KB04557 - Recommended Microsoft Active Directory groups for the Windows account


Environment

• BlackBerry® Enterprise Server software version 2.1 to 4.1
• Microsoft® Exchange 2000, 2003 and 2007
• Microsoft® Active Directory

---

Overview

If the BlackBerry Enterprise Server is installed on a member server, the Windows® account should only be a member of the Domain Users group. The Windows account should not be part of any protected Microsoft Active Directory groups. For more information, see KB12309. If it is in any of these groups, BlackBerry smartphone users may experience wireless calendar synchronization issues on their BlackBerry smartphones.
By default, protected Microsoft Active Directory groups have the Deny permission set on Send As and Receive As in Microsoft Exchange 2000, 2003 and 2007 environments.
Note: The Deny permission will override any Allow permissions.
If the BlackBerry Enterprise Server is installed on a Domain Controller, the Windows account should be a member of the Domain Users group and the Built-in Administrators group.
Important: Failure to follow this recommendation may cause wireless calendar synchronization issues on the BlackBerry smartphone. To correct this issue, see KB04293. For more information on one-way calendar synchronization issues, see KB05270.

__________________
http://blog.port3101.org/hdawg/

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.