[marley1]

I am trying this on a new SBS 08 box.

1) I created BESAdmin
2) Assigned him in AD to the BuiltIN Administrator Group
3) Right Clicked on Top Level of Domain in AD, added BES Admin with Allow Send As only to User Object
3) Went into GPO and assigned the user to the Log On Locally
4) Went into Local Security Policy and added BESAdmin to Allow Logon Service5) add-exchangeadministrator "BESAdmin" -role ViewOnlyAdmin.
6) get-mailboxserver SERVER | add-adpermission -user "BESAdmin" -accessrights ExtendedRight -extendedrights Receive-As, ms-Exch-Store-Admin.

Loaded BES Setup.

After done, I not able to go to the websites.

Did I miss something??

Anyone make a easier guide?

[besadmin23]

can you explain "not able to go to the websites"? That could mean 100 different things. ok, maybe like 7 or 8 different things.

[besadmin23]

Also, check the tutorial vids in the top left corner.
BlackBerry - BlackBerry Enterprise Server Express Support

[marley1]

Wirelessly posted

After install I went to the configuration website for BES and it say cannot display webpage,

I have uninstalled it now gomna try reinstall tomorrow

[nobody7290]

Check if the BES services are running or not, Especially the Blackberry Administration service (I dont have a express server, but, I guess this will be the same).

[pmyersuk]

If you tying in the address manually make sure you add :3443 to the end of the address i.e. h_ttps://servername:3443/webconsole/login as it doesnt use 443 to stop apache clashing with OWA / IIS when installed on the same server as Exchange.

[marley1]

Wirelessly posted

Yeah I clicked on the link and it has the fqdn:3443 and it does it, all services look good, did I miss something messed up permission wise, does everything look like I did above, I followed a mix of the exch 07 and the sbs 03 guide

[marley1]

besadmin - i didn't even know they had a video for it, going through it now to see if i did everything right =)

[marley1]

Okay so I got it installed I can pull up the website but I can't login.

What is the username? I set the same password as the BESAdmin but wont let me log in, tried besadmin/password tried admin/password, tried the domain admine user and pass.

What did i do now?

[nobody7290]

During the installation you were asked for a password for the "admin" user.
This should work.
(in the pulldown change the login to "Blackberry Administration Service")

[mitchschwartz]

This is copied from another Forum, submitted by an A_Zimbo

Not mine, thank him, but it worked beautifully

----------------------------------------------------------------

I had about eight or nine hours trying to resolve this yesterday and this is what I finally did to get this working. I am posting this here for others who may have the same issue and hopefully it may help the OP of this thread.

I made a discovery in the Security
log of the Event viewer on my Server
that was hosting both BES Express 5.0.1 as well as Exchange 2007. They are both on the same box. The Security log entry made reference to a Kerberos right being denied to the BESADMIN active directory account around the time I tried to login to the BES Admin service website. This was irrespective of whether I wanted to login to the BES Express Admin website as BESADMIN or as another login (Say my domain admin account).

I deduced from this that when the BES Express Admin Web service needs to verify your login it is being denied some sort of Kereberos Ticket and or elevated privilege. Since the Message indicated the problem to be with the BESADMIN Active Directory user that I created for installing BESX and of course used by the BESX background services to execute under, I checked out the properties of this account I had created and made the following changes / settings.

Using Active Directory Users and Computers
I went to the users container and right clicked on the user BESADMIN and selected properties. Under the Account Tab I set the following items in the "Account Options" list at the bottom of that tab.

Use Kerberos DES etc - Checked.
This account Supports Kerberos AES 128bit encryption - checked.
This account supports Kerberos AES 256bit encryption - checked.
Do not require Kerberos preauthentication - UNCHECKED.

I rebooted the server (Not just restarting the background services!) and finally I was able to login to the BESX Administration Service web
site under BESADMIN or under my Domain Admin login ID.

Hope that helps anyone else in this predicament. It was an unnecessarily long day yesterday getting this going thanks to that one stupid little problem.

Best Wishes all

[sleeper55]

when i goto login i put in admin and the pasword i used and it tell me my password is wrongbut i know it is correct! any ideas?

[sleeper55]

mitch i think that is what my issues is, where is this "other forum" so i can try to get it resolved? i would do what that post says but when i go to "Active Directory Users and Computers" and users i dont show the user BESadmin under there (yes this user does exist though (i am running sbs2008, maybe he is using sbs2003 and it looks different or something)

[sleeper55]

mitch i found the other thread you were refering to here at this forum it is not at another forum! http://www.blackberryforums.com/bes-...n-service.html