john pfeiffer
  • Home
  • Categories
  • Tags
  • Archives

blackberry administration service unable to retrieve specific device attributes

"blackberry administration service" was unable to retrieve specific device attributes

A fun error when trying to use the Blackberry Administration Service to assign a device!

OBVIOUS SOLUTIONS:

  1. Delete and recreate the User

  2. BlackBerry Solution topology > BlackBerry Domain > Component view > Edit (BlackBerry Administration Service)>BlackBerry Web Desktop Manager information>Allow user wireline activation: Activate any PIN. Save and try again

  3. Wipe the device and try again

BUT... Check permissions on the Exchange Server (for your BESADMIN)

In Exchange Server -> dsa.msc (active directory) check on the User that you are trying to assign the device to, (Exchange Advanced Tab -> Mailbox RightS)

It should have Read permissions and Full Mailbox access...

Log into your BESX server, run a command prompt (cmd.exe)

cd C:\Program Files\Research In Motion\BlackBerry Enterprise Server\Utility 
IEMSTest.exe

Choose the MAPI profile of the BESADMIN (e.g. Blackberry)

Choose a user and click OK ... it should return "Active Directory permissions test completed success"

IF NOT, SOLUTION:

PERMISSIONS Exchange Server: Start > Programs > Microsoft Exchange > System Manager Administrative Groups > First Administrative Group > Servers > right click SERVERNAME (properties) Security -> find the BESADMIN and enable checkboxes:

* Administer Information Store
* Send As
* Receive As

(Apparently if you are giving Blackberrys to Domain Admins then you may have to explicitly give permission as well)

dsacls "cn=adminsdholder,cn=system,dc=domainname,dc=c om " /G "DOMAINNAME\BESadmin:CA;Send As"

http://www.blackberry.com/btsc/viewContent.do?externalId=KB02276

OTHER PERMISSIONS YOU MIGHT HAVE MISSED?

PERMISSIONS Exch 2k3 System Manager -> Administrative Groups right click the Group for your BES (e.g. First Administrative Group) -> Delegate Control -> Add Browse -> Role = Exchange View Only Administrator

PERMISSION SEND AS: On the domain, dsa.msc From the Active Directory "View" option choose Advanced Features

A.  Right click on the root of the domain for Properties -> Security -> Advanced
    Add BESADMIN and Apply Onto = User Objects (dropdown) , Allow = Send As (checkbox)

B.  Maybe? more secure: only right click on each OU or user that will be using Blackberry and
    give the BESADMIN "Send As" permission

  • « blackberry enterprise server express install on win2k3 for exch2k3
  • Win CE char buffer List v2 »

Published

May 3, 2010

Category

research

~326 words

Tags

  • administration 1
  • attributes 2
  • blackberry 4
  • device 2
  • research 199