Blackberry_User_administration_guide.pdf

BlaVers

UseAdmckBerry Enterprise Server Resource Kit ion 4.1 Service Pack 5

r Guide for the BlackBerry Enterprise Server User inistration Tool

BlackBerry Enterprise Server Resource Kit version 4.1 Service Pack 5 User Guide for the BlackBerry Enterprise Server User Administration Tool

Last modified: 15 February 2008

Part num

At the tim

Send us y

2008 Rand logosaround th

IBM, DomGlobal SyMicrosoft

The Blackpatents, iD416,256RIM (as h

This docuwww.blacrepresentfor any tyconfidentreserves tany such

This docucomponeServices"accuracy,and Servithe Third

EXCEPT TGUARANCONDITIPURPOSFROM A OR PERFSERVICESSOME JUPERMITTBE EXCLUACQUIRE

TO THE MOF DAMAber: 15136533 version 10

e of publication, this documentation is based on BlackBerry Enterprise Server version 4.1 Service Pack 5.

our comments on product documentation: https://www.blackberry.com/DocsFeedback.

esearch In Motion Limited. All rights reserved. BlackBerry, RIM, Research In Motion, SureType and related trademarks, names, are the property of Research In Motion Limited and are registered and/or used as trademarks in the U.S., Canada, and countries e world.

ino, DB2, DB2 Universal Database, Lotus, and Lotus Notes are trademarks of International Business Machines Corporation. GSM and stem for Mobile Communication are trademarks of the GSM MOU Association. Microsoft, Windows, and SQL Server are trademarks of Corporation. Novell and GroupWise are trademarks of Novell, Inc. All other trademarks are the properties of their respective owners.

Berry smartphone and other devices and/or associated software are protected by copyright, international treaties, and various ncluding one or more of the following U.S. patents: 6,278,442; 6,271,605; 6,219,694; 6,075,470; 6,073,318; D445,428; D433,460; . Other patents are registered or pending in the U.S. and in various countries around the world. Visit www.rim.com/patents for a list of ereinafter defined) patents.

mentation including all documentation incorporated by reference herein such as documentation provided or made available at kberry.com/go/docs is provided or made accessible "AS IS" and "AS AVAILABLE" and without condition, endorsement, guarantee, ation, or warranty of any kind by Research In Motion Limited and its affiliated companies ("RIM") and RIM assumes no responsibility pographical, technical, or other inaccuracies, errors, or omissions in this documentation. In order to protect RIM proprietary and ial information and/or trade secrets, this documentation may describe some aspects of RIM technology in generalized terms. RIM he right to periodically change information that is contained in this documentation; however, RIM makes no commitment to provide changes, updates, enhancements, or other additions to this documentation to you in a timely manner or at all.

mentation might contain references to third-party sources of information, hardware or software, products or services including nts and content such as content protected by copyright and/or third-party web sites (collectively the "Third Party Products and ). RIM does not control, and is not responsible for, any Third Party Products and Services including, without limitation the content, copyright compliance, compatibility, performance, trustworthiness, legality, decency, links, or any other aspect of Third Party Products ces. The inclusion of a reference to Third Party Products and Services in this documentation does not imply endorsement by RIM of Party Products and Services or the third party in any way.

O THE EXTENT SPECIFICALLY PROHIBITED BY APPLICABLE LAW IN YOUR JURISDICTION, ALL CONDITIONS, ENDORSEMENTS, TEES, REPRESENTATIONS, OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY ONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS OR WARRANTIES OF DURABILITY, FITNESS FOR A PARTICULAR E OR USE, MERCHANTABILITY, MERCHANTABLE QUALITY, NON-INFRINGEMENT, SATISFACTORY QUALITY, OR TITLE, OR ARISING STATUTE OR CUSTOM OR A COURSE OF DEALING OR USAGE OF TRADE, OR RELATED TO THE DOCUMENTATION OR ITS USE, ORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND

REFERENCED HEREIN, ARE HEREBY EXCLUDED. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR PROVINCE. RISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND CONDITIONS. TO THE EXTENT ED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE DOCUMENTATION TO THE EXTENT THEY CANNOT

DED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST D THE DOCUMENTATION OR THE ITEM THAT IS THE SUBJECT OF THE CLAIM.

AXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, IN NO EVENT SHALL RIM BE LIABLE FOR ANY TYPE GES RELATED TO THIS DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE,

HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN INCLUDING WITHOUT LIMITATION ANY OF THE FOLLOWING DAMAGES: DIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, INDIRECT, SPECIAL, PUNITIVE, OR AGGRAVATED DAMAGES, DAMAGES FOR LOSS OF PROFITS OR REVENUES, FAILURE TO REALIZE ANY EXPECTED SAVINGS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, LOSS OF BUSINESS OPPORTUNITY, OR CORRUPTION OR LOSS OF DATA, FAILURES TO TRANSMIT OR RECEIVE DOWNTICOST OFWHETHESUCH DA

TO THE MOR LIABILIABILITY

THE LIMIACTION,OR ANY PURPOSSUCCESSINCLUDI

IN ADDITDISTRIBURELATED

Prior to sprovider hmay requsolely resrequired have beeyou and aRIM and subject toexpressly

The termTHIS DOPORTION

Published

Research295 PhillWaterlooCanadaANY DATA, PROBLEMS ASSOCIATED WITH ANY APPLICATIONS USED IN CONJUNCTION WITH RIM PRODUCTS OR SERVICES, ME COSTS, LOSS OF THE USE OF RIM PRODUCTS OR SERVICES OR ANY PORTION THEREOF OR OF ANY AIRTIME SERVICES, SUBSTITUTE GOODS, COSTS OF COVER, FACILITIES OR SERVICES, COST OF CAPITAL, OR OTHER SIMILAR PECUNIARY LOSSES, R OR NOT SUCH DAMAGES WERE FORESEEN OR UNFORESEEN, AND EVEN IF RIM HAS BEEN ADVISED OF THE POSSIBILITY OF MAGES.

AXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, RIM SHALL HAVE NO OTHER OBLIGATION, DUTY, LITY WHATSOEVER IN CONTRACT, TORT, OR OTHERWISE TO YOU INCLUDING ANY LIABILITY FOR NEGLIGENCE OR STRICT .

TATIONS, EXCLUSIONS, AND DISCLAIMERS HEREIN SHALL APPLY: (A) IRRESPECTIVE OF THE NATURE OF THE CAUSE OF DEMAND, OR ACTION BY YOU INCLUDING BUT NOT LIMITED TO BREACH OF CONTRACT, NEGLIGENCE, TORT, STRICT LIABILITY OTHER LEGAL THEORY AND SHALL SURVIVE A FUNDAMENTAL BREACH OR BREACHES OR THE FAILURE OF THE ESSENTIAL E OF THIS AGREEMENT OR OF ANY REMEDY CONTAINED HEREIN; AND (B) TO RIM AND ITS AFFILIATED COMPANIES, THEIR ORS, ASSIGNS, AGENTS, SUPPLIERS (INCLUDING AIRTIME SERVICE PROVIDERS), AUTHORIZED RIM DISTRIBUTORS (ALSO

NG AIRTIME SERVICE PROVIDERS) AND THEIR RESPECTIVE DIRECTORS, EMPLOYEES, AND INDEPENDENT CONTRACTORS.

ION TO THE LIMITATIONS AND EXCLUSIONS SET OUT ABOVE, IN NO EVENT SHALL ANY DIRECTOR, EMPLOYEE, AGENT, TOR, SUPPLIER, INDEPENDENT CONTRACTOR OF RIM OR ANY AFFILIATES OF RIM HAVE ANY LIABILITY ARISING FROM OR

TO THE DOCUMENTATION.

ubscribing for, installing, or using any Third Party Products and Services, it is your responsibility to ensure that your airtime service as agreed to support all of their features. Installation or use of Third Party Products and Services with RIM's products and services

ire one or more patent, trademark, copyright, or other licenses in order to avoid infringement or violation of third party rights. You are ponsible for determining whether to use Third Party Products and Services and if any third party licenses are required to do so. If you are responsible for acquiring them. You should not install or use Third Party Products and Services until all necessary licenses n acquired. Any Third Party Products and Services that are provided with RIM's products and services are provided as a convenience to re provided "AS IS" with no express or implied conditions, endorsements, guarantees, representations, or warranties of any kind by

