1. GaryCutri's Avatar
    Install BES 4.1.3 or higher in an Exchange 2007 Environment
    By Gary Cutri BlackBerry Support Forum - Asia Pacific
    Version 1.0

    Note: In an Exchange 2007 environment BlackBerry Enterprise Server cannot be installed on the mail server as the BES software is not 64BIT compatible.

    1. On the server you have selected to load BlackBerry Enterprise Server download and install “Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1” which is available from the Microsoft Download site (a.k.a ExchangeMapiCdo.EXE). This will install the CDO and MAPI DLLs which are no longer available in Exchange 2007. This replaces the previous requirement to have Exchange System Manager installed as in Exchange 2000 or 2003 environments. The current download link is as follows:
    Download details: Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1

    2. Log onto your Exchange Server using an account which has permissions to create an account. Open the Exchange Management Console and create a service account called BESadmin.

    3. From the Exchange 2007 server open the “Exchange Management Shell” which can be found in the Exchange program group. From EMS run the following two scripts to set the delegate control and required permissions:

    get-mailboxserver <mail_server_name> | add-exchangeadministrator BESAdmin –role ViewOnlyAdmin

    get-mailboxserver <mail_server_name> | add-adpermission –user BESAdmin –accessrights ExtendedRight –extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

    4. Open Active Directory and from the View menu select "Advanced Features". Then go to each user that will be added to the BES and open their properties, go to the security tab and add the user BESadmin and add the security permission "Send As". (This will overcome some MS patches that prevent BES sending emails). Methods are available to add BESadmin "Send As" rights to all users if required but this method ensures only the required users have permissions added.

    5. Make BESadmin a local Administrator of the server where you will be installing the BES software. This is done by right mouse clicking my computer and selecting “Manage”. From Computer Management expand “Local Users & Groups” and select Groups. From Groups double click “Administrators” and add BESadmin.

    6. On the BES server go to “Administrative Tools” and open "Local Security Policy" and then expand the "Local Policies" and "User Right Assignment". You need to add BESadmin to "Log on Locally" and log on as Service".

    7. Log onto the server where you will be installing the BES using the BESadmin account. Extract the install files and run the install file. Normally you select "BlackBerry Enterprise Server" as the install option once prompted as most sites don't use the MDS services for custom applications (MDS is a much heavier install). Follow the prompts of the install and the server will be required to restart half way through the install. Restart the server and log back on as BESadmin and the install will continue. (Make sure the Connect Test works and the SRP ID etc is validated during the install)

    8. After the install is finished open BlackBerry Manager, an error will appear about MAPI client which you can just hit OK. The MAPI setting windows will appear so just add the server name back in and select "Check Name", if it resolves just hit OK and the manager will start.

    9. Within Blackberry Manager click on Blackberry Domain in the left column and then the users SERVERS tab in the centre section, select your server within this tab and view the properties below. Ensure that "SRP Status:" is Connected (This can take a few minutes the first time so refresh the screen a few times). Once your status is connected you can start adding users.

    10. Within Blackberry Manager click on your server name (The blue server) in the left column and then the users TAB in the centre section, just add a user and the click on that user. You will see all the users’ properties and a drop down menu called "Service Access” and select “Set Activation Password” and set a password of “a” for example.

    11. Turn on you BlackBerry device and ensure Wireless is enabled. Go into “Options/Settings” and “Time & Date” and set the correct zone and time etc. Then from the home screen go to enterprise activation and enter the users email address and enter the password that was set in step 10. Press the track wheel and select Activate. Within a minute you should get data returned which indicates the process is functioning correct.

    Extra Details:

    Send As Permissions
    Unlisted message error or Desktop email program unable to submit message - BlackBerry Forums

    Download and install the MAPI and CDO Clients that are missing when updating to Microsoft Exchange 2007
    Install the MAPI and CDO Clients that are missing when updating to Exchange 2007 - BlackBerry Forums
    Last edited by GaryCutri; 05-23-07 at 03:08 AM.
    05-07-07 06:47 AM
  2. anon(153966)'s Avatar
    Great post, thanks for the information. Am sure it will be useful for a lot of visitors to CrackBerry.com
    05-07-07 07:01 AM
  3. Ian#CB's Avatar
    Hi Gary,

    apologies if this is a pretty obvious questions but.....You refer in you notes "CREATING SERVICE ACCOUNT" in the EMS.

