Assigning service account permissions for a BlackBerry Enterprise Server for Microsoft Exchange

Article ID: KB02276

Type: Support Content

Last Modified: 08-21-2014

 

Product(s) Affected:

  • BlackBerry Enterprise Server for Microsoft Exchange
  • BlackBerry Enterprise Server Express for Microsoft Exchange
  • BlackBerry Professional Software
CollapseEnvironment
  • BlackBerry Enterprise Server for Microsoft Exchange
  • BlackBerry Enterprise Server Express for Microsoft Exchange
  • BlackBerry Professional Software
  • Microsoft Exchange Server 5.5 to 2013
  • Microsoft SQL Server
CollapseOverview

The following permissions are required for the BlackBerry Enterprise Server service account to function properly:

  1. Local Administrator rights on the BlackBerry Enterprise Server
  2. Local Security Policy permissions for the BlackBerry Enterprise Server service account
  3. Send as permission at the Domain level
  4. Microsoft Exchange permissions at the Administrative Group level
  5. Microsoft Exchange permissions at the Microsoft Exchange Server level
  6. Microsoft Exchange Throttling permissions for the BlackBerry Enterprise Server service account
  7. Database permissions for managing the BlackBerry Configuration Database
Note: If the BlackBerry Enterprise Server service account has not been created, create it before proceeding with the rest of this article. For detailed instructions, refer to docs.blackberry.com for the Installation and Configuration Guide for the appropriate version of the BlackBerry Enterprise Server software.

Important: The BlackBerry Enterprise Server service account should have the Domain User role, not the Domain Administrator role, or be a member of any other Protected Groups. See KB04557 for more information.


Task 1

To assign the BlackBerry Enterprise Server service account Local Administrator rights on the computer hosting the BlackBerry Enterprise Server, complete the following steps:

For a BlackBerry Enterprise Server on a Domain Controller:
  1. Click Start > Programs > Administrative Tools > Active Directory Users and Computers.
  2. Select the Builtin folder.
  3. Double-click Administrators.
  4. On the Members tab, click Add.
  5. Type the BlackBerry Enterprise Server service account name (for example, BESAdmin), and then click Check Names.
  6. Click OK.
  7. Click Apply then OK.
For a BlackBerry Enterprise Server on a Member Server:
  1. Click Start > Administrative Tools > Computer Management.
  2. In the left pane, expand System Tools and click Local Users and Groups.
  3. In the right pane, double-click Groups.
  4. Right-click Administrators and click Properties.
  5. In the Administrators properties window, click Add.
  6. In the Select Users, Contacts, Computers, or Groups window, type the BlackBerry Enterprise Server service account name (for example, BESAdmin), and then click Check Names.
  7. Click OK.
  8. Click Apply then OK.

Task 2

To assign Local Security Policy permissions to the BlackBerry Enterprise Server service account, complete the following steps on the computer hosting the BlackBerry Enterprise Server:

Note: This procedure allows the BlackBerry Enterprise Server service account to access the local computer and to run the BlackBerry Enterprise Server as a Windows service.

  1. Click Start > Administrative Tools > Local Security Policy.
    Note:
    • If the computer is a Domain Controller, click Start > Administrative Tools > Domain Controller Security Policy.
    • For Windows Small Business Server 2008, click Start > Administrative Tools > Group Policy Management > Computer Configuration > Windows Settings > Security Settings.
  2. Click Local Policies > User Rights Assignment.
  3. Double click on Log on Locally (Windows Server 2000) or Allow Log on Locally (Windows Server 2003 and 2008).
  4. Click Add User or Group.
  5. Select the BlackBerry Enterprise Server service account name, and then click Add.
  6. Click OK.
  7. Double-click Log On As a Service.
  8. Click Add User and then select the BlackBerry Enterprise Server service account.
  9. Click OK.

Task 3

To grant the Active Directory Send As permission on a single account for all BlackBerry smartphone users in a Microsoft Active Directory domain or container, complete the following steps:

Note: This permission can also be applied via Windows PowerShell. For instructions, see the Additional Information section.