RIM assumes no liability whatsoever, in relation thereto. Your use of Third Party Products and Services shall be governed by and you agreeing to the terms of separate licenses and other agreements applicable thereto with third parties, except to the extent

covered by a license or other agreement with RIM.

s of use of any RIM product or service are set out in a separate license or other agreement with RIM applicable thereto. NOTHING IN CUMENTATION IS INTENDED TO SUPERSEDE ANY EXPRESS WRITTEN AGREEMENTS OR WARRANTIES PROVIDED BY RIM FOR S OF ANY RIM PRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION.

in Canada

In Motion Limited ip Street , ON N2L 3W8

Research In Motion UK Limited 200 Bath Road Slough, Berkshire SL1 3XE United Kingdom

ContentsBlackBerry Enterprise Server User Administration Tool ...............................................................................9

BlackBerry Enterprise Server User Administration Tool overview ............................................................ 9Requirements and considerations .........................................................................................................10

Download the BlackBerry Enterprise Server Resource Kit files.................................................................11Installing the BlackBerry Enterprise Server User Administration Tool ....................................................11

Install the BlackBerry Enterprise Server User Administration Tool service .....................................11BlackBerry Enterprise Server User Administration Tool service log files ........................................14BlackBerry Enterprise Server User Administration Tool audit log files............................................14Prepare to run the BlackBerry Enterprise Server User Administration Tool client ........................14Specify a local system account to run the BlackBerry Enterprise Server User Administration Tool15Client password authentication .............................................................................................................16BlackBerry Enterprise Server User Administration Tool authentication for role-based administra-tion..............................................................................................................................................................16

Managing user accounts................................................................................................................................. 17Add a user account to the BlackBerry Enterprise Server.................................................................... 17Add a user account to a group................................................................................................................18Add an existing user account to a group ..............................................................................................19Remove a user account from the BlackBerry Enterprise Server........................................................19Remove a user account from a group...................................................................................................20Move a user account to a different BlackBerry Enterprise Server ...................................................20Move a user account to a different group............................................................................................. 21Find a user account on a BlackBerry Enterprise Server...................................................................... 21Change user account settings ............................................................................................................... 22Add a user account to a software configuration................................................................................. 23Remove a user account from a software configuration ..................................................................... 23List the groups in a BlackBerry Domain............................................................................................... 24

Managing BlackBerry devices....................................................................................................................... 24Set the BlackBerry device password..................................................................................................... 24Set owner information on a BlackBerry device ................................................................................... 25Delete data from the BlackBerry device memory and make the BlackBerry device unavailable26Purge pending messages .......................................................................................................................26Resend the peer-to-peer encryption key to the BlackBerry device................................................. 27

Resend a service book............................................................................................................................. 27

Obtain or clear user account statistics........................................................................................................ 28

Obtain user account statistics............................................................................................................... 28Interpreting the results of a statistics query for a user account ......................................................29Clear user account statistics..................................................................................................................30

Sending notification messages to BlackBerry devices..............................................................................30Send a PIN message ...............................................................................................................................30Send an email message ...........................................................................................................................31

Managing email and folder redirection....................................................................................................... 32Turn on email redirection ....................................................................................................................... 32Turn off email redirection....................................................................................................................... 33List the folders available for redirection .............................................................................................. 33Turn on folder redirection ...................................................................................................................... 34Turn off folder redirection ...................................................................................................................... 35

Managing IT policies and IT policy rules ..................................................................................................... 35List the IT policy rules in an IT policy ................................................................................................... 35Set IT policy rules for a user account....................................................................................................36List the IT policies in the BlackBerry Configuration Database.........................................................36

Obtaining BlackBerry device information................................................................................................... 37List the applications that are available on one or more BlackBerry devices.................................. 37List the BlackBerry devices on which a specified application is installed ...................................... 38List the statistics for BlackBerry devices.............................................................................................. 38List the modules and .cod files that are available on a BlackBerry device .....................................40

Obtain BlackBerry Enterprise Server statistics ..........................................................................................40Interpreting the results of a statistics query for a BlackBerry Enterprise Server instance .......... 42

