HI all..thanks in advance

BB server running on windows 2003 R2 enterprise sp2.
Exchange 2008 running on 2008 enterprise
bb manager 4.1.4.17
dm 4.2.2.7
ap 4.2.2.13
exchange 2007

3 users were randomly deleted and phones reset to factory default . All info has been deleted. Here are some of the log files.


[30015] (06/19 10:33:02.148):{0x1310} Stopping handheld for Unknown.115
[30010] (06/19 10:33:02.148):{0x12E4} User jane.doe.115 shutting down...
[40020] (06/19 10:33:02.648):{0x1310} CONFIG COMMAND:eleting user .115

[30000] (06/19 10:12:41.006):{0x758} Alarm::ThreadProc: Received an alarm message
[30000] (06/19 10:12:45.511):{0x7C4} EventLog::ThreadProc: Received notification, processing...
[30000] (06/19 10:32:05.773):{0x7C4} EventLog::ThreadProc: Received notification, processing...
[30000] (06/19 10:32:05.773):{0x7C4} [Alarm::ActivateAlarm] Queuing alarm: <N/A> | BlackBerry Messaging Agent TORNADO Agent 1 (Application Event Log on QTSBES) | 06/19/2010 10:32:05 (6FFFC3AF) -> [AUDIT] Jane Doe - User removed from the BES


Has anyone seen this problem. where should i keep looking to see what happened.

you can't randomly remove users ... someone wiped and removed them from the BES.

Check out BlackBerry - Enterprise Server Resource Kit ... specifically the AdminHistory.exe tool (List of available BlackBerry Analysis, Monitoring, and Troubleshooting Tools)

__________________
http://blog.port3101.org/hdawg/

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.

thanks, will check on that...