Is there any interface, web or otherwise, that is available that will allow people with limited server knowledge to create accounts and set and reset activation passwords without worry of them getting into other areas and making changes they should not?

The Blackberry Maanger can be installed on a remote machine. A web page would be a wonderful, however not at this time.

Can it be locked down to only allow activation password resets and other user account administration?
Is "Blackberry Manager" the actual name? I don't see it after searching on the blackberry.com site.

Yes, that is what the big deal with 4.1 is; it has role based administration. This will give you more info Blackberry.com:

What Is - Role Based Administration
Last Updated: 06 March 2006
Article Number: KB-04889

I'll have to check if it's 4.1. It's more likely to be 4.0.

Regardless, we are not on the same Windows domain as the BES. Do you have to use a PC that's in the same domain as the BES and is there a solution for BES 4.0?

You don't HAVE to be in the same domain but at least you have to be on the same network. It is easier if you are. With BES 4.1 you can assign different roles to different folks.

It's the same network, but different domains and BES 4.0. No immediate plans to upgrade to 4.1.
I'm looking for a solution better/safer than having the people use a remote desktop connection directly to the BES server.

Look in to the use of the setadminkey tool that comes in the tools/utility folder on the BES CD.

Read about it in the maintenance guide that comes with the BlackBerry server.

Basically you install the BES Admin console on the user's PC and then restrict their permissions. In 3.6 / 4.0 this is the only way to do it.

While there isn't a RIM solution available, there is a community-supported tool called 'BerryStats' that can be used to reset activation passwords, provide user and device reporting, and more - - ASP and PHP versions are available, see the thread here: --> BerryStats for NonAdmins

I'm currently implementing the BESUserAdminClient tool fully into the ASP version. I only have the activation and userinfo setup, but I should have everything else squared away soon. The trick is to make it so that not just 'any' support person can delete a user, etc.

Btw, the introduction of the role-based permissions for Exchange was introduced with 4.1 - I'm not sure about Notes, though.

Regards,
Rob

where can I get the blackberry manager...I am really having a stupid day today...can't focus on anything.


I"m tired of remoting in the BES..

The BlackBerry Manager setup is part of the server installation media.

I have to be able to download it if it can be installed somewhere else...

You can just download the installation media from RIM and then run the installation on each remote PC, selecting the manager tool.

If you can get your hands on the BES Express 4.1 install, this has the same install features as the normal version, so you can get the manager that way.

Rob