Welcome to Port3101.org : Your BES Connection Mark forums read | View Forum Leaders
Port3101.org : Your BES Connection



Reply
LinkBack (1) Thread Tools Display Modes
KB05035 - Permissions needed for remote administration of the BES
 
  1 links from elsewhere to this Post. Click to view. #1 (permalink)  
Old 02-02-2009, 10:56 PM
hdawg's Avatar
Proprietor
 
Join Date: Nov 2008
Posts: 2,257
Blog Entries: 147
Default KB05035 - Permissions needed for remote administration of the BES

KB05035 - Permissions needed for remote administration of the BlackBerry Enterprise Server


Environment

  • BlackBerry® Enterprise Server software version 3.5 through 4.1 for Microsoft® Exchange



Overview

This article outlines the permissions needed for remote administration of the following BlackBerry Enterprise Server software versions:

BlackBerry Enterprise Server 4.1
Use BlackBerry Manager to assign the administration role to the remote administration account. This adds permissions on the BlackBerry Configuration Database and does not make any modifications to the permissions within Microsoft® Active Directory® or Microsoft Exchange for the remote administration account.
The administration account used to assign the administration roles must be a system administrator on the Microsoft® SQL Server™. Using the correct administration account will make sure that remote administration accounts are assigned the correct Microsoft SQL Server permissions when they are created in BlackBerry Manager.
For an overview of the roles and role-based administration, see KB04889.
To assign administration roles on the BlackBerry Enterprise Server 4.1, complete the following steps:
  1. Open BlackBerry Manager.
  2. Click on BlackBerry Domain.
  3. Select the Role Administration tab.
  4. Add the administration account information with the format Domain\Username and click OK.
For more information on specific permissions for the roles, see the "Appendix: Role Matrix" section of the System Administration Guide for BlackBerry Enterprise Server for Microsoft Exchange 4.1.

BlackBerry Enterprise Server 4.0
Using Microsoft Exchange 5.5
  1. Grant the administration account View Only Admin at the Site level, and Admin Role at the Recipients container via Exchange Administrator.
  2. Assign permissions to the BlackBerry Configuration Database to the administration account. To do this, grant it Local Administrator access on the computer on which the BlackBerry Configuration Database is installed, or DB_Owner rights to the BlackBerry Configuration Database.
Using Microsoft Exchange 2000 or 2003
  1. Assign Exchange View Only Administrator rights at the First Administrative Group level to the administration account running the remote BlackBerry Manager.
    • Within Exchange System Manager, expand Administrative Groups.
    • Right-click First Administrative Group.
    • Select Delegate Control.
    • Give the administration account the role of Exchange View Only Administrator rights.
  2. Complete the following steps for every Mailbox Store and every Microsoft Exchange Server:
    • In Exchange System Manager, expand Administrative Groups > First Administrative Group > Servers.
    • Right-click the selected server and select Properties.
    • Click the Security tab and select the administration account.
    • For the administration account, verify that Allow is selected for Administer Information Store rights.
  3. Assign permissions to the BlackBerry Configuration Database to the administration account. To do this, grant it Local Administrator access on the computer on which the BlackBerry Configuration Database is installed, or DB_Owner rights to the BlackBerry Configuration Database.

BlackBerry Enterprise Server 3.5 and 3.6
Using Microsoft Exchange 5.5
  1. Grant the administration account View Only Admin at the Site level, Admin Role at the Recipients container, and User Role to the BlackBerry service account mailbox via Exchange Administrator.
  2. The account will require permissions for the BlackBerry Configuration Database. Either grant it Local Administrator access on the computer on which the BlackBerry Configuration Database is installed, or grant it DB_Owner rights to the BlackBerry Configuration Database.
Using Microsoft Exchange 2000 or 2003
  1. Through the Active Directory Users and Computers window, grant the administration account running the remote BlackBerry Enterprise Server Management console Full Mailbox access to the BlackBerry service account mailbox.
  2. Assign Exchange View Only Administrator rights at the First Administrative Group level to the administration account running the remote BlackBerry Enterprise Server Management console.
    • Within Exchange System Manager, expand Administrative Groups.
    • Right-click First Administrative Group.
    • Select Delegate Control.
    • Give the administration account the role of Exchange View Only Administrator rights.
  3. Complete the following steps for every Mailbox Store and every Microsoft Exchange Server:
    • In Exchange System Manager, expand Administrative Groups > First Administrative Group > Servers.
    • Right-click the selected server and select Properties.
    • Click the Security tab and select the administration account.
    • For the administration account, verify that Allow is selected for Administer Information Store rights.
__________________
http://blog.port3101.org/hdawg/
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 07-13-2009, 10:13 AM
hdawg's Avatar
Proprietor
 
Join Date: Nov 2008
Posts: 2,257
Blog Entries: 147
Default

updated
__________________
http://blog.port3101.org/hdawg/
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On


LinkBacks (?)
LinkBack to this Thread: http://www.port3101.org/featured-blackberry-kb-articles/458-kb05035-permissions-needed-remote-administration-bes.html
Posted By For Type Date
Account to Log-in to BES and Administer - BlackBerryForums.com : Your Number One BlackBerry Community This thread Refback 04-02-2009 04:30 PM

Similar Threads
Thread Thread Starter Forum Replies Last Post
bes 5.04 script needed unreal1171 Scripts & Tools / Hints & Tricks 1 04-04-2015 12:20 PM
NEEDED: BES 5.0 API Code Examples RadHaz75 Scripts & Tools / Hints & Tricks 3 10-21-2009 03:09 PM
NEEDED: SQL script bes users per exchange server RadHaz75 Scripts & Tools / Hints & Tricks 10 08-01-2009 08:48 AM
KB18304 - What ports are needed for BlackBerry Mobile Voice System version 4.6 hdawg Featured BlackBerry KB Articles 0 07-30-2009 02:55 PM
error messages needed habs3 Scripts & Tools / Hints & Tricks 1 07-09-2009 09:38 AM


All times are GMT -4. The time now is 09:45 PM.
Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2019, vBulletin Solutions, Inc.


 

SEO by vBSEO 3.3.2 PL2