"blackberry administration service" was unable to retrieve specific device attributes
A fun error when trying to use the Blackberry Administration Service to assign a device!
OBVIOUS SOLUTIONS:
-
Delete and recreate the User
-
BlackBerry Solution topology > BlackBerry Domain > Component view > Edit (BlackBerry Administration Service)>BlackBerry Web Desktop Manager information>Allow user wireline activation: Activate any PIN. Save and try again
-
Wipe the device and try again
BUT... Check permissions on the Exchange Server (for your BESADMIN)
In Exchange Server -> dsa.msc (active directory) check on the User that you are trying to assign the device to, (Exchange Advanced Tab -> Mailbox RightS)
It should have Read permissions and Full Mailbox access...
Log into your BESX server, run a command prompt (cmd.exe)
cd C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Utility
IEMSTest.exe
Choose the MAPI profile of the BESADMIN (e.g. Blackberry)
Choose a user and click OK ... it should return "Active Directory permissions test completed success"
IF NOT, SOLUTION:
PERMISSIONS Exchange Server: Start > Programs > Microsoft Exchange > System Manager Administrative Groups > First Administrative Group > Servers > right click SERVERNAME (properties) Security -> find the BESADMIN and enable checkboxes:
* Administer Information Store
* Send As
* Receive As
(Apparently if you are giving Blackberrys to Domain Admins then you may have to explicitly give permission as well)
dsacls "cn=adminsdholder,cn=system,dc=domainname,dc=c om " /G "DOMAINNAME\BESadmin:CA;Send As"
http://www.blackberry.com/btsc/viewContent.do?externalId=KB02276
OTHER PERMISSIONS YOU MIGHT HAVE MISSED?
PERMISSIONS Exch 2k3 System Manager -> Administrative Groups right click the Group for your BES (e.g. First Administrative Group) -> Delegate Control -> Add Browse -> Role = Exchange View Only Administrator
PERMISSION SEND AS: On the domain, dsa.msc From the Active Directory "View" option choose Advanced Features
A. Right click on the root of the domain for Properties -> Security -> Advanced
Add BESADMIN and Apply Onto = User Objects (dropdown) , Allow = Send As (checkbox)
B. Maybe? more secure: only right click on each OU or user that will be using Blackberry and
give the BESADMIN "Send As" permission