Welcome to Port3101.org : Your BES Connection Mark forums read | View Forum Leaders
Port3101.org : Your BES Connection



View Poll Results: How long does it take to give the BESAdmin account "Receive As" permissions on a user
<1 Minute 4 80.00%
1-5 Minutes 1 20.00%
5-15 Minutes 0 0%
15-45 minutes 0 0%
45 minutes - 2 hours 0 0%
2-10 hours 0 0%
> 10 hours 0 0%
Voters: 5. You may not vote on this poll

Reply
 
  #1 (permalink)  
Old 12-16-2008, 11:46 AM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default BES Errors

[40690] (12/15 13:40:05.839):{0x157C} {user.user} Starting message status rescan
[60000] (12/15 13:40:05.917):{0x8E8} [ODBCRecord::DoGetFirstValue] SQL = "SELECT EntryID, ChangeKey, Id, RecordHash FROM SyncExchangeState WHERE UserConfigID = ? AND Type = ? AND Folder = ?".
[60000] (12/15 13:40:05.917):{0x8E8} [ODBCRecord::DoGetFirstValue] DATA = "UserConfigID[58] Type[5] Folder[] ".
[60000] (12/15 13:40:05.917):{0x8E8} [ODBCRecord::DoGetFirstValue] ADO returned success. Number of rows returned = 1
[30001] (12/15 13:40:06.026):{0x14F0} CDOCalendar::Initialize - Code = 80040705, WCode = 0505, Code meaning = IDispatch error #1285,
[30002] (12/15 13:40:06.026):{0x14F0} Server = servername, Mailbox = /o=o/ou=ou/cn=Recipients/cn=user.user Description = You do not have permission to log on. [Microsoft Exchange Server Information Store - [MAPI_E_FAILONEPROVIDER(8004011D)]]
[30180] (12/15 13:40:06.026):{0x14F0} {user.user } CDOCalendar::Initialize - Error in call m_spCalendarFolder = m_spCDOSession->GetDefaultFolder
[40000] (12/15 13:40:06.026):{0x14F0} CDO initializing failure in CDO helper 081b9eb0 (3)
[60000] (12/15 13:40:06.245):{0x8E8} [ODBCRecord::DoGetFirstValue] SQL = "SELECT EntryID, Id, Folder, ChangeKey, RecordHash FROM SyncExchangeState WHERE UserConfigID = ? AND Type = ?".
[60000] (12/15 13:40:06.245):{0x8E8} [ODBCRecord::DoGetFirstValue] DATA = "UserConfigID[58] Type[4] ".
[60000] (12/15 13:40:06.245):{0x8E8} [ODBCRecord::DoGetFirstValue] ADO returned success. Number of rows returned = 2
[40442] (12/15 13:40:06.245):{0x8E8} User settings: email=user.user , routing=S64870286, service=servicename, device=PIN, calendar=1, MDS=1, userOTAFM=63, incradle=0, SMIME=0, sentItems=1, dir=dir, server=server
[40856] (12/15 13:40:06.307):{0x1128} {user.user } Starting Memos rescan
[40891] (12/15 13:40:06.307):{0x1128} {user.user } No changes detected, rescan complete (type=Memos)
[40000] (12/15 13:40:06.417):{0x9B0} [BIPP] Received status DELIVERED, Tag=9262871
[30097] (12/15 13:40:06.417):{0x2010} {user.user } Message has been delivered to device, Tag=9262871, EntryId=833391
[30066] (12/15 13:40:06.432):{0x2010} Total Msgs Pending 1953
[30001] (12/15 13:40:06.464):{0x14F0} CDOCalendar::Initialize - Code = 80040705, WCode = 0505, Code meaning = IDispatch error #1285,
[30002] (12/15 13:40:06.464):{0x14F0} Server = server, Mailbox = /o=o/ou=ou/cn=Recipients/cn=user.user Description = You do not have permission to log on. [Microsoft Exchange Server Information Store - [MAPI_E_FAILONEPROVIDER(8004011D)]]
[30180] (12/15 13:40:06.464):{0x14F0} {user.user } CDOCalendar::Initialize - Error in call m_spCalendarFolder = m_spCDOSession->GetDefaultFolder
[40000] (12/15 13:40:06.464):{0x14F0} CDO initializing failure in CDO helper 081b9eb0 (3)
[40570] (12/15 13:40:06.464):{0x157C} {user.user } FindAndQueueNewMessageStatusUpdates - Queuing new Message Status Update detected for RefId=-1212150450
[40691] (12/15 13:40:06.464):{0x157C} {user.user } Message status rescan completed
[40690] (12/15 13:40:06.807):{0x378} {user.user } Starting message status rescan




