System requirements: BlackBerry Directory Sync Tool

Operating system

BlackBerry Mobile Fusion compatibility

If you want to use the tool with the Universal Device Service, visit www.blackberry.com/go/serverdocs to see the BlackBerry Resource Kit for the Universal Device Service - BlackBerry Directory Sync Tool Installation and Administration Guide.

Remote installation

Install the tool on a computer that does not host BlackBerry Enterprise Server components.

Microsoft .NET Framework

Microsoft .NET Framework 3.5 (full package) must be installed on the computer that hosts the BlackBerry Directory Sync Tool.

Access to Microsoft Active Directory and MDM domains

The computer that hosts the tool must be able to access Microsoft Active Directory and the MDM domains that you want to connect to.

Administrator permissions

The Windows account that you use to run the tool must have read permissions for Microsoft Active Directory.

The BlackBerry Enterprise Server administrator account that you configure the tool to use must exist in every MDM domain that you want the tool to connect to.

For more information about administrator roles and permissions, visit www.blackberry.com/go/serverdocs to see the BlackBerry Enterprise Server Administration Guide.

User accounts on the BlackBerry Enterprise Server

The tool can synchronize groups only if the user accounts in Microsoft Active Directory have matching user accounts on the BlackBerry Enterprise Server. Before you run the tool, verify that the user accounts that you want to synchronize exist in both Microsoft Active Directory and in the appropriate MDM domain.

If matching user accounts do not exist on the BlackBerry Enterprise Server, you can add the user accounts manually using the BlackBerry Administration Service, or you can enable the provisioning feature so that the tool can add user accounts during the synchronization process.

For more information about adding user accounts using the BlackBerry Administration Service, visit www.blackberry.com/go/serverdocs to see the BlackBerry Enterprise Server Administration Guide.

Group size limit

By default, the tool cannot synchronize changes to BlackBerry Enterprise Server groups that have more than 2000 members. There is no size limit for Microsoft Active Directory groups.

If you want to synchronize changes to BlackBerry Enterprise Server groups that have more than 2000 members, change the maximum group size limit in the configuration file (DirectorySync.exe.Config). For more information about changing the configuration file, see Change the performance and configuration settings for the BlackBerry Directory Synchronization Tool.

Property names in Microsoft Active Directory

The tool retrieves information from Microsoft Active Directory by reading standard property names for group names, email addresses, and user display names. If your organization uses property names that are not standard, you must add the property names to the configuration file (DirectorySync.exe.Config) so that the tool can retrieve information from Microsoft Active Directory.

For more information about changing the configuration file, see Change the performance and configuration settings for the BlackBerry Directory Synchronization Tool.

User Account Control restrictions

When using the tool on an operating system that features User Account Control (UAC), such as Windows Server 2008, you might receive an error when you try to run the tool. If you are using the tool on an operating system that uses UAC, run the tool as an administrator (right-click the application on the start menu, or the .exe file, and click Run as administrator).

Unsupported environments

Do not install more than one instance of the tool on the same computer. You cannot run multiple instances of the tool at the same time.

Running the tool in a Microsoft Exchange Resource Forest Topology is not supported.