  1. Open Active Directory Users and Computers.
  2. On the View menu, select the Advanced Features option.
    Note: If Advanced Features is not selected, the Security tab will not be visible for domain and container objects.
  3. Right-click the appropriate domain or container, and then click Properties.
  4. On the Security tab, click Advanced.
  5. If the BlackBerry Enterprise Server service account that requires the Send As permission is not listed, click Add and then select the BlackBerry Enterprise Server service account name.
  6. Click OK.
  7. Double-click the BlackBerry Enterprise Server service account name.
  8. Select User Objects or Descendant User Objects (Windows Server 2008) in the Applies Onto list.
  9. Select the Send As check box.
  10. Click Apply, and then click OK.
  11. Close the Properties window, and then close Active Directory Users and Computers.

Note: For more information about the Active Directory Send As permission, see Microsoft Support article 912918, or visit the Microsoft Support Knowledge Base and search for "Users cannot send e-mail messages from a mobile device or from a shared mailbox in Exchange 2000 Server and in Exchange Server 2003".


Task 4

To assign Microsoft Exchange Server permissions at the Administrative Group level, complete the following steps for the appropriate Microsoft Exchange environment:

Note: This procedure allows an administrator to manage BlackBerry smartphone users and groups.

For Microsoft Exchange Server 2000 or 2003:

  1. On the Microsoft Exchange server, click Start > Programs > Microsoft Exchange > System Manager.
  2. Select Administrative Groups.
  3. Right-click First Administrative Group and select Delegate Control.
  4. In the Exchange Administration Delegation Wizard, click Next, and then click Add.
  5. Click Browse and then select the BlackBerry Enterprise Server service account.
  6. Click OK.
  7. In the Role drop-down list in the Delegate Control window, select Exchange View-Only Administrator.
  8. Click OK.
  9. Click Next, and then click Finish.

For Microsoft Exchange Server 2007:

To set an Exchange View Only Administrator role:

  1. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  2. Type the following command, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account:
    Add-ExchangeAdministrator BESAdmin -role ViewOnlyAdmin
  3. Press Enter.

To verify the Exchange View Only Administrator role:

  1. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  2. Type the following command:
    Get-ExchangeAdministrator | Format-List
  3. Press Enter.
  4. Verify that the BlackBerry Enterprise Server service account has the ViewOnlyAdmin role.

For Microsoft Exchange Server 2010 or Microsoft Exchange Server 2013:

  1. Click Start > Programs > Microsoft Exchange Server 2010 > Exchange Management Shell.
  2. Type the following command, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account:
    Add-RoleGroupMember "View-Only Organization Management" -Member "BESAdmin"
  3. Press Enter.

To verify the Exchange View-Only Organization Management role:

  1. Click Start > Programs > Microsoft Exchange Server 2010 > Exchange Management Shell
  2. Type the following command:
    Get-RoleGroupMember "View-Only Organization Management"
  3. Press Enter.

Task 5

To assign Microsoft Exchange Server permissions, complete the steps below for the appropriate version of Microsoft Exchange:

For Microsoft Exchange 5.5:

The BlackBerry Enterprise Server service account requires the Service Account Admin permissions on the Site and Configuration containers.

For Microsoft Exchange Server 2000 or 2003:

To set the required Microsoft Exchange permissions at the server level, complete the following steps:

  1. Click Start > Programs > Microsoft Exchange > System Manager.
  2. Select Administrative Groups > First Administrative Group > Servers.
  3. Right-click the Microsoft Exchange Server name and click Properties.
  4. On the Security tab, select the BlackBerry Enterprise Server service account.
  5. Select the following permissions from the Permissions list:
    • Administer Information Store
    • Send As
    • Receive As
  6. Click the Advanced button.
  7. Verify that the Allow inheritable permissions from parent to propagate to this object and all child objects option is selected.
  8. Click OK.
  9. Repeat the preceding steps for each Microsoft Exchange Server that will host mailboxes within the routing group.
If inheritable rights do not propagate to the individual mail stores, to set the required permissions at the store level, complete the following steps:

  1. Click Start > Programs > Microsoft Exchange > System Manager.
  2. Select Administrative Groups > First Administrative Group > Servers.
  3. Click on the plus sign next to the Microsoft Exchange Server name to expand the next level.
  4. Click on the plus sign next to the First Storage Group to expand the information stores.
  5. Right-click the first Mailbox Store name and click Properties.
  6. On the Security tab, select the BlackBerry Enterprise Server service account.
  7. Select the following permissions from the Permissions list:
    • Administer Information Store
    • Send As
    • Receive As
  8. Click the Advanced button.
  9. Verify that the Allow inheritable permissions from parent to propagate to this object and all child objects option is selected.
  10. Click OK.
  11. Repeat the Steps 5-11 for each Mailbox Store that will host mailboxes for this server.


