Migrated to new Exchange Server, BES quit

[ekrauska]

We migrated our Exchange server to a new server this weekend. It changed physical locations (different subnet), but there is a VPN connection between the BES Server and the new Exchange server. Everything is functioning correctly from the VPN. I successfully edited the MAPI profile, clicked Check Name and it verified the BESAdmin account against the new Exchange Server. So far so good. The only problem is, even after a reboot, we get the following errors in the event log and no mail is sent to or from the devices:

MAPIMailbox::CreateSearchFolder - Open Entry (0x80070005) failed

User <username> not started

It's a single BlackBerry Enterprise Server, version 4.1.6.19.

It sounds like it's permissions, but the migration should have carried the permissions over from the previous server. When I run the add-adpermission in Shell, it says the appropriate ACE is already present and no changes have made, so permissions seem to be out???

Any help would be appreciated. I'm stumped on this one and of course our support contract has expired!

Edit:
We migrated an Exchange 2007 Server to a different Exchange 2007 Server. Moved location to a co-locate for power and bandwidth reasons. We plan on migrating the BES server to the same colocate center, but want to get it working prior to the migration.

[Rh1noo]

If you added a new exchange server you need to give the besadmin accounts rights on the server. Exchange server rights are generally not propergated from above. Use the line below to set the permissions, adjust to suite.

get-mailboxserver <server_name> | add-adpermission -user <service_account_name> -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

[ekrauska]

Thank you. I just ran that command again and received the following which I believe means it's already set.

WARNING: Appropriate ACE is already present on object

[Rh1noo]

Have a look on the BES for a tool called IEMSTEST.exe

You can run this and select the MAPI profile to test the permissions in exchange.

[ekrauska]

Hmm. Test Completed successfully

[Rh1noo]

Just as a test you could install outlook on the BES server and check that you can open a mailbox on the new exchange server.

[jamesyouwish]

If the IEMS test past that is really odd. Are you running that test logged in as BESAdmin?