I am using BESUserAdminClient.exe to add users to BES.
I have a number of users that cannot be added for some unknown reason. I want to know how to troubleshoot this problem:
BESUserAdminClient.exe -p mypassword -add -u "/o=EXCHORG/ou=First Administrative Group/cn=Recipientsfirstname.lastname@example.org" -b BLACKBERRY1 -n BLACKBERRY2 -w mypass |
[11:03:18] BESUserAdmin::main - Log Start
[11:03:20] BESUserAdmin::DoAddUser - (/o=EXCHORG/ou=First Administrative Group/cn=Recipientsemail@example.com) Preparing to add user...
[11:03:20] BESUserAdmin::DoAddUser - (/o=EXCHORG/ou=First Administrative Group/cn=Recipientsfirstname.lastname@example.org) Problem adding user to BES Instance BLACKBERRY1. Error Code: -21 (User does not exist.)
[11:03:20] BESUserAdmin::main - Log End
As you can see from above, I using the user's exchangeLegacyDN value to identify the user account, however the BESUserAdminClient.exe cannot find the user.
I am sure the exchangeLegacyDN value I am using is correct because I can search for this user in Active Directory with it and successfully find the user.
If I use the user's email address (instead of legacyExchangeDN), BESUserAdminClient.exe will successfully add my user.
I do not understand why some users cannot be added if I use their legacyExchangeDN, while other users can. I cannot see anything different about the users that would prevent this.
You can also see from the command above that I am targetting a Blackberry User Administrative Service which is installed on a server named BLACKBERRY2. The Blackberry User Administrative Service is running as BESAdmin. If I log into windows with BESAdmin, the user is able to search ActiveDirectory using the above exchangeLegacyDN value and find the user no problem.
Why can't the BESUserAdminClient.exe client find this user? How do I troubleshoot this problem? I cant find any documentation on this.