Display the status of the BlackBerry Enterprise Server User Administration Tool service ................. 42Upgrade the BlackBerry Enterprise Server User Administration Tool.................................................... 43Remove the BlackBerry Enterprise Server User Administration Tool ..................................................... 43Parameters available for use with the BlackBerry Enterprise Server User Administration Tool ........45

All parameters..........................................................................................................................................45-add............................................................................................................................................................45-assign_swconfig..................................................................................................................................... 47-change .....................................................................................................................................................48-delete .......................................................................................................................................................50-find ...........................................................................................................................................................50-handheld_info .........................................................................................................................................51-kill_handheld.......................................................................................................................................... 52

-list............................................................................................................................................................. 52

-it_policy................................................................................................................................................... 53-move......................................................................................................................................................... 53-resend_peer_to_peer_key ...................................................................................................................54-resend_service_book ............................................................................................................................54-send_email..............................................................................................................................................55-send_pin..................................................................................................................................................56-set_folder_redirection ..........................................................................................................................56-set_owner_info ...................................................................................................................................... 57-set_password..........................................................................................................................................58-set_user_itpolicy_rule ..........................................................................................................................58-stats..........................................................................................................................................................59-status .......................................................................................................................................................59

Error codes for the BlackBerry Enterprise Server User Administration Tool ........................................60

BlaAdm

BlacoverYou canBlackBechange

The Blathe follo

Bla

BlaAdmtas

Analysidownlo

BlaDowInsMaMaObSenMaMaObObDisUpRemParErrckBerry Enterprise Server User inistration Tool

kBerry Enterprise Server User Administration Tool view use the BlackBerry Enterprise Server User Administration Tool to manage user accounts on the rry Enterprise Server on a large scale. For example, you can add, move, find, and remove user accounts, or

user account configurations.

ckBerry Enterprise Server User Administration Tool, previously named the BESUserAdmin tool, consists of wing components:

ckBerry Enterprise Server User Administration Tool service

ckBerry Enterprise Server User Administration Tool client; you run the BlackBerry Enterprise Server User inistration Tool client from a command prompt to perform BlackBerry Enterprise Server administration

ks or to gather BlackBerry Enterprise Server statistics

s, monitoring and troubleshooting tools and documentation are included in a separate file that you can ad. For more information, visit na.blackberry.com/eng/support/server_resourcekit.jsp.

ckBerry Enterprise Server User Administration Tool overviewnload the BlackBerry Enterprise Server Resource Kit files

talling the BlackBerry Enterprise Server User Administration Toolnaging user accountsnaging BlackBerry devicestain or clear user account statistics ding notification messages to BlackBerry devices

naging email and folder redirectionnaging IT policies and IT policy rulestaining BlackBerry device informationtaining BlackBerry Enterprise Server statisticsplay the status of the BlackBerry Enterprise Server User Administration Tool servicegrade the BlackBerry Enterprise Server User Administration Tool

ove the BlackBerry Enterprise Server User Administration Toolameters available for use with the BlackBerry Enterprise Server User Administration Toolor codes for the BlackBerry Enterprise Server User Administration Tool

10

User Guide for the BlackBerry Enterprise Server User Administration Tool

Requirements and considerations

Requirements and considerations

Do not run the BlackBerry Enterprise Server Administration Tool on the same computer on which the BlackBerry Enterprise Server

runs.

The BlackBerry Enterprise Server User Administration Tool supports mixed environments using BlackBerry Enterprise Server version 4.1 SP2 and later. Although the BlackBerry Enterprise Server User Administration Tool might appear to perform tasks on BlackBerry Enterprise Server version 4.1 SP1 and earlier, the results are unpredictable.

The BlackBerry Enterprise Server User Administration Tool does not support changing an IT policy using BlackBerry Enterprise Server versions earlier than 4.0.

The BlackBerry Enterprise Server User Administration Tool runs as a Microsoft Windows service named the BlackBerry Enterprise Server User Administration Tool service.

You must install Microsoft XML Parser version 4.0 on the computer on which you plan to run the BlackBerry Enterprise Server User Administration Tool service.

