BBAdmin's BES Prerequisites Thread - BlackBerryForums.com : Your Number One BlackBerry Community

BBAdmin · 08:05 AM

One of the painful elements of implementing BES is the way in which RIM write the checklists. I often come across people who are not quite sure what they need to do in terms of prerequisites . The problem I think is not so much the complexity, but the way in which the checklist element of BES is laid out. RIM also make this worse by segregating the checklist on the basis you may want to install various BES components on different machines, and most of us don't need this. To try and make the process as simple as possible I have decided to write up a checklist which, although largely taken from RIM's documentation, I have added my own experiences and ways of explaining each element in the hope that if you need it, you will find my documentation simplier to follow!!!

Now, a couple of footnotes; We know you can fudge a BlackBerry Server to work on an Exchange box, and we know you can get away with installing it on a machine with perhaps lower than recommended specs (depending on the size of the user base), but my theory behind the below is on the fact that most people want a BES server which they can get support on from RIM, therefore my checklist ensures a supported configuration. Also please note my checklist is based on an implementation for Exchange 2003.

To prevent this thread getting cluttered please only post your thanks, or your recommendations (or corrections on the basis I may have gotten something wrong). I don't want to hear "you can install it on the Exchange Server"!!! Post your corrections and I will ammend this post so we always have the most up to date information at the top of the thread!!

BES Prerequisites for Exchange 2003

Hardware Requirements

RIM’s minimum recommendations for the hardware on which you want to run BES are:

Intel Pentium IV processor (2GHz or higher)
1.5GB RAM
1GB of free disk space

Your BES should also be located near your Exchange Server to avoid issues with latency

Network Environment & Firewall Configuration

Do not put the BES in a DMZ

Configure your firewall to initiate a bi-directional TCP/IP connection to an external server on port 3101

Verify that the firewall can resolve Internet addresses using DNS

If using a proxying firewall, ensure that the proxy is transparent

SPAM & Anti Virus Systems

You must allow .DAT file attachments to pass through to users mailboxes for Enterprise Activation

You must ensure your Anti SPAM software does not prevent activation messages reaching users’ mailboxes. The best way to configure this is to allow all emails from *.blackberry.net

BES Software Requirements

Your BES server will need to run Microsoft Windows 2000 (Server or Advanced Server editions) or Microsoft Windows Server 2003 SP1

You will need to install Microsoft Exchange 2003 System Manager ONLY (do not install a full Exchange Server on the BES computer)

Microsoft Internet Explorer version 6.0 or later

Adobe Acrobat Reader 3.0 or later (to read the user guides)

You must install MSDE 2000 Release A or SQL 2000 on the same computer as the BlackBerry Enterprise Server. You can also utilise a remote SQL server if required.

Microsoft Exchange Infrastructure

Microsoft Exchange 2003 native environment

Any Microsoft Exchange service packs that are installed on your mail server must also be installed on the BES computer

Do not install Microsoft Outlook on the computer on which you intend to install BES

Install and register the cdo.dll hot fix in C:\Program Files\Exchsrvr\BIN\ on the BES computer to obtain the correct Messaging API (MAPI) version. The version number on the BES computer must be the same or higher than the CDO.dll on your Exchange Server

Verify that the BES is in the same Microsoft Exchange domain as your messaging server

Configuration Database

If you intend to install your database on the same computer as BES, install one of the following database programs:

1. Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)

2. Microsoft SQL Server 2000 Service Pack 3a

3. Microsoft SQL Server 2005 (Professional or Enterprise)

If your configuration database is on a remote server, you must enable network protocols to make a connection

Microsoft SQL Server must not be installed with case-sensitive collation settings. Use the default case-insensitive collation settings.

Install one of the following Microsoft Data Access Component (MDAC) versions on the computer where you plan to install the BlackBerry Enterprise Server:

1. MDAC 2.8 with Security Patch MS04-003 (version 2000.85.1025.00)

2. MDAC 2.8 Service Pack 2 (version 2000.86.1830.00)

If you are using Microsoft SQL Server, download and install the appropriate Java Database Connectivity (JDBC) driver.

