You must create a Windows® account that has a Microsoft® Exchange 2007 mailbox so that the Windows account can authenticate with the Microsoft® Exchange Server.

1. On the computer that hosts Microsoft Exchange, log in using an administrator account that has the correct permission to create accounts.
2. Open the Microsoft Exchange Management Console.
3. Create an account and mailbox that you name BESAdmin.
4. To permit the BlackBerry® Enterprise Server to check if a user has permissions for a public folder, assign the Owner permission for all public folders to the administrator account.

• To verify that you created the Windows account, log in to a computer using the Windows account.
• Verify that the Windows account is not a member of the Domain Administrators group in Microsoft® Active Directory®.
• Verify that BlackBerry device users have Read and Visible permissions to public folders.
• To permit BlackBerry device users to check the availability of meeting participants in BlackBerry® Device Software 4.5 or later, configure the Schedule+ Free/Busy information for the system public folder. For more information, visit http://technet.microsoft.com to read articles 629523 and 691129.

1. On a computer that hosts the Microsoft® Exchange Management Shell, open the Microsoft Exchange Management Shell.
2. Perform one of the following actions:
   • If you log in to Microsoft® Exchange Server 2007, type add-exchangeadministrator "BESAdmin" -role ViewOnlyAdmin.
   • If you log in to another computer, type get-mailboxserver "<messaging_server_name>" | add-exchangeadministrator "BESAdmin" -role ViewOnlyAdmin.
3. For each Microsoft Exchange Server 2007 instance that hosts BlackBerry® device users, type the following command: get-mailboxserver "<messaging_server_name>" | add-adpermission -user "BESAdmin" -accessrights ExtendedRight -extendedrights Receive-As, ms-Exch-Store-Admin

To permit BlackBerry® device users to send email messages, you must configure Send As permissions for the Microsoft® Active Directory® user object that contains users. This task describes how to configure the Send As permissions for the entire Windows® domain, but you can also configure the permissions at the user object level or on a container of user objects.

For more information about Send As permissions and the BlackBerry® Enterprise Server, visit www.blackberry.com/btsc to read article KB04707. For more information about assigning Send As permissions permissions to multiple user accounts, visit support.microsoft.com to read article 912918.

1. Log in to a computer in the Windows domain as an administrator that has permissions to change user objects in Microsoft Active Directory.
2. On the taskbar, click Start > Administrative Tools > Active Directory Users and Computers.
3. On the View menu, click Advanced Features.
4. Right-click the domain root. Click Properties.
5. On the Security tab, click Advanced.
6. Click Add.
7. Type the name of the Windows account that you created (for example, BESAdmin).
8. Click Check Names.
9. Click OK.
10. Perform one of the following actions:
    • If you are running Windows Server® 2003, in the Apply drop-down list, click User Objects.
    • If you are running Windows Server 2008, in the Apply drop-down list, click Descendant User Objects.
11. In the Allow column, select the Send As check box.
12. Click Apply.
13. Click OK.