For Microsoft Exchange Server 2007:

To set the required Microsoft Exchange permissions at the server level, complete the following steps:

  1. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  2. Type the following command, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account:
    Note: This will apply permissions to all mailbox servers. See Get-MailboxDatabase and Get-MailboxServer PowerShell cmdlets, below, for additional options.
    Get-MailboxServer | Add-ADPermission -User BESAdmin -AccessRights GenericRead, GenericWrite -ExtendedRights Send-As, Receive-As, ms-Exch-Store-Admin
  3. Press Enter.

If inheritance to the individual mail stores is not enabled, to set the required Microsoft Exchange permissions at the store level, complete the following steps:

  1. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  2. Type the following command, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account:
    Note: This will apply permissions to all mailbox databases on all servers. See Get-MailboxDatabase and Get-MailboxServer PowerShell cmdlets, below, for additional options.
    Get-MailboxDatabase | Add-ADPermission -User BESAdmin -AccessRights GenericRead, GenericWrite -ExtendedRights Send-As, Receive-As, ms-Exch-Store-Admin
  3. Press Enter.

To verify the required Microsoft Exchange permissions, complete the following steps:

  1. Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell
  2. Type the appropriate command below, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account, and then press Enter:
    Note: These will return results from all mailbox servers/databases. See Get-MailboxDatabase and Get-MailboxServer PowerShell cmdlets, below, for additional options.
    • Server-level:
      Get-MailboxServer | Get-ADPermission -User BESAdmin | Format-List
    •  Database-level:
      Get-MailboxDatabase | Get-ADPermission -User BESAdmin | Format-List
  3. Verify from the list that Send-As, Receive-As, and ms-Exch-Store-Admin are present for the desired servers/databases.


For Microsoft Exchange Server 2010 or Microsoft Exchange Server 2013


To assign the required Microsoft Exchange permissions at the database level, complete the following steps:

  1. On the Microsoft Exchange Server, and click one of the following:
    •   Start > Programs > Microsoft Exchange Server 2010 > Exchange Management Shell
    • Start > Programs > Microsoft Exchange Server 2013 > Exchange Management Shell
  2. Type the following command, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account:
    Note: This will return results from all current mailbox servers/databases. If a new Mailbox Database is created after the below command is run, the command will need to be run again to add permissions to the new Database. See Get-MailboxDatabase and Get-MailboxServer PowerShell cmdlets below for additional options.
    Get-MailboxDatabase | Add-ADPermission -User "BESAdmin" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin, ms-Exch-Store-Visible
  3. Press Enter.

To Apply permissions to just a single database, use the following command, replacing BESAdmin with the service account name and database with the appropriate database name:

Get-MailboxDatabase -Identity database| Add-ADPermission -User " BESAdmin" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin, ms-Exch-Store-Visible

To assign the required Microsoft Exchange permissions at the Exchange Organizational Level, use the following command instead:

Add-ADPermission -Identity "CN=ORGNAME,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Domain_1,DC= Domain_2, DC=Domain_3" -User "BESAdmin" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin, ms-Exch-Store-Visible

To verify the required Exchange permissions, complete the following:

  1. On the Microsoft Exchange Server, and click one of the following:
    • Start > Programs > Microsoft Exchange Server 2010 > Exchange Management Shell
    • Start > Programs > Microsoft Exchange Server 2013 > Exchange Management Shell
  2. Gather Server Permissions for all Mailbox Database Stores:
    1. Type the following command, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account and ExchangeServer with the name of the Exchange server:
      Get-Mailboxdatabase -server ExchangeServer | Get-ADPermission | where-object { ($_.extendedrights -like "*receive*" -or $_.extendedrights -like "*ms-Exch-S tore-Visible*" -or $_.extendedrights -like "*ms-Exch-Store-ad*") -and ($_.User -like "*BESadmin*") } | select Identity, User, ExtendedRights, IsInherited | ft –wrap
    2. Press Enter.
  3. Gather Specific Mailbox Database Store:
    1. Type the following command, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account and MailboxDatabase with the name of the specific mailbox database store:
      Get-Mailboxdatabase -identity "*MailboxDatabase*" | Get-ADPermission | where-object { ($_.extendedrights -like "*receive*" -or $_.extendedrights -like "*ms-E xch-Store-Visible*" -or $_.extendedrights -like "*ms-Exch-Store-ad*") -and ($_.User -like "*BESadmin*") } | select Identity, User, ExtendedRights, IsInherited | ft –wrap
    2. Press Enter.
  4. Gather a list of all the Mailbox Database Store:
    1. Type the following command:
      Get-MailboxDatabase
    2. Press Enter.

