Create a Domain User account called BesAdmin

On the Exchange Server, select Start → Programs → Microsoft Exchange → Active Directory Users and Computers

Browse to the Users container. Right click in the right-hand pane and select New → User

The following window will be displayed:

Enter BesAdmin in the First name and User logon name fields. Click Next. The following window will be displayed:

Enter a password for the account. Ensure that the options User cannot change password and Password never expires ARE TICKED. Click Next. The following window will be displayed:

Click Finish.

Create an Exchange Mailbox for the BesAdmin User

On the Exchange Server, launch the Exchange Management Console.
Select Recipient Configuration → Mailbox and then New Mailbox:

The following window will be displayed:

Select User Mailbox and click Next. The following window will be displayed:

Select Existing User and then click Browse. Select the BesAdmin user. Click OK and then click Next. The following window will be displayed:

Click Next.
Click New and then Finish.

Assign the BesAdmin user account local administrative rights

Once the BesAdmin user account has been created. On the BES server, right click on the My Computer icon on the desktop and select Manage. Browse to the Groups folder:

Double click the Administrators group.
Click on the Add button.
Set the Look in field to the domain of which the BES server is a member.
Select the BesAdmin user account and click Add.
Click OK and then OK again.

Assign "logon as service" rights on the BES server to the BesAdmin user account

On the BES Server, select Start → Settings → Control Panel.
Double click on the Administrative Tools icon
Double click on the Local Security Policy icon

Browse to Local Policies → User Rights Assignment in the left-hand menu.
In the right-hand pane scroll down and select Log on as service

Double click the entry, the following window will be displayed:

Click Add. The following window will be displayed:

Set the Look in field to the domain in which the BES server resides.
From the list of users select the BesAdmin account and click Add.
Click OK and then OK again.

Assign Send as, Receive as and Administer information store rights to the BesAdminuser account

Unlike previous versions of Exchange. This needs to be done at the command line via the Exchange Management Shell.

Launch the command interface and enter the following command:

get-mailboxserver (servername) | add-adpermission –user (service account)-accessrights GenericRead, 
GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

Where (servername) should be replaced with the name of the Exchange Server, and (service account) should be replaced with the Alias name of the BesAdmin user account (so ‘BesAdmin’ in this case)

If you are successful, you should see the following:

To verify the permissions of an existing account, type:

get-mailboxserver (servername) | getADpermission -user (service account) | Format-List

Now send an email to the BesAdmin user to initialise the mailbox!

Assign Send As rights on the Domain to the BesAdmin user account

On the Exchange Server, launch the Active Directory Users and Computers MMC snap-in:

Open the View menu and select the option to show Advanced Features.

Right click on the Domain root and select Properties. Click on the Security tab:

Click on the Advanced button. Select the option to Add a user:

Enter the alias of the BesAdmin account created earlier and click OK. In the Apply Onto drop-down menu select the option for User Objects:

In the Permissions section select the option to enable Send As:

Install Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1

Download the MAPI and CDO files from the Microsoft web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=E17E7F31-079A-4...

Once downloaded, run the EXE file and specify a location for the files to be extracted to. Once extracted, run the file named ‘ExchangeMapiCdo.MSI’. The following window will be displayed:

Click Next.
The License Agreement screen will be displayed. Read the terms and conditions and click Next if you agree.
Click Finish.

Now log off as Administrator and log in to the BES server using the BesAdmin user account.

You are now ready to begin installation of the BES 4.1.x software.

Adding Users

Launch the Blackberry Manager from the Start Menu.
Select Servers in the left-hand navigation pane. Select your server from the list.

In the bottom pane, select the option to Add Users. The Exchange Global Address List will be displayed:

Select your users and click OK.

Now click on the entry for the server in the left-hand pane:

Click on the Users tab. Select a user.

In the bottom pane, select the Service Access section. Select the option to Generate and Email Activation Password.
The user will receive an email from BesAdmin with their password. They can now use this password to complete the Enterprise Activation wizard on the Blackberry handheld.