Little Background
I did not set up this server. The permissions were wrong when they did set it up. The BESAdmin account had Domain Admin rights, was not able to log on as a service, though the rest of the permissions was correct. I cannot start from scratch on this server as i cannot have more than a couple hours downtime at any given time. I have 300 users now, and since Desktop Manager is not allowed to be used, i would really not want to start from scratch anyway. (plus it takes 3 hours to wipe each device). The above errors are all throughout my MAGT log. I talked to RIM and they stated its a permissions issue but short of redoing the server they didnt have much insight.

Last edited by Sith_Apprentice; 12-16-2008 at 11:51 AM.
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 12-16-2008, 11:51 AM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

Oh, and on another interesting twist, I have no access to do anything but view on the exchange server. That is not even handled locally, all our exchange work is done remotely. So things like
http://www.blackberry.com/btsc/searc...%200%205730308 and http://www.blackberry.com/btsc/searc...%200%205730336

Are kind of difficult.

Last edited by Sith_Apprentice; 12-16-2008 at 11:55 AM.
Reply With Quote
  #3 (permalink)  
Old 12-16-2008, 11:54 AM
BBNewf
 
Join Date: Dec 2008
Location: Newfieville
Posts: 49
Default

Try a switch service account. Takes a lot less than 3 hours to perform. Might be an issue with the actual account. I take it that you are having the one way calendar issue? If so, I listed this is my post about one way Calendar

Use this KB:

KB04293 - How to switch BlackBerry Enterprise Server service accounts

Feel free to ask any Q's. Let us know how it goes.

Last edited by hdawg; 12-16-2008 at 04:10 PM. Reason: prettied up KB article link
Reply With Quote
  #4 (permalink)  
Old 12-16-2008, 11:55 AM
Si's Avatar
Si Si is offline
Proprietor
 
Join Date: Nov 2008
Location: London, UK
Posts: 1,046
Blog Entries: 6
Default

I can see what RIM were thinking, it does look like a permissions problem. Does anything work on it at all?
__________________
Si MCTS
Co-Owner
Port3101 - Your BES Connection

Don't forget, you can follow us on Twitter

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
Reply With Quote
  #5 (permalink)  
Old 12-16-2008, 11:56 AM
Si's Avatar
Si Si is offline
Proprietor
 
Join Date: Nov 2008
Location: London, UK
Posts: 1,046
Blog Entries: 6
Default

I was actually wondering the same as gibson, maybe a switch service account would be a good move.
__________________
Si MCTS
Co-Owner
Port3101 - Your BES Connection

Don't forget, you can follow us on Twitter

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
Reply With Quote
  #6 (permalink)  
Old 12-16-2008, 11:58 AM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

Messages work for the users, and everything else is one way from server to device. Its more than just calendar. The problem with the service account is that everything is done via group policy. So they would have to move the server to its own OU so they could alter the policy for just the BES server and not the rest of the servers. (this is what i am being told, which is BS, because as an admin i can log myself in as a service).
Reply With Quote
  #7 (permalink)  
Old 12-16-2008, 11:59 AM
BBNewf
 
Join Date: Dec 2008
Location: Newfieville
Posts: 49
Default

I've seen this 100's of times. For some reason the permissions are set correctly but do not work. It's something with your BESAdmin account.

Any fix at this point requires access to Exchange. Whether you use something like DSACLS to force the permissions to write to the mailbox or create another BESAdmin account, you need access to Exchange or work with someone who does.
Reply With Quote
  #8 (permalink)  
Old 12-16-2008, 12:06 PM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

Unfortunately i would need to write a management plan (because whomever set up the server didnt RTFM) and submit it. Within 30 days they would respond and then they give a time when its going to be performed. Is there a direct KB i can point them towards (aka copy/paste into the management plan) so i dont have to type the whole damn thing out?
Reply With Quote
  #9 (permalink)  
Old 12-16-2008, 12:09 PM
BBNewf
 
Join Date: Dec 2008
Location: Newfieville
Posts: 49
Default

The KB I posted earlier has all the steps lined out for switching the account. It should have everything you need for the Exchnage portion.
Reply With Quote
  #10 (permalink)  
Old 12-16-2008, 12:15 PM
Si's Avatar
Si Si is offline
Proprietor
 
Join Date: Nov 2008
Location: London, UK
Posts: 1,046
Blog Entries: 6
Default

That's a damn good KB actually, I'm bookmarking that!