Task 6

Important:This step only applies for Microsoft Exchange 2010 and Microsoft Exchange 2013

Note: For Microsoft Exchange 2010 and Microsoft Exchange 2013 co-existence where users will be managed using the same Service Account you must first create the throttling policy on Microsoft Exchange 2010 and the policy using the Microsoft Exchange 2013 Management Shell with the appropriate values.

To assign a Throttling Policy for the BlackBerry Enterprise Server service account, complete the following steps:

If a BESPolicy throttling policy has not already been created, then create a new throttling policy that does not limit concurrent connections to the Microsoft Exchange Server:

  1. On the Microsoft Exchange Server, and click one of the following:
    • Start > Microsoft Exchange Server 2010 > Exchange Management Shell
    • Start > Microsoft Exchange Server 2013 > Exchange Management Shell
  2. Type the following command and press Enter to create a custom Throttling Policy for the BlackBerry Enterprise Server service account:

    • For Microsoft Exchange 2010:
      New-ThrottlingPolicy BESPolicy -RCAMaxConcurrency $null -RCAPercentTimeInAD $null -RCAPercentTimeInCAS $null -RCAPercentTimeInMailboxRPC $null -EWSMaxConcurrency $null -EWSPercentTimeInAD $null -EWSPercentTimeInCAS $null -EWSPercentTimeInMailboxRPC $null -EWSMaxSubscriptions $null -EWSFastSearchTimeoutInSeconds $null -EWSFindCountLimit $null

    • For Microsoft Exchange 2010 SP1 to SP3:
      New-ThrottlingPolicy BESPolicy -RCAMaxConcurrency $null -RCAPercentTimeInAD $null -RCAPercentTimeInCAS $null -RCAPercentTimeInMailboxRPC $null -EWSMaxConcurrency $null -EWSPercentTimeInAD $null -EWSPercentTimeInCAS $null -EWSPercentTimeInMailboxRPC $null -EWSMaxSubscriptions $null -EWSFastSearchTimeoutInSeconds $null -EWSFindCountLimit $null -CPAMaxConcurrency $NULL -CPAPercentTimeInCAS $NULL -CPAPercentTimeInMailboxRPC $NULL

    • For Microsoft Exchange 2013:
      New-ThrottlingPolicy BESPolicy -RCAMaxConcurrency Unlimited -EWSMaxConcurrency Unlimited

  3. Type the following command, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account, and then press Enter to apply the new Throttling Policy:
    Set-Mailbox "BESAdmin" -ThrottlingPolicy BESPolicy

  4. If this change affects an existing BlackBerry Enterprise Server, restart the BlackBerry Controller Service.

If a BESPolicy throttling policy has already been created and is assigned to the BlackBerry Enterprise Server service account, but is still set to throttle concurrent connections, then modify the existing BESPolicy to disable throttling via the following steps:

  1. On the Microsoft Exchange Server, click one of the following:
    • Start > Microsoft Exchange Server 2010 > Exchange Management Shell
    • Start > Microsoft Exchange Server 2013 > Exchange Management Shell
  2. Type the following command and press Enter to create a custom Throttling Policy for the BlackBerry Enterprise Server service account:

    • For Microsoft Exchange 2010:
      Set-ThrottlingPolicy BESPolicy -RCAMaxConcurrency $null -RCAPercentTimeInAD $null -RCAPercentTimeInCAS $null -RCAPercentTimeInMailboxRPC $null -EWSMaxConcurrency $null -EWSPercentTimeInAD $null -EWSPercentTimeInCAS $null -EWSPercentTimeInMailboxRPC $null -EWSMaxSubscriptions $null -EWSFastSearchTimeoutInSeconds $null -EWSFindCountLimit $null

