BlackBerry Policy Service is stopping

Below is one of the newest problems we had recently , The Policy service is keep quitting every couple hours and we end up manually starting the service. The BES support is still looking into log files to figure out what is going on. We have taken some trouble shooting steps and listed them below to remedy the problem. The root cause of the problem seems to be BES servers not being able to push the policies for some of the clients.

Problem

BlackBerry Policy Service is stopping in couple hours

Policy Service:

Supports wireless IT Policy, service books, and third-party application delivery for the BlackBerry Enterprise Server.

Cause:

Some of the policies which are not getting pushed on to some of the handhelds, therefore the Policy service seems to be quitting every some hours.

Solution:

Log into BES server, highlight the BES server on the right pane, scroll until you see the "IT Policy" Column

Locate the users in error stage, make a right click on each user, having trouble , go to Properties , click on IT Admin m click on Reset Policy.

Go back and make sure the error condition is no longer exist

Event Type:    Warning

Event Source:    BlackBerry Policy Service

Event Category:    None

Event ID:    20000

Date:        9/12/2007

Time:        1:46:53 PM

User:        N/A

Computer:    NHQBES4

Description:

{oz@SMTp25.org, PIN=23D087A2, UserId=1141}RequestHandler::SendSwitchService - Sending Switch Service command to device, Source UID S84988338, Destination UID S89893656

 

Best,

Oz ozugurlu

Need full access for all users’ mailboxes in Your SMTP mail organization

Exchange 2003 administrators have explicit denied access to user's mailbox, except their own. This was not the case before. Let's think a scenario for some reason you need to have full mailbox access to all users mailbox. (You don't have to tell me, why) how can this be achieved. Below I will illustrate how an Exchange administrator may achieve this goal. You can permit yourself to see everyone mail box on the entire company easily. Below register hack is for a user profile, so you are just making changes on the account you have logged in.

• Copy and paste the code into notepad
  
• Click file Save
  
• Name the file ShowSecurityPage.reg
  
• Click on save as type, change it to all files
  
• Save it on your desktop as ESMShowSecurity.Reg, and double click on it to make the changes
  
• Click OK two times
  
• Open ESM now you will see security tab.
  

 

Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Exchange\EXAdmin] "ShowSecurityPage"=dword:00000001

 

Now go to ADUC create an account, to be used to look at all users mailbox. Let's say we will create account called "MailMaster" Now we will go back on top of ESM and add this account there and give full permissions, which will inherit all the way down to your entire mail organization. Great now we have an special account which has full permissions on all mail enabled object, including send as receive as

Go to your OWA now and log on with your user ID and password, such as Https://Mail.Smtp25.org/Exchange, OWA will ask you your user name and password before you see your own mailbox. Go ahead supply your credentials and login.

After you log in all you need to do is add at the end of your Browser the user ID of the user's mailbox you wish to visit. Let's say you want to see, Brad's mail and his NT Id is Brads, After last slash in the address bar with browser add simply brads ID, OWA will ask you( Now you are telling OWA open Brad mailbox )

Who you are, and you will be "MailMaster", which has FULL permission on any mail enabled object, type the password for this account, OWA will gracefully open up and show you Brad's mailbox, while Brad is logged in on to his mailbox you will be a shadow looking at all his E-mails and he will have no idea, what is going on

Be careful privacy is serious issue and do not misuse your knowledge

Best,

Oz ozugurlu

The Exchange Services and Executables

We are asked time to time the name of the Exchange services and their default settings. We put a little table together and wanted to post here at my blog. Knowing these services is essential

 

Microsoft Exchange Event	Monitors folders and fires events, for Exchange 5.5-compatible server applications.	events.exe	Manual
Microsoft Exchange IMAP4	Provides Internet Message Access Protocol (IMAP4) Services to clients. If this service is stopped, clients are unable to connect to this computer using the IMAP4 protocol.	inetinfo.exe	Disable
Microsoft Exchange Information Store	Manages the Microsoft Exchange Information Store. This includes mailbox stores and public folder stores. If this service is stopped, mailbox stores and public folder stores on this computer are unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.	store.exe	Disable
Microsoft Exchange Management	Provides Exchange management information using Windows Management Instrumentation (WMI). If this service is stopped, Exchange management information is unavailable using WMI	exmgmt.exe	Automatic
Microsoft Exchange MTA Stacks	Provides Microsoft Exchange X.400 services. Exchange X.400 services are used for connecting to Exchange 5.5 servers, and by other connectors (custom gateways). If this service is stopped, Exchange X.400 services are unavailable.	emsmta.exe	Automatic
Microsoft Exchange POP3	Provides Post Office Protocol version 3 (POP3) Services to clients. If this service is stopped, clients are unable to connect to this computer using the POP3 protocol.	inetinfo.exe	Disable
Microsoft Exchange Routing Engine	Provides topology and routing information to Exchange Server 2003 servers. If this service is stopped, optimal routing of messages will not be available.	inetinfo.exe	Automatic
Microsoft Exchange Site Replication Service	Microsoft Exchange Site Replication Service	srsmain.exe	Disable
Microsoft Exchange System Attendant	services and connectors, defragmenting the Exchange store, and forwarding Active Directory lookups to a Global Catalog server. If this service is stopped, monitoring, maintenance, and lookup services are unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.	mad.exe	Automatic

 

Thanks

Oz ozugurlu

Finding ProxyAddresses with ADFIND

One of the most common requests for Exchange administrators is to find out who owns such SMTP address or if an SMTP address ever exist on your SMTP Domain. Those of you, who is performing troubleshooting daily bases will understand this right a away. The Classic way of verifying if, such SMTP address is valid or no would be opening outlook and pasting the address into "TO" column. If outlook resolves the address, it means address is valid (owned by an object within your SMTP Domain). If outlook puts underline on to the SMTP address, it means this mail address is not present within your environment. The more advance way of doing this would be opening up ADUC and going to search option , pasting the mail address in it, oz@smtp25.org, than we would expect this would return an object.

The most advance way of accomplishing same result would be

Start, Run, Dsa.msc, Click Search button, Click Drop down menu, select Custom search, Click Advance

In the LDAP Query write down below (change my mail address to one you need to lookup)

ProxyAddresses=SMTP:oz@smtp25.org

Now let's do it much better way. Go download ADFIND from Joe Ware . I place this into System32 so that I can get to it from any ware it is a little exe file.

Adfind -b dc=SMTP25, dc=org -f (proxyAddresses=SMTP: oz*) name proxyaddresses

This will find all the SMTP Proxy address contains OZ.

We can also find the object with below switch; don't forget the Change my name to whatever the name you are looking within your search

Adfind -b dc=SMTP25, dc=org -f (samaccountname=oozugurlu)

Conclusion,

ADFInd is fast and incredibly efficient, it is a free utility and if you have not get your hands on it don't lose a time go get it and start using it.

Best,

Oz ozugurlu