
08-25-2009, 09:52 PM
|
 |
Proprietor
|
|
Join Date: Nov 2008
Posts: 2,238
|
|
KB15923 - How to restrict address lookups by the Active Directory “Company” ...
KB15923 - How to restrict address lookups by the Active Directory “Company” attribute in one or more domains on the same BlackBerry Enterprise Server.
Environment
- BlackBerry® Enterprise Server version 4.1
- Microsoft® Exchange Server
Overview
In an organization that is using single or multiple domains it may be favorable to restrict Address Lookup Protocol (ALP) or Global Address List (GAL) lookups for a group of BlackBerry smartphone users. This may also be useful for a hosted environment where multiple companies may be sharing an organization. This can be done by restricting address lookups for BlackBerry smartphone users sharing the Microsoft® Active Directory® "Company" attribute for one BlackBerry Enterprise Server.
Resolution
The Lookup feature can be changed to prevent BlackBerry smartphone users from finding Active Directory accounts that have a different "Company" attribute in Microsoft Active Directory.
To restrict the Lookup feature, complete the following steps:
Warning: The following procedure involves modifying the computer registry. This can cause substantial damage to the Windows® operating system. Document and back up the registry entries prior to implementing any changes.
- On the Microsoft Exchange Server, verify that all BlackBerry smartphone users belonging to the organization have the same name in the Company field of their address profiles.
- Log on to the BlackBerry Enterprise Server with the BlackBerry Enterprise Server service account (for example, BESAdmin).
- Open the Registry Editor by clicking Start > Run, typing regedit and clicking OK.
- Go to HKEY_LOCAL_MACHINE\Software\Research In Motion\BlackBerry Enterprise Server.
- Right-click Agents, then click New > DWORD Value.
- Type HostedServer as the new DWORD Value name, then press ENTER.
- Double-click HostedServer.
- In the Value data field, type 1 and click OK.
- Close the Registry Editor.
- In Windows Services, restart the BlackBerry Controller service.
Important: Restarting the BlackBerry Controller service will delay email message delivery to BlackBerry smartphones. For more information, see KB04789
Additional Information
Note: By enabling the restriction of the Lookup feature, only addresses for BlackBerry smartphone users who share the same company name as the BlackBerry smartphone user initiating the lookup request will be returned. The company name is defined through the User Properties in Microsoft Active Directory Users and Computers.
__________________
http://blog.port3101.org/hdawg/
The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
|