Sith, I guess you just need to give them the option of deciding how important this BES is - if it's that crucial they'll get their arses in gear and give you some Exchange access (we know you've got the skills for it, you've fixed one or two of my BES's before now)!
__________________
Si MCTS
Co-Owner
Port3101 - Your BES Connection

Don't forget, you can follow us on Twitter

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
Reply With Quote
  #11 (permalink)  
Old 12-16-2008, 12:20 PM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

So the question becomes, how many government officials does it take to perform a task detailed out on paper...
Reply With Quote
  #12 (permalink)  
Old 12-16-2008, 12:22 PM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

I would love to get even basic exchange access so that i could take care of this myself, but its not allowed. Even our server teams do not have it. We have most AD access and Exchange view only. Everything is handled by a central agency for DOD facilities.
Reply With Quote
  #13 (permalink)  
Old 12-16-2008, 12:54 PM
BBNewf
 
Join Date: Dec 2008
Location: Newfieville
Posts: 49
Default

Can you do anything from ESM on the BES logged in as an admin?
Reply With Quote
  #14 (permalink)  
Old 12-16-2008, 01:03 PM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

I can view ESM only, and only very limited bits. I cant view Administrative groups or server listings. Its actually fairly useless even from the BESAdmin account.
Reply With Quote
  #15 (permalink)  
Old 12-16-2008, 01:09 PM
BBNewf
 
Join Date: Dec 2008
Location: Newfieville
Posts: 49
Default

Boo on that.

Oh well, I guess you'll have to push to get a rush on the creation of a new account. If you can, find out everything you can about how they create the account as they may screw things up. Maybe the account you have now can work, but they may have something stupid done with it.

Let us know how it goes.
Reply With Quote
  #16 (permalink)  
Old 12-16-2008, 01:31 PM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

I will keep you updated, keep in mind however that this might be a drawn out process


And Si, why not post in the Featured KB articles page?

Last edited by Sith_Apprentice; 12-16-2008 at 01:38 PM.
Reply With Quote
  #17 (permalink)  
Old 12-17-2008, 04:16 AM
Si's Avatar
Si Si is offline
Proprietor
 
Join Date: Nov 2008
Location: London, UK
Posts: 1,046
Blog Entries: 6
Default

Quote:
And Si, why not post in the Featured KB articles page?
The theory behind the page is that we post new articles as they come out, but there are definitely some great historical ones and I think I'll add this one to the subforum.
__________________
Si MCTS
Co-Owner
Port3101 - Your BES Connection

Don't forget, you can follow us on Twitter

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
Reply With Quote
  #18 (permalink)  
Old 12-17-2008, 03:28 PM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

Update:
Ok so some jackass in my own command changed permissions recently though they still set up the account wrong. I called the enterprise server team, and they basically told me that the command server team should have taken care of this. I walked him through the permissions setup for about an hour, and we got it working. The reason it took so long is because some bastard removed the "inherit permissions from container" checkbox on all groups in AD, so those had to be reset.
Reply With Quote
  #19 (permalink)  
Old 12-17-2008, 03:32 PM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

Oh yeah, they gave me view only rights to AD and ESM so at least I don't have to rely on others to even look at those for me.
Reply With Quote
  #20 (permalink)  
Old 12-17-2008, 05:48 PM
Otto's Avatar
Proprietor
 
Join Date: Nov 2008
Location: Atlanta, GA
Posts: 2,033
Blog Entries: 14
Default

Quote:
Last edited by Mr. E; Yesterday at 03:10 PM. Reason: prettied up KB article link
... anal retentive bastard. that's all. LOL!