    is this meant to be a MAILBOX ACCOUNT?, if not could you please be more specific as to how you go about doing that?
    06-29-07 12:21 AM
  4. kani's Avatar
    i have a small question. does the blackberry software install server should be a child domain of the main exchnage 2007 domain ?

    or can i install the blackberry software on a computer without active directort, by just creating an administrator name besadmin.
    11-23-07 02:03 PM
  5. brucem1967's Avatar

    I am getting a DB upgrade failed. Error executing an SQL statement. during the database settings phase of the install.
    Does anyone have any suggestions?
    12-06-07 04:46 AM
  6. justina@dion-durrell.com's Avatar
    I am planning on upgrading my exchange 2003 server to exchange 2007. I have installed a BES server before in a 2007 environment but I have not migrated from one (2003) to the other (2007).
    Do you know if this can be done or do I need to start from scratch on my BES server (BES is on it's own dedicated server not on the exchange server).

    Justin in Toronto.
    12-06-07 10:39 AM
  7. alter.programer's Avatar
    as far as your migration is concerned, just make sure that your bes server's account is set up on the new device, i think in this guide the code is the mailbox bolded out item. make sure the bes server points to the right exchange box, and you are golden
    09-05-08 07:28 PM
  8. menacers's Avatar
    in all the docs i'm reading, it mentions create a service account called besadmin. i'm running exchange 2007, and i have a feeling i'm not creating this account properly.
    I can connect via outlook using accounts for all ym exchange users, but using teh besadmin account i created, i cannot connect using outlook. my problem is i get Invalid bookmark error when i check names in mapi config.

    please advise if there is a doc on creating service accounts.

    my environment is a multi GAL evironment, perhaps the besadmin account is not added to default GAL that BES is looking at? if anyone has some insight would be greatly appreciated.
    10-27-08 06:21 PM
  9. lifeisabike's Avatar
    We have just migrated to Exchange 2007 and a new BES server. Since this migration we lost the ability to download the global diretory to our BB's. Has anyone experienced this? Can anyone provide some advice or direction on solving this issue?
    07-21-09 08:06 AM
  10. amrishpatel54's Avatar
    Check all the permissions for BESAdmin (Service account) in your exchange 2007 server. Refer KB13268 from BTSC.
    08-05-09 04:15 AM
  11. eripey's Avatar
    Does the instructions work then? From what all I have read is that you don't need to install the software on the exchange server itself and its okay to install on another server on the domain?
    10-12-09 11:27 PM
  12. GlenB's Avatar
    The service account needs a whole bunch of stuff, including:
    * a mailbox
    * relevant permissions to Exchange
    * relevant permissions to the mailboxes for any BES user
    * log on locally access to the BES server
    * run as a service on the BES server

    The besadmin service account is often in the local machine administrators group but should not be placed in the domain admins group.

    @eripey - the recomendation is that BES should be installed on a member server within the domain but not on the Exchange server itself.
    10-13-09 04:47 AM
  13. GlenB's Avatar
    Here is a useful RIM KB article describing what is required for the service account....

    View Document
    10-13-09 04:49 AM
  14. eripey's Avatar
    GlenB, thanks for the info. Is the above directions correct on installing on a member server(This was actually what I wanted to do, rather than installing on the exchange server itself)?
    10-13-09 11:02 AM
  15. eripey's Avatar
    Also, I was installing the Professional express version...does this make a difference?
    10-13-09 11:09 AM
  16. GlenB's Avatar
    @eripey - member server is best and those instructions should be fine for both full BES and BPS
    10-13-09 11:19 AM
  17. eripey's Avatar
    I just tried to install the Professional software express on a member server running windows server 2008 x64 and it crashed, is this not able to run in x64?
    10-13-09 11:29 AM
  18. GlenB's Avatar
    A member server is preferred and the above should apply to both BES and BPS.
    10-13-09 12:00 PM
  19. eripey's Avatar
    GlenB, So it looks like it will not run on 2008 x64?
    10-13-09 12:34 PM
  20. GlenB's Avatar
    I dont believe that BPS supports 2008 x64, sorry eripey - somehow I missed that last post.
    10-14-09 04:18 AM
  21. eripey's Avatar
    I was able to install Blackberry professional Software, with these instructions but I also had to refer to the blackberry site for "Assigning Permisions for a Blackberry Enterprise Server service account". Everything seems to working now.
    10-16-09 11:16 AM