[HNevels]

I know this discussion has been earlier. Still al solutions given doesn't work for me.
Situation:
Server 1:
Windows 2008 server R2 Standard SP1
Exchange 2010 server installed SP2 on it.


Server 2:
Windows 2008 server R2 Standard SP1
Blackberry Enterprise Server for Microsoft Exhange 5.0.3 MR2 (Bundle 21)

Created a user called Bes.Admin.
Gave it rights via:
get-mailboxserver <Server1> | add-adpermission -user BES.Admin -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

This is wat i get when i retrieve the adpermission:
User ExtendedRights AccessRights
---- -------------- ------------
Domain\BES.Admin {Self, WriteProperty, GenericRead}
Domain\BES.Admin {ms-Exch-Store-Admin} {ExtendedRight}
Domain\BES.Admin {Receive-As} {ExtendedRight}
Domain\BES.Admin {Send-As} {ExtendedRight}


We created a test user.
Tried Iemtest, result:
C:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Server\Utility>IEMSTest.exe
BlackBerry Enterprise Server Utility - IEMSTest.exe (IExchangeManageStore), Version 1.0
Copyright (c) Research In Motion, Ltd. 1999. All rights reserved.
Opening Default Message Store Mailbox - BES Admin

<test user>: Opening message store using
/o=Domain/ou=First Administrative Group/cn=Recipients/cn=<test user>
/o=Domain/ou=Exchange Administrative Group (**************)/cn=Configuration/cn=Servers/cn=<Server1>/cn=Microsoft Private MDB
<test user>: Mailbox opened successfully
<test user>: Root Folder opened successfully
<test user>: Failed to create a folder in mailbox
<test user>: CDO Server Name: <Server1>
<test user>: CDO Mailbox DN: /o=Domain/ou=First Administrative Group/cn=Recipients/cn=
<test user>
<test user>: CDO logon successful
<test user>: Get default calendar folder successful
<test user>: Get calendar folder name successful: 'Agenda'
<test user>: CDO test completed successfully
<test user>: No Send As permission for the {Domain\bes.admin} account operator.
<test user>: Initializing EWS Proxy... successful
<test user>: Configuring User... successful
<test user>: EWS calendar find request... failed

We even gave Bes.Admin full access permission on the mailbox of the <test user>
This is the result when i ask for the permission on the mailbox:
RunspaceId : <ID-Number>
AccessRights : {FullAccess}
Deny : False
InheritanceType : All
User : Domain\BES.Admin
Identity : Domain/Users/<test user>
IsInherited : False
IsValid : True

Tried again IEMtest.exe, same result.
The domain user Bes.Admin is not member of a domain admin group or something else.
On <server 2> the Bes.Admin is member of the local administrator group.

The result is that the test user don't get connected with his blackberry even i crated him as new user with an activation password.

Any suggestions and help would be appriciated.
For fast respons please email

Kind regards:
H. Nevels
Email: h.nevelsatpantheon-automatisering.nl

[knottyrope]

I think you gave too many permissions, recreate the account and give only the permissions needed

What is the BESAdmin service account?
What is the BESAdmin service account and why does ... - BlackBerry Support Community Forums