You can install the BlackBerry Enterprise Server User Administration Tool client on the same computer on which the BlackBerry Enterprise Server User Administration Tool service runs or on a different computer. The BlackBerry Enterprise Server User Administration Tool service must be running before you can use the BlackBerry Enterprise Server User Administration Tool client.

The BlackBerry Enterprise Server User Administration Tool service and the BlackBerry Enterprise Server User Administration Tool client components that you use must be the same version.

The BlackBerry Enterprise Server and the computers on which the BlackBerry Enterprise Server User Administration Tool components run must be located in the same Microsoft Windows domain.

To connect remotely to the computer on which the BlackBerry Enterprise Server User Administration Tool service runs, you must turn on the printer and file-sharing features on the computer on which the BlackBerry Enterprise Server User Administration Tool service runs.

For IBM Lotus Domino, you must install IBM Lotus Notes on the computer on which you plan to run the BlackBerry Enterprise Server User Administration Tool service.

For IBM Lotus Domino, the IBM Lotus Notes ID file that you use to run the BlackBerry Enterprise Server User Administration Tool client must have the same permissions as the BlackBerryAdmins group.

If you are using IBM DB2 Universal Database (IBM DB2 UDB), you must install an IBM DB2 UDB client on the computer on which you plan to run the BlackBerry Enterprise Server User Administration Tool.

If you are using IBM DB2 UDB, verify that the BlackBerry Configuration Database belongs to the database catalog that is located on the computer on which the BlackBerry Enterprise Server User Administration Tool service runs.

Verify that you configured the IBM DB2 UDB server to look up groups at the domain level. To verify this, check that the following parameter exists in the IBM DB2 UDB profile registry on the IBM DB2 UDB server:

DB2_GRP_LOOKUP=DOMAIN,TOKENDOMAIN

If this parameter is not set, the BlackBerry Enterprise Server User Administration Tool does not support Microsoft Windows authentication.

BlackBerry Enterprise Server User Administration Tool

Download the BlackBerry Enterprise Server Resource Kit files1. Visit na.blackberry.com/eng/support/server_resourcekit.jsp to download the appropriate version of the

BlackBerry Enterprise Server Resource Kit, preferably to the computer on which you plan to run the tools.

2. Dou

3. In t

4. Clic

InstAdmThe BlaAdminiTool clie

Insta1. On

ser

2. Cop

3. At t

4. Typ

11

ble-click the .exe file that you downloaded.

he Unzip to folder field, create a folder in which to store the files.

k Unzip.

alling the BlackBerry Enterprise Server User inistration Tool

ckBerry Enterprise Server User Administration Tool consists of the BlackBerry Enterprise Server User stration Tool service (BESUserAdminService.exe) and the BlackBerry Enterprise Server User Administration nt (BESUserAdminClient.exe), and system files.

ll the BlackBerry Enterprise Server User Administration Tool service the computer on which you plan to install the BlackBerry Enterprise Server User Administration Tool vice, create a folder in which to store the BlackBerry Enterprise Server User Administration Tool files.

y the following files to the new folder:

BESUserAdminService.exe

CE.dll

ClientAuthentication8.dll

ServerAuthentication8.dll

BESUserAdminX.dll (Microsoft Exchange environments only)

BESUserAdminD.dll (IBM Lotus Domino environments only)

BESUserAdminG.dll (Novell GroupWise environments only)

BESUserAdminAudit.dll

BESUserAdminClient.exe (necessary if you run the client on the same computer as the service)

he command prompt, switch to the folder in which BESUserAdminService.exe is located.

e besuseradminservice -install where is one of the following values:

exchange

domino

groupwise

mdsapplications

12


5. Consider the following information as you complete the installation:

Task Steps

Choose whether to start the BlackBerry Enterprise Seau

> Type Y to start the service automatically; otherwise, type N. The default setting

Sp

ChSese

If tcoAdexseBla[D

FoLorunMiseDa

FoMiSeEnBlacowhloc

Spna

FoDotheCo

FoDothe

Spwarver User Administration Tool service tomatically or manually.

is to start the service manually.

ecify the user password. > Type the password for the current user account, or if you do not have a password, leave the password field empty; otherwise, type N to start a new installation.

oose whether to use the BlackBerry Enterprise rver User Administration Tool service registry ttings that already exist on the computer.

