user has send as and receive as permissions:
In active Directory and users, under View, check Advanced functions,
now, open the properties of a user, under Security, advanced, you can see all permissions to the user account.
There is also a button like "reset to default settings"

From here you also can check the effective permissions to a users mailbox. Choose the besadmin account to verify and check if the "receive as" and "send as" permissions are checked for a user account.

I ran the test, a dos box opened i saw something running, and then it closed, don't know what happened or where the output is

don't know if i did it right, it had two default profiles to pick from
Blackberry Manager
Blackberry Server

I picked blackberry manager

Then I selected the user that can't send mail

you have to open a dos/cmd box before you run the command.
then execute the command from the dos box.

Okay, here is something weird. When I go to the advanced under security policy under the domain, not only do i see besadmin2(the new service account) listed to send as which is correct, I see an account unknown also listed to send as
Account Unknown(S-1-5-21-1854294705-1306172298-2619958573-1156)

Is that causing the problem?

I dont think so.
As long as your besadmin2 has send and receive as permissions that should be ok.

what group belongs your user to ?
He should not be a member of any special group, only belong to the users group.
not: administrators, domain admins, printer operators ...

Well, a few posts back it was said that it was okay to be a part of the administrators group

It is in
Domain user
administrators
remote desktop users

remove the user from the administrators group.
the besadmin user must be member of the administrator group,
however, not the user which owns the blackberry.

okay, remove the user with the blackberry from certain groups, which groups should i let the user be a part of? this is a sbs 2003 installation

domain users and remote desktop this is ok.
the groups which a user is member of when you create him through the wizard + remote desktop should be ok.

and:
try the iemstest.exe utility.