[Hannah814]

Are you picking a users name when running the IEMStest? Ie run it and when you select a user run it for yourself to test the permissions.

I had a similar problem with a bes that migrated users from exchange 2003 to exchange 2010! When I ran the IEMstest it was picking up the wrong exchange still. Very strange.

If you create a test user that was created on the exchange 2010 (Don't use a user from the old exchange) can you add them and provision a blackberry up for them on the new BES?

Have you checked the besadmin permission such as Administer information store also?