    • For Microsoft Exchange 2010 SP1 to SP3:
      Set-ThrottlingPolicy BESPolicy -RCAMaxConcurrency $null -RCAPercentTimeInAD $null -RCAPercentTimeInCAS $null -RCAPercentTimeInMailboxRPC $null -EWSMaxConcurrency $null -EWSPercentTimeInAD $null -EWSPercentTimeInCAS $null -EWSPercentTimeInMailboxRPC $null -EWSMaxSubscriptions $null -EWSFastSearchTimeoutInSeconds $null -EWSFindCountLimit $null -CPAMaxConcurrency $NULL -CPAPercentTimeInCAS $NULL -CPAPercentTimeInMailboxRPC $NULL

    • For Microsoft Exchange 2013:
      Set-ThrottlingPolicy BESPolicy -RCAMaxConcurrency Unlimited -EWSMaxConcurrency Unlimited

  3. Type the following command, replacing BESAdmin with the name of the BlackBerry Enterprise Server service account, and then press Enter to apply the new Throttling Policy:
    Set-Mailbox "BESAdmin" -ThrottlingPolicy BESPolicy

  4. If this change affects an existing BlackBerry Enterprise Server, restart the BlackBerry Controller Service.

Important: Restarting the BlackBerry Enterprise Server or its services might delay email message delivery to BlackBerry smartphones.

Note: It might take up to 20 minutes for replication to occur and BlackBerry smartphones to start.

If the preceding method does not work to reset the throttling policy, remove the existing policy and re-create a new BESPolicy. The BESPolicy can be removed by typing Remove-ThrottlingPolicy -Identity BESPolicy.

Note: A policy that is assigned to BlackBerry smartphone users cannot be removed. In order to remove a policy that is associated with any BlackBerry smartphone users, reassign the default policy to the BlackBerry smartphone user and then remove the BESPolicy.

For more information on the Microsoft Exchange Server 2010 Throttling Policy and the Exchange Management Shell commands used to set and assign Throttling Policies, refer to
Microsoft Technet and search for "New-ThrottlingPolicy", "Set-ThrottlingPolicy", or "Remove-ThrottlingPolicy".


Task 7

Assign the Microsoft SQL Server permissions for the BlackBerry Enterprise Server service account via the following steps:

Note: The following is not applicable to Microsoft SQL Server Desktop Engine (MSDE).

  1. Open the Microsoft SQL Server Management Studio.
    Note:
    For Microsoft SQL Server 2000, go to Microsoft SQL Servers/SQL Server Group/<SQL_server_name>.
  2. Expand the Microsoft SQL Server and expand Security.
  3. Right-click Logins.
  4. Click New Login.
  5. On the General tab, click the button next to the Name field.
  6. Select the BlackBerry Enterprise Server service account name from the Names list.
  7. Click Add.
  8. Click OK.
  9. On the Server Roles tab, assign the roles appropriate for the version of BlackBerry Enterprise Server:
    • For BlackBerry Enterprise Server versions prior to 5.0:
      • Select Server Administrators and Database Creators from the Server Role list.
    • For BlackBerry Enterprise Server 5.0 to 5.0 SP3:
      • Select Database Creators from the Server Roles list.
    • Note: The BlackBerry Enterprise Server service account will also require the System Administrator role in either of the following circumstances:
      • In BlackBerry Enterprise Server 4.1 to 4.1.7, the System Administrator role is required to assign administrative roles to BlackBerry smartphone users (Role-Based Administration).
      • In all versions of BlackBerry Enterprise Server, the System Administrator role is required to utilize the Database Notification System (DBNS).
  10. On the Database Access / User Mapping tab, select the check box for the BlackBerry Configuration Database.
  11. In the Database Roles listed for the BlackBerry Enterprise Server configuration database, select the db_owner check box.

For additional information on assigning the required permissions for the BlackBerry Configuration Database, see Task 2 of KB03112 .

For additional information on the permissions that are required to manage the BlackBerry Configuration Database, see KB03633 .
CollapseAdditional Information

For Microsoft Exchange Server 2007, support is provided by BlackBerry Enterprise Server 4.1 SP3 to 5.0 SP2.

For Microsoft Exchange Server 2007 SP2 support, see KB20550.

