[danhole]

I have installed a new BES server for a customer.

Customer has a 2003 SBS server with Exchange.
Have added a server using windows server 2003 R2,
Added the exchange sys manager and setup permissions

This is the new SME free download BES from RIM.
I have checked that all the permissions are correct.
Have removed the user and re-added them.
The problem is when the user tries to send mail they get a red cross and the message isn’t sent.
Incoming mail works fine.
Here is an entry from the BES logs

[40700] (06/07 08:53:57):{0x2DC} {user@domain.com} Receiving packet from device, size=165, TransactionId=-971697527, Tag=188, content type=CMIME, cmd=0x3
[30112] (06/07 08:53:57):{0x2DC} {user@domain.com} Receiving message from device, RefId=1024564311, Tag=188, TransactionId=-971697527
[20265] (06/07 08:53:58):{0x2DC} {user@domain.com} MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed
[20265] (06/07 08:53:58):{0x2DC} {user@domain.com} MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed
[20000] (06/07 08:53:58):{0x2DC} {user@domain.com} Send() failed: SUCCESS, Tag=188
[40277] (06/07 08:53:58):{0x2DC} {user@domain.com} Sending message error to device for message 1024564311
[40583] (06/07 08:53:58):{0x2DC} {user@domain.com} Sending packet to device, Size=46, Tag=266, TransactionId=-997862930
[40279] (06/07 08:53:58):{0x2DC} {user@domain.com} SubmitToRelaySendQ, Tag=266
[40000] (06/07 08:53:58):{0x1698} [BIPP] Send data, Tag=266

Thanks in advance for any help.

[RIM - BBTECH]

What is the version of store.exe on the Microsoft Exchange server?

Looks to be the send as permission being revoked issues.

http://www.blackberry.com/knowledgec...nodeid=1166052

[danhole]

the File version is 6.5.7233.69

[ashworth]

Yup you have the Send As permission issue. Exchange Server 2003 Service Pack 1 using store build 7233.51 or later it affected.

RIM's KB: Article Number: KB-04707

MS KB: 912918

[RIM - BBTECH]

Ashworth... You beat me to it...

[kjohn]

So is the solution to leave the Blackberry Router off for 20min or to change the Send As permissions? And if the latter, do I need to just change it the the BES Admin or for all users? Thanks.

kjohn

[ashworth]

Originally Posted by kjohn

So is the solution to leave the Blackberry Router off for 20min or to change the Send As permissions? And if the latter, do I need to just change it the the BES Admin or for all users? Thanks.

kjohn

To grant the Send As permission for a single account on all users in an Active Directory domain or container, complete the following steps:

Open Microsoft Active Directory Users and Computers.
From the View menu, select the Advanced Features option. If this option is not selected, the Security page will not be visible for domain and container objects.
Right-click the appropriate domain or container, then click Properties.
On the Security tab, click the Advanced button.
If the service account that needs the Send As permission is not listed, click Add, then select the appropriate service account. Click OK.
Double-click the service account.
In the Applies Onto list, select User Objects.
Select the Send As check box.
Click Apply, then click OK.
Close the Properties window, then close Active Directory Users and Computers.

Note: For additional methods of assigning the Send As permission, search for article 912918 in the Microsoft Support Knowledge Base.

You will also want to make sure the router service is turned off, and then turn it back on 20 mintues after you finished the permissions above. Note: it may not work for users that are part of Domain admin accounts.

[nejcs]

Sorry Ash,


what do you mean by "it may not work with domain admin accounts"

I had the same problem, added Send As permition to user objects and it worked fine for now at least.

regards,

Nejc

[JRV]

One more tip regarding a problem we had here. I made the permissions change before the security patch was installed and thought I had headed off the problem. But some users reported red "X"s on messages they tried to send, regardless.

When you grant BES Send As permissions on User Objects per the KB articles cited here, it will only flow to users who have Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here turned on. This is the checkbox that's on the Permissions tab of the Advanced Security Settings dialog for each user.

This is turned on by default, but for some reason, this checkbox was turned off for several users (and not Domain Admins), who were then unable to send messages from their BBs.