You must create and configure a Windows® account and mailbox in Microsoft® Active Directory® for the BlackBerry® Enterprise Server so that the account can authenticate to the Microsoft® Exchange messaging server.

1. On any computer within the Windows domain, on the taskbar, click Start > Programs > Microsoft Exchange > Active Directory Users and Computers.
2. Create an account that has following attributes:
   • Name: BESAdmin
   • Group membership: Domain User
3. Create a Microsoft Exchange mailbox for the account.
4. Assign the account the Send As permission for all user accounts in the User container of the Microsoft Active Directory domain.
5. To activate the new mailbox, send a test email message.

After you finish:

You might not be able to see the Windows account in the Microsoft Active Directory to verify that you created it. To verify that you created the Windows account, log in to a computer using the Windows account.

For more information about the Send As permission and BlackBerry Enterprise Server, visit www.blackberry.com to read KB04707.

For more information about assigning the Send As permission to multiple user accounts, visit www.support.microsoft.com to read article 912918.

On each computer that you want to install the BlackBerry® Enterprise Server components on, you must configure the permissions for the Windows® account that you want to use to install the BlackBerry Enterprise Server components.

1. On the taskbar, click Start > Programs > Administrative Tools > Local Security Policy.
2. Configure the following permissions for the Windows account:
   • log on locally with local permissions (if not assigned by default)
   • log on as a service
3. On the taskbar, click Start > Programs > Administrative Tools > Computer Management.
4. Add the Windows account to the local administrators group.

On each computer that you want to install the BlackBerry® Enterprise Server or BlackBerry Administration Service on, you must configure the Microsoft® Exchange permissions of the Windows® account that you want to use to complete the installation process.

Without the correct permissions, the BlackBerry Enterprise Server cannot run after you complete the installation process.

1. Using Microsoft Exchange 2003 System Manager, configure the Exchange View Only Administrator permission with the minimum access level of Administrative Groups.
2. At the server level, configure the following permissions:
   • Send As
   • Receive As
   • Administer Information Store
3. To permit the BlackBerry Enterprise Server to check if users have permissions to access a public folder, assign the Owner permission on all public folders to the account.

After you finish: Verify that the users have Read and Visible permissions to public folders.

Some known issues for Microsoft® Exchange impact how the BlackBerry® Enterprise Server synchronizes calendars over the wireless network. To prevent the known issues from occurring, you can read about the known issues for Microsoft Exchange that might impact your organization's messaging environment and install the hotfixes for them. If your organization's messaging environment includes multiple messaging servers, you can resolve the known issues that apply to the latest Microsoft Exchange software version in your organization's environment.

If you do not install the correct hotfixes, the BlackBerry Enterprise Server cannot run.

1. Visit http://support.microsoft.com to read articles 823343 and 894470.
2. Verify that your organization's environment meets the requirements that are described in the applicable known issues.
3. Download the hotfixes for the known issues on the computers that you want to install the BlackBerry Enterprise Server or BlackBerry Administration Service on.
4. Install the hotfixes.