Microsoft SQL Server 2000 driver for JDBC Service Pack 3: Visit
Downloads for Microsoft SQL Server 2000 for more information

Microsoft SQL Server 2005 driver for JDBC: Visit
Downloads for SQL Server 2005 for more information

Database Permissions

If creating the configuration database on the BES computer, assign System Administrator permission

If creating the configuration database on a remote database server during the BES installation, assign Server Administrator and Database Creator permissions

BESAdmin Permissions

Create a Windows 2000 Domain User to act as your BES service account and create an Exchange mailbox for the newly created user.

Initialize the mailbox by sending a test message to the newly created service account mailbox

The service account requires a minimum of the following Windows 2000 permissions:

Log on locally with local permissions
Log on as a service
Local administrator

The service account requires a minimum of the following Microsoft Exchange 2003 permissions:

View Only Administrator. This permission should be set to enable (at minimum) access at the Administrative Groups level in Microsoft Exchange 2003 to be able to read from the Active Directory.

Administrator Information store, Send as, and Receive as. These permissions should be set at the Microsoft Exchange server level.

You must ensure your Group Policy does not conflict and override the permissions set for the BESAdmin

Terminal Services

Windows Server 2000: If installed, select Remote Administration mode
Windows Server 2003: Do not install; select Remote Desktop mode on the System Properties Remote tab

Multiple Languages

You can enable additional languages to support Unicode in the BlackBerry Manager using the Windows regional options

Download the Microsoft Internet Explorer Multilanguage support pack and adjust the encoding to view Chinese Simplified [GB2312] and, or Chinese Traditional [Big5]

USB Hub

If you are running a USB hub, verify that the driver supports USB 1.1 compliant hubs

As a final point, when it comes to actually installing your BES server, make sure you are logged on as the BESAdmin account!!

Happy installing.

Malkier · 03-26-2007, 07:32 PM

Nice work, from what I can tell (considering the lack of sleep last night) its spot on, been meaning to write up a simplified version myself.
Now just need one for Domino and GroupWise

BBAdmin · 03-27-2007, 04:19 AM

Quote:

Now just need one for Domino and GroupWise

Feel free....I'm a bit of an Exchange monkey and hate everything else!!

technickel · 03-27-2007, 03:54 PM

Looks good. Can you create one for 2007 as well

BBAdmin · 03-27-2007, 05:40 PM

Exchange 2007 isn't supported yet, and I never fudge my BlackBerry servers with unsupported configurations...when RIM are up for it, so am I and you'll see a prerequisites thread for it then my friend!!

bertiebassett · 03:58 AM

Quote:

Originally Posted by BBAdmin

Exchange 2007 isn't supported yet, and I never fudge my BlackBerry servers with unsupported configurations...when RIM are up for it, so am I and you'll see a prerequisites thread for it then my friend!!

Indeed.

Malkier · 03-29-2007, 10:05 PM

Quote:

Originally Posted by BBAdmin

Feel free....I'm a bit of an Exchange monkey and hate everything else!!

Same, Hence why I'm in need of the other ones

Two things I would add for server preperation is installng IIS and Active Directory Management Tools (IIS more so than the later)

nakedcomputerman · 03-30-2007, 05:50 PM

Thanks for the simplified list, i am going through it now and will give you my results as soon as i get through it all. GOOD WORK it does help.

randy

BBAdmin · 03-30-2007, 07:57 PM

Cool, although I'm slightly worried from your user name that you perform all of you administration naked!!!!!

nakedcomputerman · 04-02-2007, 05:54 PM

privately yes, not publicly or within a business. It would be easy for me to do.

bbgirl · 04-03-2007, 09:24 AM

wow, how do you get to be a "super moderator?"

the guide is nice and simple. Any chances that you have written up a device troubleshooting guide?

I have to write one of those up for my helpdesk. Our Gov't. Agency (GA) is under the gun for documentation, which I have to update.