For more information on configuring Exchange Web Services for Calendaring in a Microsoft Exchange 2010 or Microsoft Exchange 2013 environment, see article KB20157.

For information on switching service accounts for BlackBerry Enterprise Server 4.0 to 5.0, see KB04293.


Active Directory Send-As

For Microsoft Exchange Server 2007, Microsoft Exchange Server 2010, or Microsoft Exchange Server 2013, the Active Directory Send As permission can be granted to the BlackBerry Enterprise Server service account at the Active Directory container level via the Windows PowerShell command shell.

Note: This command applies the same permission described in the steps above to a specific container within Active Directory. If new BlackBerry smartphone users are added that are located in a separate Active Directory container, this command will need to be run again, specifying the new location.

Obtaining the distinguished name will allow you to set permissions at the Organizational Unit (OU) level. You can obtain the DN from the Organizational Config query. You will find the data in the distinguished name field. 

Run the following command to obtain the Distinguished Name:

Get-OrganizationConfig

In the Exchange Management Shell command prompt window, type the appropriate command and press Enter:

To set permissions on an Organizational Unit (OU)

Add-ADPermission –InheritedObjectType User –InheritanceType Descendents –ExtendedRights Send-As –User "BESAdmin" –Identity "OU=<organizational_unit>,DC=<domain_1>,DC=<domain_2>,DC=<domain_3>"

To set permissions on a container (CN)

Add-ADPermission –InheritedObjectType User –InheritanceType Descendents –ExtendedRights Send-As –User "BESAdmin" –Identity "CN=<common_name>,DC=<domain_1>,DC=<domain_2>,DC=<domain_3>"

For example:

Add-ADPermission –InheritedObjectType User –InheritanceType Descendents –ExtendedRights Send-As –User "BESAdmin" –Identity "CN=BES Admin Exch2K10,OU=TestOU,DC=SEN104,DC=EXAMPLE,DC=COM"

In this Distinguished Name format, the location of the object to be modified (in this case, the container in which BlackBerry smartphone users are found) is explicitly specified from most specific to least specific identifier. For example, if the domain name is www.example.com, and the container is Users, the Identity string should read: CN=Users,DC=example,DC=com. Note that there is no domain_3 in this example, as none is required.

Successful application of this permission can be verified via Active Directory Users and Computers (Steps 1 through 4 of Task 2, above), or via the Exchange Management Shell interface. To verify that this permission has been applied using PowerShell, run the following command:

Get-Mailbox -Identity "Display_Name" | Get-ADPermission | where { ($_.ExtendedRights -like "*Send-As*") -and -not ($_.User -like "NT AUTHORITY\SELF") } | select Identity, User, ExtendedRights, IsInherited | FT -Wrap

Where Display_Name is the display name of the BlackBerry smartphone user to be verified. The following output indicates success:

Identity User            ExtendedRights IsInherited
-------- --------------- -------------- -----------
user01   domain\BESAdmin {Send-As}      True


Get-MailboxDatabase and Get-MailboxServer PowerShell cmdlets

The Get-MailboxDatabase and Get-MailboxServer PowerShell cmdlets are used to retrieve objects from the Microsoft Exchange organization. If either cmdlet is passed without parameters, it will return all matching objects as a list. The commands listed in Task 5 for Microsoft Exchange 2007 and 2010 use this format.

The Exchange Management Shell commands from Task 5 can be modified to be more specific, if desired. To explicitly specify a mailbox server or database using these commands, include the specific object immediately following the command. See examples below:

One specific mailbox server, SERVER:

  • Get-MailboxServer SERVER

All mailbox databases on SERVER:

  • Get-MailboxDatabse -server SERVER

One specific mailbox database, MDB, on SERVER:

  • Get-MailboxDatabse SERVER\MDB

For more information on these commands, visit Microsoft Technet and search for "Get-MailboxDatabase" or "Get-MailboxServer", or see the specific article below:

Microsoft Exchange 2007:

Microsoft Exchange 2010:

Disclaimer

By downloading, accessing or otherwise using the Knowledge Base documents you agree:

   (a) that the terms of use for the documents found at www.blackberry.com/legal/knowledgebase apply to your use or reference to these documents; and

   (b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.


Visit the BlackBerry Technical Solution Center at www.blackberry.com/btsc.