Results 1 to 11 of 11

To in response to the issuce this MS Patch will cause, RIM responed: Support - ... Server Admins forum

  1. #1
    hayden's Avatar
    hayden no está en línea Stack Mod
    Join Date
    Jul 2004
    PIN/ID
    ask
    Posts
    12,440

    Microsoft patch - Blackberry workaround

    Advertisement



    To in response to the issuce this MS Patch will cause, RIM responed:

    Support - User cannot send messages because the Send As permission has been revoked

    Summary

    This article applies to the following:
    • BlackBerry Enterprise Server™ 3.6 through 4.1
    • Microsoft® Exchange 2003 Service Packs 1 and 2
    • Microsoft Exchange 2000 Service Pack 3
    • SDR75493

    Background

    This article applies to Exchange 2003 and Exchange 2000 within the following environments:
    • Exchange Server 2003 Service Pack 1 using store build 7233.51 or later
    • Exchange Server 2003 Service Pack 2 using store build 7650.23 or later
    • Exchange Server 2000 Service Pack 3 using store build 6619.4 or later

    Problem

    BlackBerry® wireless device users cannot send messages. The BlackBerry Enterprise Server debug log displays the following:
    For BlackBerry Enterprise Server 3.6 and earlier
    [40700] (12/13 15:38:10):{0x7FC} {<user_name@domain.net>} Receiving packet from device, size=161, TransactionId=-1966367802, Tag=-1091853399, content type=CMIME, cmd=0x3[30112] (12/13 15:38:10):{0x7FC} {< user_name@domain.net >} Receiving message from device, RefId=1473556709, Tag=-1091853399, TransactionId=-1966367802[20265] (12/13 15:38:10):{0x7FC} {< user_name@domain.net >} *** MAPI *** MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed.[20000] (12/13 15:38:10):{0x7FC} {< user_name@domain.net >} Send() failed: ERR_SUBMIT_MAIL, Tag=-1091853399[40277] (12/13 15:38:10):{0x7FC} {< user_name@domain.net >} Sending message error to device for message 1473556709[40583] (12/13 15:38:10):{0x7FC} {{< user_name@domain.net >} Sending message to device, Size=85, Tag=6420, TransactionId=-1001413813

    For BlackBerry Enterprise Server 4.0 and 4.1
    [40700] (12/13 15:38:10):{0xFF0} {<user_name@domain.net>} Receiving packet from device, size=111, TransactionId=-2099843783, Tag=147, content type=CMIME, cmd=0x3
    [30112] (12/13 15:38:10):{0xFF0} {<user_name@domain.net>} Receiving message from device, RefId=1607656887, Tag=147, TransactionId=-2099843783
    [20265] (12/13 15:38:10):{0xFF0} {<user_name@domain.net>} MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed
    [20265] (12/13 15:38:10):{0xFF0} {<user_name@domain.net>} MAPIMailbox::Send(ppMAPIMessage) - SubmitMessage (0x80070005) failed
    [20000] (12/13 15:38:10):{0xFF0} {<user_name@domain.net>} Send() failed: SUCCESS, Tag=147
    [40277] (12/13 15:38:10):{0xFF0} {<user_name@domain.net>} Sending message error to device for message 1607656887
    [40583] (12/13 15:38:10):{0xFF0} {<user_name@domain.net>} Sending packet to device, Size=46, Tag=222, TransactionId=-1012978472


    Cause

    When you apply the hotfix described in Microsoft Support Knowledge Base article 895949 to Exchange Server 2003 Service Pack 1 or Service Pack 2 or Exchange Server 2000 Service Pack 3, the store.exe utility revokes the Send As permission for all Exchange administration accounts that have been granted Administer Information Store permission at the mailbox store level.

    Resolution

    In Active Directory, assign the Send As permission to the BlackBerry administration account:
    1. In Active Directory Users and Computers, expand the domain tree.
    2. Right-click Users, then click View > Advanced Features.
    3. Right-click Users in the domain tree, then click Properties.
    4. On the Security tab, click Add to open the Select Users, Computers, or Groups window.
    5. Type the name of the BlackBerry Enterprise Server administration account (for example, BESAdmin), click Check Names, and click OK.
    6. Select the administration account and click Advanced to open the Access Control Settings for Users window.
    7. Click Add to open the Select Users, Computers, or Groups window.
    8. Type the name of the administration account, click Check Names, and click OK. The Permission Entry for Users window opens. On the Object tab, from the Apply onto drop-down list, select User objects.
    9. In the Permissions list box, select the Send As check box and click OK.
    10. Click OK again to close the Access Control Settings for Users window.
    11. Click Apply, then click OK to close the Users Properties window.
    12. Repeat Steps 2 through 11 for any additional Organizational Units that contain BlackBerry device users.

