Blackberry Support KB05270
Environment
• BlackBerry® Enterprise Server software version 2.1 through 4.1
• BlackBerry® Mobile Data System (BlackBerry MDS)
• Microsoft® Exchange 5.5, Microsoft Exchange 2000, and Microsoft Exchange 2003
• Microsoft Windows® 2000
• Microsoft Windows Server® 2003
Problem
Wireless calendar synchronization occurs one-way only, from the Microsoft Outlook® Calendar to the BlackBerry device Calendar. The initial wireless calendar synchronization process was successful.
Cause
This issue may be caused by one of the following:
1) The BlackBerry Enterprise Server services are not running under the BlackBerry Enterprise Server service account.
2) The BlackBerry Enterprise Server service account does not have the appropriate permissions.
3) The Collaboration Data Object (CDO) is not present or supported with the Microsoft Exchange environment.
4) The BlackBerry Enterprise Server service account is a Domain Administrator.
Resolution
Complete the appropriate resolution for your cause:
Cause 1
The BlackBerry Enterprise Server services are not running under the BlackBerry Enterprise Server service account.
Resolution
Verify that all BlackBerry Enterprise Server services are running under the appropriate BlackBerry Enterprise Server service account.
Note: Several BlackBerry Enterprise Server services run under the Local System account (for example, the BlackBerry Attachment Service or the BlackBerry MDS Services - Apache Tomcat™ Service).
To confirm that the correct account is specified, complete the following steps:
1) In Administrative Tools, select Services and double-click BlackBerry Service.
2) From the Log On tab, verify that the correct BlackBerry Enterprise Server service account name is specified.
3) If a different BlackBerry Enterprise Server service account name is specified, complete one of the following steps:
• If the BlackBerry Enterprise Server was installed using the administrator account or another administrative account, switch the service account to the BlackBerry Enterprise Server service account.
For instructions, see the following article:
• For BlackBerry Enterprise Server software versions 4.0 and 4.1, see KB04293.
OR
• If the BlackBerry Enterprise Server was installed using the BlackBerry Enterprise Server service account, switch the service account to the one that corresponds to the BlackBerry Enterprise Server services.
Note: This occurs if a BlackBerry Enterprise Server service pack or hotfix was not installed using the BlackBerry Enterprise Server service account.
Cause 2
The BlackBerry Enterprise Server service account does not have the appropriate permissions.
Resolution
To update BlackBerry device users’ mailboxes, the appropriate permissions are needed. Modify the BlackBerry Enterprise Server service account permissions by completing the following steps:
Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003
1) In the Exchange System Manager, right-click the Exchange administrative group name and click Delegate Control.
2) Click Next, then click Add to open the Delegate Control window.
3) Click Browse to open the Select Users, Computers or Groups window, and select the new service account.
4) From the Role drop-down list, select Exchange View Only Administrator and click OK.
5) Click Next, then click Finish.
6) Open Exchange System Manager, and go to Administrative Groups/First Administrative Group/Servers.
7) Right-click the Microsoft Exchange Server name, click Properties, then click the Security tab.
8) Verify the Allow inheritable permissions from parent to propagate to this object check box is selected.
9) Choose the service account name and select the appropriate check boxes to allow Administer information store,Receive As, and Send As permissions.
10) Verify that no denied permissions are selected for the service account.
11) Click Apply, then clickOK.
12) In Administrative Tools, select Active Directory Users and Computers.
13) Right-click the BlackBerry Enterprise Server service account, then click Properties.
14) On the Member of tab, verify that Domain Users is displayed in the list.
15) If the BlackBerry Enteprise Server is installed on a domain controller, verify that Administrators is listed.
Important: Make sure that the service account is not a member of any groups which can deny some of these required permissions. For more information, see KB04557.
Cause 3
The Collaboration Data Object (CDO) is not present or supported with the Microsoft Exchange environment.
Resolution
Verify that the CDO.DLL file is supported with the Microsoft Exchange environment.
For Microsoft Exchange 2000 and Microsoft Exchange 2003
1) Go to the Exchsrvr\bin directory to check the version of the CDO.DLL file on your Microsoft Exchange Server.
2) Verify that the CDO.DLL file on the BlackBerry Enterprise Server is the same or later version of the CDO.DLL file on the Microsoft Exchange Server.
Note: If multiple versions of the CDO.DLL file exist, verify that all copies match.
3) At a command prompt, go to the directory where the CDO.DLL file is located.
4) Type regsvr32 cdo.dll, and press ENTER. A confirmation will display indicating that the file registered successfully.
Note: For information on how to obtain and apply the CDO.DLL file, see KB02937.
To verify that the CDO.DLL file is registered, see KB04912.
Cause 4
The BlackBerry Enterprise Server service account is a Domain Administrator.
Resolution
Verify that the BlackBerry Enterprise Server service account is not a Domain Administrator.
Additional Information
If the BlackBerry Enterprise Server service account is a member of the Domain Administrators or Enterprise Administrators groups, the Send As permission will automatically be revoked. Without the Send As permission, the BlackBerry Enterprise Server will not be able to update the BlackBerry device user’s calendar on the Microsoft Exchange Server. Verify that the service account does not inherit this role from Microsoft Active Directory® groups, such as Domain Administrators, or is not a member of this role.
KB02466 provides information on one-way calendar synchronization when connected to BlackBerry Enterprise Server software version 3.5.
KB03784 provides information on the Windows Server 2003 domain controller memory leak that affects wireless calendar synchronization.
Article 821897 on the Microsoft Support Knowledge Base provides additionaly information on how to assign service account access to all mailboxes in Microsoft Exchange Server 2003.
Refer to RIM’s KB05270 for full details.