View Single Post
Old 02-24-2006, 03:59 PM   #6
BlackBerryLinks
Talking BlackBerry Encyclopedia
 
Join Date: Apr 2005
Location: The Netherlands
Model: 8800
Carrier: Vodafone
Posts: 374
Default

Rights of Service account:

Support - MAPI_E_FAILONEPROVIDER(8004011D)
Last Updated: 03 January 2006
Article Number: KB-00886
Summary

This article applies to the following:

* BlackBerry Enterprise Server® 2.1 through 3.6
* Microsoft® Windows® 2000
* Microsoft Windows Server™ 2003
* Microsoft Exchange 5.5, 2000, and 2003

Problem

Calendar entries are not synchronized from the BlackBerry® wireless device to Microsoft Outlook® on the user’s desktop computer.

You receive the following error in the BlackBerry Enterprise Server debug log:

[3] (04/04 15:50:55):{0x182} Server = mcdc-atl-1, Mailbox = /o=CDC/ou=Company/cn=Recipients/cn=user Description = You do not have permission to log on. [Microsoft Exchange Server Information Store - [MAPI_E_FAILONEPROVIDER(8004011D)]]
Cause

The BlackBerry Enterprise Server administration account does not have the required permissions.

If you are using Exchange Server 2000 or Exchange Server 2003, the BlackBerry Enterprise Server administration account is not granted one or more of the following permissions at the mailbox store and public folder store levels:

* Send As
* Receive As
* Administer information store

If you are using Exchange Server 5.5, the BlackBerry Enterprise Server administration account is not granted the Service Account Admin permission at the site, configuration, public information store, and private information store levels.
Resolution

Grant the required permissions to the BlackBerry Enterprise Server administration account by completing the steps that correspond to your environment.

Note: In order to complete the resolution steps, you must be logged in with a service account that can grant permissions to the BlackBerry Enterprise Server administration account.

Microsoft Exchange 2000 and Exchange 2003 Environment

1. Grant to the BlackBerry Enterprise Server administration account the View Only Administrator permission to enable read access of the Microsoft Active Directory®:
1. Open the Microsoft Exchange System Manager.
2. Right-click an administrative group folder and select Delegate control.
3. Click Next.
4. Click Add.
5. Click Browse.
6. Select your BlackBerry Enterprise Server administration account from the list and click OK.
7. In the Delegate Control dialog box, select Exchange View Only Administrator from the drop-down list and click OK.
2. Grant Send As, Receive As, and Administer Information store permissions at the server level:
1. Open the Microsoft Exchange System Manager.
2. Expand Administrative Groups.
3. Right-click on the Exchange Server(s) that will be hosting the BlackBerry users’ mailboxes.
4. Click Properties.
5. Click the Security tab.
6. Click Add.
7. Select the BlackBerry Enterprise Server administration account.
8. In the Permissions window, verify that Send As, Receive As, and Administer Information store permissions are granted.
3. Grant Send As, Receive As, and Administer Information store permissions at the mailbox store level:
1. Select the mailbox store(s) for the Exchange Server(s) that will be hosting BlackBerry users’ mailboxes.
2. Click Properties.
3. Click the Security tab.
4. Select the Allow inheritable permissions from parent to propagate to the object option.
5. In the Permissions window, verify that Send As, Receive As, and Administer Information store permissions are granted.
4. Grant Send As, Receive As, and Administer Information store permissions at the public folder store level:
1. Open the Microsoft Exchange System Manager that is installed on the server(s) where the BlackBerry users’ public folder store resides.
2. Expand Administrative Groups.
3. Expand Servers and storage groups.
4. Right-click on the public folder store that will be hosting the BlackBerry users’ folders.
5. Click Properties.
6. Click the Security tab.
7. Click Add.
8. Select the BlackBerry Enterprise Server administration account.
9. In the Permissions window, verify that Send As, Receive As, and Administer Information store permissions are granted.

Microsoft Exchange 5.5 Environment

In a Microsoft Exchange 5.5 environment, your BlackBerry Enterprise Server administration account requires the Service Account Admin permission to the sitecontainer, configuration container, public information store, and private information store.

1. Grant the Service Account Admin permissions to the site by performing the following steps:
1. Open Microsoft Exchange Administrator.
2. Select the Site container.
3. Click Properties.
4. Click the Permissions tab.
5. Grant the Service Account Admin permission to the BlackBerry Enterprise Server administration account.
2. Grant the Service Account Admin permission to the configuration container by performing the following steps:
1. Select the Configuration container.
2. Click Properties.
3. Click the Permissions tab.
4. Grant the Service Account Admin permission to the BlackBerry Enterprise Server administration account.
3. Grant the Service Account Admin permission to the public information store by completing the following steps:
1. Select the public information store that will be hosting BlackBerry users’ accounts.
2. Click Properties.
3. Click the Permissions tab.
4. Grant the Service Account Admin permission to the BlackBerry Enterprise Server administration account.
4. Grant the Service Account Admin permission to the private information store by performing the following steps:
1. Select the private information store that will be hosting BlackBerry users’ accounts.
2. Click Properties.
3. Click the Permissions tab.
4. Grant the Service Account Admin permission to the BlackBerry Enterprise Server administration account.

Additional Information

The BlackBerry Enterprise Server debug log contains the following [MAPI_E_FAILONEPROVIDER(8004011D)] error:

[3] (04/04 15:50:41):{0x184} *** CDO *** CDOCalendar::Initialize(...) - Code = 80040705, WCode = 0505, Code meaning = IDispatch error #1285,
[3] (04/04 15:50:41):{0x184} Server = mcdc-atl-1, Mailbox = /o=CDC/ou=Company/cn=Recipients/cn=user Description = You do not have permission to log on. [Microsoft Exchange Server Information Store - [MAPI_E_FAILONEPROVIDER(8004011D)]].
Offline