ON THE BLACKBERRY SERVER
TASK 1
1. Click Start > Administrative Tools > Computer Management.
2. In the left pane, expand System Tools and click Local Users and Groups.
3. In the right pane, double-click Groups.
4. Right-click Administrators and click Properties.
5. In the Select Users, Contacts, Computers, or Groups window, select the BlackBerry Enterprise Server service account name.
6. Click OK.
Task 2
To assign Local Security Policy permissions to the BlackBerry Enterprise Server service account, complete the following steps:
Note: This allows the BlackBerry Enterprise Server service account to access the local computer and to run the BlackBerry Enterprise Server software as a Windows® service.
Click Start > Administrative Tools > Local Security Policy.
If the computer is a domain controller, click Start > Administrative Tools > Domain Controller Security Policy.
In the Local Securities window, click Local Policies > User Rights Assignment.
Do one of the following:
For Windows Server® 2000, double-click Log on Locally
For Windows Server 2003, double-click Allow Log on Locally
Click Add User or Group.
Select the BlackBerry Enterprise Server service account name and click Add.
Click OK.
In the Local Security Settings window, double-click Log On As a Service.
Click Add User and select the BlackBerry Enterprise Server service account.
Click OK.
Microsoft Exchange 2010
Create a Windows account that has a Microsoft Exchange 2010 mailbox
You must create a Windows® account with a Microsoft® Exchange 2010 mailbox so that the Windows account can authenticate with the Microsoft® Exchange Server.
1. On the computer that hosts Microsoft Exchange, log in using an administrator account that has the permission to create accounts.
2. Open the Microsoft Exchange Management Console.
3. Create an account and mailbox that you name BESAdmin.
4. To permit the BlackBerry® Enterprise Server to check if a BlackBerry device user has permission to access a public folder, assign the Owner permission for all public folders to the administrator account.
To verify that you created the Windows account, log in to a computer using the Windows account.
Verify that the Windows account is not a member of the Domain Administrators group in Microsoft® Active Directory®.
Verify that BlackBerry device users have Read permissions and Visible permissions to public folders.
To permit BlackBerry device users to check the availability of meeting participants using BlackBerry® Device Software 4.5 or later, configure the Schedule+ Free/Busy information for the system public folder. For more information, visit http://technet.microsoft.com to read articles 629523 and 691129.