[SmoothRunnings]

Configuring a Microsoft Exchange 2007 messaging environment - Installation and Configuration Guide - BlackBerry Enterprise Server Express for Microsoft Exchange - 5.0.2

Before you begin:
1 On the computer that hosts Microsoft Exchange, log in using an administrator account that has the correct permission to create accounts.
2 Open the Microsoft Exchange Management Console.
3 Create an account and mailbox that you name BESAdmin.
4 To permit the BlackBerry® Enterprise Server Express Express to check if a user has permissions for a public folder, assign the Owner permission for all public folders to the administrator account.

After you finish:
1 To verify that you created the Windows account, log in to a computer using the Windows account.
2 Verify that the Windows account is not a member of the Domain Administrators group in Microsoft® Active Directory®.
3 Verify that BlackBerry device users have Read and Visible permissions to public folders.

----

The problem I have with this is that is suggests you should be able to log in to the server using the BESAdmin account but what RIM fails to understand is that BESAdmin needs network admin access to be able to log in to the server otherwise AD will simply reject the user flat out, even if you add them to the RDP security group.

I am using SBS 2008 server btw.

So what am I am really suppose to do?

Thanks
Andrew

Update:

I just noticed this too underneath the info I just posted.

Configure Microsoft Exchange 2007 permissions for the Windows account

1. On a computer that hosts the Microsoft® Exchange Management Shell, open the Microsoft Exchange Management Shell.
2. Perform one of the following actions:
* If you logged in to a Microsoft® Exchange Server 2007, type add-exchangeadministrator "BESAdmin" -role ViewOnlyAdmin.
* If you logged in to another computer, type get-mailboxserver "<messaging_server_name>" | add-exchangeadministrator "BESAdmin" -role ViewOnlyAdmin.
3. For each Microsoft Exchange Server 2007 that hosts BlackBerry® device users, type the following command: get-mailboxserver "<messaging_server_name>" | add-adpermission -user "BESAdmin" -accessrights ExtendedRight -extendedrights Receive-As, ms-Exch-Store-Admin.

In #2 is says if you log in to another computer type.... Is RIM smoking crack? You can't enter in Exchange commands on a workstation that isn't running Exchange management tools!? LoL

[siliconvalley785]

What the BESAdmin account needs is Local Admin privileges. So create the user in AD, keeping it in Domain Users only, then via the Local Computer Users/Groups, add BESAdmin to Administrators for the computer.

That should do it.

Pritesh