Can I borrow your simple guide?

BBAdmin · 04-03-2007, 09:26 AM

Quote:

Can I borrow your simple guide?

Help yourself, it's here for the community!!

nakedcomputerman · 04-11-2007, 03:51 PM

i love your guide and it was and is quite helpful. i have a few items i think would be helpful through my own experience that may help those starting this installation for the first time. when i get past the database issue and the mixed mode problem and figure that one out i will be near finish i think.

i am not quite ready to share my ideas yet. Thanks for the guide.

bculler2 · 04-19-2007, 01:42 PM

Greate guide... but regarding this part:

Quote:

The service account requires a minimum of the following Microsoft Exchange 2003 permissions:

* View Only Administrator. This permission should be set to enable (at minimum) access at the Administrative Groups level in Microsoft Exchange 2003 to be able to read from the Active Directory.

* Administrator Information store, Send as, and Receive as. These permissions should be set at the Microsoft Exchange server level.

Where do you set these permissions specifically?

acnst · 04-19-2007, 07:21 PM

Quote:

Originally Posted by bculler2

Greate guide... but regarding this part:

Where do you set these permissions specifically?

You need to use Exchange System Manager to set these permissions.

bculler2 · 04-23-2007, 09:51 AM

Anyway to get this thread stickied? This has been a great help.

rliebsch · 05-15-2007, 04:58 PM

One question,

Can BES reside on a Domain Controller?

SmoothRunnings · **OS:** 4.6.0.297

I read that BES can run on SBS 2003 server so a lot of what you have posted here doesn't really fit in the server configuration. Does anyone have suggests on how to do everything from start to finish?

Thanks
Andrew

SmoothRunnings · **OS:** 4.6.0.297

What the heck does this mean in English? Microsoft doesn't write crap like this without giving detail instructions how to properly configure something!! (sigh) I think RIM needs to have a lession or two in properly documenting stuff.

----snip----

The service account requires a minimum of the following Microsoft Exchange 2003 permissions:
View Only Administrator. This permission should be set to enable (at minimum) access at the Administrative Groups level in Microsoft Exchange 2003 to be able to read from the Active Directory.
Administrator Information store, Send as, and Receive as. These permissions should be set at the Microsoft Exchange server level.
You must ensure your Group Policy does not conflict and override the permissions set for the BESAdmin

----snip----

Andrew

BBAdmin · 06-05-2007, 04:02 AM

Quote:

Microsoft doesn't write crap like this

You're correct, Microsoft doesn't write crap like this.....they write crap that's so complicated you'll have no idea what you're supposed to do!! It's not RIM's job to teach people how to set permissions in Windows/Exchange click by click, and if you can't perform those basic admin tasks then you shouldn't be setting up stuff like this, so I have to say I entirely disagree with your point.

nitai · 06-06-2007, 05:05 PM

Thank you for this guide. But still got a question or two:

I have a SBS 2003 machine installed. Then another one with Server 2003 on it. On this one Server I installed the BES.

Now, where do I find the System Manager application that I need for the BES Server machine?

Do I need to configure the BESAdmin account on the Exchange Server or on the BES-Server?

During the setup of the BES I am asked to enter the address of the Exchange Server. I am guessing this is the Exchange Server address and not the BES Server one, right? So if I have an address of "exchange.mydomain.local" I would have to enter this value there?

Hope that someone can help me. Thank you.

BBAdmin · 06-07-2007, 05:13 AM

Quote:

Now, where do I find the System Manager application that I need for the BES Server machine

Exchange System Manager (which you should install on the BES)

Quote:

Do I need to configure the BESAdmin account on the Exchange Server or on the BES-Server

You're best to do it on the BES. You will have installed Exchange System Manager and will have AD access on it so nothing to stop you. You also have to give local rights on the machine though and therefore you have to do that on the BES. All of this will need to be done while logged on as Administrator though, not BESAdmin.

Quote:

During the setup of the BES I am asked to enter the address of the Exchange Server

Just enter the name of the Exchnage server - you can perform a 'check name' on this screen anyway to ensure you have it right.

