A little help here please.

In my environment, I have two AD domains and BES Domains with 2 BES easch with a remote BESMgmt Database on SQL 2005. I have been running the BB User Administration Service on one of my BES servers in each BES domain. We have recently had to set the GPO for the Windows servers to refuse NTLM. Now when I start the User Admin Service it won't start and gives the error "failed to initialize a database connection using NTLM Authentication for the service". Can the User Admin service be set to use kerberos or something (I had to configure the MDS to use kerberos to authenticate to internal web sites). I've seen recommendations to not run the User Admin Service on the BES, but wonder if I move it to my SQL server will that get me around the NTLM issues (but what other problems have I brought on myself). Ultimately, my main use of the User Admin Service is with Rove Mobile Admin, if I move the User Admin to another server what effect does it have on the Mobile Admn? Otto, figured you might have something to add about the Mobile Admin.

__________________
AUTIGER92
Exchange\Blackberry Admin
4 - BES Servers (4.1.6), 3 Exchange Organizations,
~1800 BB Users, and a headache.
War Eagle!!

I can tell you what effect moving the BlackBerry User Administration Service will have on Mobile Admin at least.

By default Mobile Admin will look for the BlackBerry User Administration Service on the BES you are trying to manage, but you can also configure Mobile Admin to look for the User Administration Service on the computer that Mobile Admin is installed on. So if you are looking to move the User Administration Service to the Mobile Admin computer you should be fine once everything is configured. And assuming the User Admin service will run on that computer too of course.

Is the SQL server you mentioned the same computer Mobile Admin is installed on? If not then installing the User Administration there will not help you unfortunately.

SQL is separate server from Mobile Admin server. I'll keep it in mind to maybe move the User Admin to the Mobile Admin server.

__________________
AUTIGER92
Exchange\Blackberry Admin
4 - BES Servers (4.1.6), 3 Exchange Organizations,
~1800 BB Users, and a headache.
War Eagle!!

The User Admin Service should be run from the Mobile Admin server, as RIM does not recommend running it from the BES due to resource conflicts.

It appears that BUA 4.1 only supports SQL and NTLM authentication, so I'm not sure if there really is a workaround. You may want to go ahead and read up on BUA 5.0 from RIM's site, as it has a nice section on the new authentication methods (not SQL or NTLM).

__________________
BCSA (4.1, 5.0) | BCSD (4.1, 5.0)

The views expressed by me on Port3101.org are my own and do not necessarily reflect the views of my employer.

Any ramifications to setting the User Admin Service to use SQL authentication for the BESMgmt DB? BUA 5.0 is probably a few months off for me (assuming it does release to the public in April).

__________________
AUTIGER92
Exchange\Blackberry Admin
4 - BES Servers (4.1.6), 3 Exchange Organizations,
~1800 BB Users, and a headache.
War Eagle!!

I haven't heard of any issues with using SQL authentication. Just be sure to configure the appropriate database permissions, of course.

__________________
BCSA (4.1, 5.0) | BCSD (4.1, 5.0)

The views expressed by me on Port3101.org are my own and do not necessarily reflect the views of my employer.

What ^ said.

__________________
http://blog.port3101.org/hdawg/

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.