    Additional Information

    For more information, see Microsoft Support Knowledge Base article 912918.

  2. #2
    hayden's Avatar
    hayden no está en línea Stack Mod
    Join Date
    Jul 2004
    PIN/ID
    ask
    Posts
    12,440

    Re: Microsoft patch - Blackberry workaround

    BES users also please read

  3. #3
    hayden's Avatar
    hayden no está en línea Stack Mod
    Join Date
    Jul 2004
    PIN/ID
    ask
    Posts
    12,440

    Re: Microsoft patch - Blackberry workaround

    Also see MS support here:

    http://support.microsoft.com/kb/912918

  4. #4
    pr23788's Avatar
    pr23788 no está en línea Stack level 2
    Join Date
    Jul 2006
    PIN/ID
    4019687A
    Posts
    35

    Re: Microsoft patch - Blackberry workaround

    Please read this thread;

    http://blackberryforums.pinstack.com...icrosoft+patch

    Some AD specoal 'group members' such as Administrators, Domain Admins, Enterprise Admins, etc are protected by AD will not allow to be modified to included the SEND AD rights directly nor by inheritance, causing your workaround not to work.

  5. #5
    Crewdawg257's Avatar
    Crewdawg257 no está en línea BES Pro
    Join Date
    Jul 2006
    Posts
    248

    Re: Microsoft patch - Blackberry workaround

    I have done this but still recieve the same error messages listed. The BESAdmin accountis not a special group member (i.e. Domain Admin). BB Support insists this is the problem. Anybody else got any ideas?

  6. #6
    JIannone's Avatar
    JIannone no está en línea Stack level 1
    Join Date
    Dec 2006
    Posts
    1

    Re: Microsoft patch - Blackberry workaround

    To test, I made the besadmin user a member of the Domain Admins group and rebooted the BES server. Once the server has rebooted, members of the Domain Admins group can send emails. Removing the BES user from the Domain Admins group does not prevent Domain Aministrators from sending emails until the server is rebooted again.

    This does not affect standard users. However, it is a pain for Domain Administrators. Anyone else been able to resolve this issue that only started after I installed windows updates on the Exchange Server.

  7. #7
    pwherman's Avatar
    pwherman no está en línea Stack level 1
    Join Date
    Dec 2006
    Posts
    1

    Re: Microsoft patch - Blackberry workaround

    THIS MAY RESOLVE THE ISSUE.
    http://support.microsoft.com/kb/912918

  8. #8
    garycutri's Avatar
    garycutri no está en línea Stack level 3
    Join Date
    May 2006
    Posts
    119
    Changed Admin permissions are overwritten by the inherited permission approximately every 30 minutes; you need to run the following script to allow the addition of BESadmin to the security tab with Send As permissions.

    dsacls "cn=adminsdholder,cn=system,dc=domainname,dc=c om " /G "DOMAINNAME\BESadmin:CA;Send As"
    Blackberry Support Forums - Asia Pacific
    www.blackberryforums.com.au

  9. #9
    MWPatterson's Avatar
    MWPatterson no está en línea BES Pro
    Join Date
    Dec 2006
    PIN/ID
    Ask Plz
    Posts
    1,031

    Re: Microsoft patch - Blackberry workaround

    I am getting this same message right now. I have tried setting up a new account and it still is failing with the error. This started yesterday when we upgraded exchange to SP2.

  10. #10
    MWPatterson's Avatar
    MWPatterson no está en línea BES Pro
    Join Date
    Dec 2006
    PIN/ID
    Ask Plz
    Posts
    1,031

    Re: Microsoft patch - Blackberry workaround

    I got it, I had to put Exchange SP2 on the BES Server and then my Blackberry account was corrupted. I copied corrupted information from the old profile when I exported it like RIM told me. When I deleted the old information and reset it back up, it worked like a charm.

  11. #11
    wizkid1981's Avatar
    wizkid1981 no está en línea BES Guru
    Join Date
    Jan 2007
    Posts
    113

    Re: Microsoft patch - Blackberry workaround

    Also review MS article http://support.microsoft.com/kb/817433/en-us for this issue

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •