System requirements: BlackBerry Directory Sync Tool

Universal Device Service compatibility

• Universal Device Service 6.0 or later
• BlackBerry Enterprise Server 5.0 SP3 MR5 or later
• BlackBerry Enterprise Server Express 5.0 SP3 MR2 or later

Operating system

Microsoft .NET Framework

Microsoft .NET Framework 3.5 or later must be installed on the computer that hosts the BlackBerry Directory Sync Tool.

Access to Microsoft Active Directory and MDM domains

The computer that hosts the tool must be able to access Microsoft Active Directory and the MDM domains that you want to connect to.

Install the tool on a computer that does not host a Universal Device Service.

Administrator permissions

The Windows account that you use to run the tool must have read permissions for Microsoft Active Directory.

The Universal Device Service or BlackBerry Enterprise Server administrator account that you configure the tool to use must exist in every MDM domain that you want the tool to connect to.

For more information about administrator roles and permissions, visit www.blackberry.com/go/serverdocs to see the Universal Device Service Administration Guide.

User accounts must exist on the Universal Device Service

The tool can synchronize groups only if the user accounts in Microsoft Active Directory have matching user accounts on the Universal Device Service. Before you run the tool, verify that the user accounts that you want to synchronize exist in both Microsoft Active Directory and in the appropriate MDM domain.

If matching user accounts do not exist on the Universal Device Service, you can add the user accounts manually using the Administration Console, or you can enable the provisioning feature so that the tool can add user accounts during the synchronization process.

For more information about adding user accounts using the Administration Console, visit www.blackberry.com/go/serverdocs to see the Universal Device Service Administration Guide.

Group size limit

By default, the tool cannot synchronize changes to Universal Device Service groups that have more than 2000 members. There is no size limit for Microsoft Active Directory groups.

If you want to synchronize changes to Universal Device Service groups that have more than 2000 members, change the maximum group size limit in the configuration file (DirectorySync.exe.Config). For more information about changing the configuration file, see Change the performance and configuration settings for the BlackBerry Directory Synchronization Tool.

Multiple instances are not supported

Do not install more than one instance of the tool on the same computer. You cannot run multiple instances of the tool at the same time.

Property names in Microsoft Active Directory

The tool retrieves information from Microsoft Active Directory by reading standard property names for group names, email addresses, and user display names. If your organization uses property names that are not standard, you must add the property names to the configuration file (DirectorySync.exe.Config) so that the tool can retrieve information from Microsoft Active Directory.

For more information about changing the configuration file, see Change the performance and configuration settings for the BlackBerry Directory Synchronization Tool.

Unsupported environments

Running the tool in a Microsoft Exchange Resource Forest Topology is not supported.

Previous versions of the BlackBerry Directory Sync Tool have been released for use with the BlackBerry Enterprise Server. You cannot upgrade a previous version of the tool to the current version that is designed for use with the Universal Device Service.