[quentin]

I am using BESUserAdminClient.exe to add users to BES.

I have a number of users that cannot be added for some unknown reason. I want to know how to troubleshoot this problem:

BESUserAdminClient.exe -p mypassword -add -u "/o=EXCHORG/ou=First Administrative Group/cn=Recipients/cn=quentin@company.com" -b BLACKBERRY1 -n BLACKBERRY2 -w mypass

[11:03:18] BESUserAdmin::main - Log Start

[11:03:20] BESUserAdmin::DoAddUser - (/o=EXCHORG/ou=First Administrative Group/cn=Recipients/cn=quentin@company.com) Preparing to add user...

[11:03:20] BESUserAdmin::DoAddUser - (/o=EXCHORG/ou=First Administrative Group/cn=Recipients/cn=quentin@company.com) Problem adding user to BES Instance BLACKBERRY1. Error Code: -21 (User does not exist.)

[11:03:20] BESUserAdmin::main - Log End

As you can see from above, I using the user's exchangeLegacyDN value to identify the user account, however the BESUserAdminClient.exe cannot find the user.

I am sure the exchangeLegacyDN value I am using is correct because I can search for this user in Active Directory with it and successfully find the user.

If I use the user's email address (instead of legacyExchangeDN), BESUserAdminClient.exe will successfully add my user.

I do not understand why some users cannot be added if I use their legacyExchangeDN, while other users can. I cannot see anything different about the users that would prevent this.

You can also see from the command above that I am targetting a Blackberry User Administrative Service which is installed on a server named BLACKBERRY2. The Blackberry User Administrative Service is running as BESAdmin. If I log into windows with BESAdmin, the user is able to search ActiveDirectory using the above exchangeLegacyDN value and find the user no problem.

Why can't the BESUserAdminClient.exe client find this user? How do I troubleshoot this problem? I cant find any documentation on this.

[hdawg]

The proper syntax for adding a user on BES Exchange is to provide their "mailbox name" or the attribute Mail

[quentin]

Originally Posted by hdawg

The proper syntax for adding a user on BES Exchange is to provide their "mailbox name" or the attribute Mail

Could you give me an example of a user's "mailbox name"?

I thought the exchangeLegacyDN properly identified a user's mailbox name. In my example, I used "/o=EXCHORG/ou=First Administrative Group/cn=Recipients/cn=quentin@company.com"

When the exchangeLegacyDN fails with an error -21 (user does not exist), I've been able to use the mail attribute to add the user. But that does not explain why the exchangeLegacyDN couldn't be used, and that is what I am trying to find out.

If the exchangeLegacyDN attribute does not identify the user's "mailbox name", which user attribute does?

[hdawg]

Use the AD attribute Mail