BBAdmin · 06-07-2007, 05:55 AM

If you have the Exchange system manager installed on the BES then that gives you access to Exchange features and AD - what seems odd about that?????

It seems like you have some connectivity issues between your Exchange Server and your BES machine which you'll need to overcome.

jgb@etree · **OS:** 4.7.1.40

Didn't notice any mention of the MDAC 2.8SP1 or greater dependency.

Awesome writeup. Someone needed to fix RIM's pathetic documentation.

sghemati · **connection speed -** 06-25-2007, 07:02 PM

Hi,
Thanks for indications, ref. the hardware requirements (apart from the minimum indicated by RIM), is there an ideal configuration? Same question ref to data speed for BES, what is the minimum required (upload/download), and what would be the ideal?
Thanks for help!

BBAdmin · 06-27-2007, 04:02 AM

The hardware requirements in this checklist should fit up to 500 users.

In terms of netowrk connectivity between BES and Exchange (ping times):

<35ms Ideal
<50ms Acceptable
<75ms Warning
>100ms Not possible

paynet2128 · 11-07-2007, 04:10 AM

Microsoft SQL Server 2000 driver for JDBC Service Pack 3

Is this installed with the base 4.1 Install or do we need to install seperately? Before or after the BES server.

hdawg · 11-07-2007, 08:16 PM

Any and all components required for installation (per the install guide) will automatically installed (well, they'll be attempted to be installed if needed ... they could fail however if something else is messed on the server) during the installation.

rek · 11-15-2007, 02:28 PM

Given the announcement that RIM has certified support for Exchange 2007 with the BES, do you have plans to produce a set of BES prerequisites for Exchange 2007 any time soon?

hdawg · 11-15-2007, 03:10 PM

Perhaps this?

rek · 11-15-2007, 06:17 PM

Sure, I saw that, and it's certainly most helpful. But it's not quite exactly the same thing as the BES prerequisites for Exchange 2003 above, which deals with items that aren't covered in the installation guide you point to. I guess that's why they're in separate threads. In any event, assuming everything above (except the explicit Exchange references) still holds true for Exchange 2007, then it's left as an exercise for the reader to merge the two guides.

paynet2128 · 11-16-2007, 03:04 AM

What is meant by "If using a proxying firewall, ensure that the proxy is transparent"?

BBAdmin · 11-19-2007, 05:03 PM

Quote:

do you have plans to produce a set of BES prerequisites for Exchange 2007

Yep, in the process at the moment - just been a bit hectic.

mavsx · 12-04-2007, 01:09 PM

jackpot. thanks for your hard work BBadmin

BBAdmin · 12-04-2007, 03:41 PM

Ha, cheers mate! I just need to find the time to get the 2007 one done!

BBgunn · 01-16-2008, 08:55 PM

Very useful indeed. Thanks very much BBadmin.

MarkF · 01-23-2008, 10:40 AM

Thanks BBadmin, nice job and I'll shamelessly fold this info into our company's BES install doc.

Any thoughts on modifying this statement:

"Configure your firewall to initiate a bi-directional TCP/IP connection to an external server on port 3101"

to this:

"Configure your firewall to allow outbound only TCP/IP connections to the appropriate SRP address on port 3101"

Best,
Mark

SEP · **BES and partitions -** 02-20-2008, 02:10 PM

is it a good idea to create 2 partitions, small one say 15Gb just for windows server 2003 and install BES on the big D: ?

Cheers

hdawg · 02-20-2008, 04:58 PM

Quote:

Originally Posted by SEP

is it a good idea to create 2 partitions, small one say 15Gb just for windows server 2003 and install BES on the big D: ?

Cheers

This is really a preference thing ... but I generally don't partition. Rather, I manage my disk space and monitor the usage. Having additional partitions always causes confusion and wasted space IMO.

Lamer980 · 07-30-2008, 05:53 AM

Nice information dear! thanks! very kind of you!