Sith, isn't it nice to be able to come onto a forum of your peers and ask a question to some of the smartest BES admins in the world? I mean, who would have thought of that idea for a website...
__________________
BCSA (4.1, 5.0) | BCSD (4.1, 5.0)

The views expressed by me on Port3101.org are my own and do not necessarily reflect the views of my employer.
Reply With Quote
  #21 (permalink)  
Old 12-17-2008, 06:32 PM
hdawg's Avatar
Proprietor
 
Join Date: Nov 2008
Posts: 2,257
Blog Entries: 147
Default

Quote:
Originally Posted by Otto View Post
... anal retentive bastard. that's all. LOL!
100% accurate statement.
__________________
http://blog.port3101.org/hdawg/
Reply With Quote
  #22 (permalink)  
Old 12-17-2008, 06:37 PM
Si's Avatar
Si Si is offline
Proprietor
 
Join Date: Nov 2008
Location: London, UK
Posts: 1,046
Blog Entries: 6
Default

Quote:
Sith, isn't it nice to be able to come onto a forum of your peers and ask a question to some of the smartest BES admins in the world? I mean, who would have thought of that idea for a website..
Someone should really build a site that caters for that niche.
Reply With Quote
  #23 (permalink)  
Old 12-17-2008, 08:13 PM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

Quote:
Originally Posted by Otto View Post
... anal retentive bastard. that's all. LOL!

Sith, isn't it nice to be able to come onto a forum of your peers and ask a question to some of the smartest BES admins in the world? I mean, who would have thought of that idea for a website...

Yeah that idea makes complete sense, wish some group of people would have thought about that!

Things seem to be working on the BES now, but i havent honestly been worried about at this point. I am tired of fighting with idiots about this damn thing. I just sent an email to the CIO saying if it doesnt get fixed properly the BES will eventually cease functioning the way it was intended. Lets see if they listen.
Reply With Quote
  #24 (permalink)  
Old 12-18-2008, 07:11 AM
BBNewf
 
Join Date: Dec 2008
Location: Newfieville
Posts: 49
Default

Glad to hear that it's working. Hopefully they will listen to you and grant you the proper access so you can manage your BES the way you should be able to.

Being considered a "smart" BESAdmin is quite an honor *sniff*wipe's away a tear*



This is a great site though. A place where BES Admins can help each other out and shoot the [email protected]#t.
Reply With Quote
  #25 (permalink)  
Old 12-18-2008, 12:20 PM
Sith_Apprentice's Avatar
Super Moderator
 
Join Date: Dec 2008
Posts: 1,056
Default

Hah, they are trying to Enterprise the BES for all DoD now.. that would be a disaster.


"Hey i lost my blackberry and need another... let me submit a ticket"

8 hours later (their avg response time)

"wipe command sent, your activation password is...."

Think of all the information on an unlocked Blackberry that can be accessed in 8 hours.
Reply With Quote
  #26 (permalink)  
Old 12-18-2008, 12:53 PM
hdawg's Avatar
Proprietor
 
Join Date: Nov 2008
Posts: 2,257
Blog Entries: 147
Default

Sounds like you need a self-service portal or some other way too offload other administrative functionality to front-end staff...
__________________
http://blog.port3101.org/hdawg/
Reply With Quote
  #27 (permalink)  
Old 12-18-2008, 01:14 PM
Si's Avatar
Si Si is offline
Proprietor
 
Join Date: Nov 2008
Location: London, UK
Posts: 1,046
Blog Entries: 6
Default

Quote:
offload other administrative functionality to front-end staff
That's no way to describe Otto.
__________________
Si MCTS
Co-Owner
Port3101 - Your BES Connection

Don't forget, you can follow us on Twitter

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
KB04099 - BlackBerry Service errors hdawg Featured BlackBerry KB Articles 2 07-01-2010 12:57 AM
GWconnector continious restarting with errors webbie82 Port 3101: The BES Admin Bar & Grill 0 04-19-2010 05:08 AM
Errors after upgrading to 4.1 SP6 and MR5 qb320 Port 3101: The BES Admin Bar & Grill 7 03-30-2010 11:59 AM
KB17063 - Corrupt table index results in SQL errors hdawg Featured BlackBerry KB Articles 0 08-25-2009 09:56 PM
KB00079 - BBSRPTest errors 10060 and 10061 hdawg Featured BlackBerry KB Articles 0 05-26-2009 12:58 PM


All times are GMT -4. The time now is 07:32 AM.
Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2020, vBulletin Solutions, Inc.


 

SEO by vBSEO 3.3.2 PL2