> Type Y to use existing registry settings; otherwise, type N to start a new installation.

he BlackBerry Manager runs on the same mputer, the BlackBerry Enterprise Server User ministration Tool service attempts to detect the isting BlackBerry Configuration Database ttings and displays the message Found ckBerry Manager settings: DB Server:

atabase Server], DB Name: [Database Name].

> Type Y to confirm the BlackBerry Configuration Database that the BlackBerry Enterprise Server User Administration Tool service detects.

r the BlackBerry Enterprise Server for IBM tus Domino, if the BlackBerry Manager is not ning on the same computer, specify the

crosoft SQL Server or an IBM DB2 UDB rver on which the BlackBerry Configuration tabase is located.

> Type 1 to use a Microsoft SQL Server; type 2 to use an IBM DB2 UDB server.

r the BlackBerry Enterprise Server for crosoft Exchange, the BlackBerry Enterprise rver for Novell GroupWise, or the BlackBerry terprise Server for MDS Applications, if the ckBerry Manager is not running on the same

mputer, specify the Microsoft SQL Server on ich the BlackBerry Configuration Database is ated.

> Type the host name of the Microsoft SQL Server computer.

ecify the BlackBerry Configuration Database me.

> Type the BlackBerry Configuration Database name.

r the BlackBerry Enterprise Server for IBM Lotus mino, if you are using an IBM DB2 UDB, specify IBM DB2 UDB schema name of the BlackBerry

nfiguration Database.

> Type the IBM DB2 UDB schema name. By default, the database schema name is BESADMIN.

r the BlackBerry Enterprise Server for IBM Lotus mino, if you are using an IBM DB2 UDB, specify IBM DB2 UDB port number.

> Type the IBM DB2 UDB port number. By default, the port number is 50000.

ecify the type of database authentication you nt to use.

> To use Microsoft SQL Server authentication or IBM DB2 UDB authentication, type Y; to use Microsoft Windows authentication, type N.


6. In tser

If the BlackBerry Manager runs on the same computer, the BlackBerry Enterprise Server User Administration Tool service attempts to detect the expaBlaUD

> Type Y to confirm the database authentication user name and password that the BlackBerry Enterprise Server User Administration Tool service detects.

If tsaau

SeEnusSe

SeBlaTo

FoExco

FoDotheEn

NoID

FoDowaAd

FoGrBlaTo

SeSeco

Task Steps13

he Microsoft Windows Services window, start the BlackBerry Enterprise Server User Administration Tool vice.

isting database authentication user name and ssword and displays the message Found ckBerry Manager settings: Login: [SQL/DB2 B Authentication User], Password: ***.

he BlackBerry Manager is not running on the me computer, specify the database thentication credentials.

1. Type the login name, if applicable.

2. Type the password, if applicable.

t the client password that the BlackBerry terprise Server User Administration Tool client es to authenticate with the BlackBerry Enterprise rver User Administration Tool service.

> Type a password that is up to 32 characters long.

t restrictions for the hosts that can run the ckBerry Enterprise Server User Administration

ol client.

> To restrict the computers that you permit to run the BlackBerry Enterprise Server User Administration Tool client, type a comma-separated list of computer names. To permit all computers to run the BlackBerry Enterprise Server User Administration Tool client, leave the field empty.

r the BlackBerry Enterprise Server for Microsoft change, specify the name of the MAPI profile to nnect to the BESAdmin mailbox.

> Type the name of the MAPI profile. For example, type BlackBerryServer.

r the BlackBerry Enterprise Server for IBM Lotus mino, specify the path to and the password for Notes ID file that you want the BlackBerry

terprise Server User Administration Tool to use.

te: The user account that appears in the Notes file must belong to the BlackBerryAdmins group.

1. Type the full path name of the Notes ID file.

2. Type the password for the Notes ID file.

r the BlackBerry Enterprise Server for IBM Lotus mino, specify the messaging server that you nt the BlackBerry Enterprise Server User ministration Tool to use.

> At the installation prompt Enter the MAILSERVER this service should use, type the messaging server name. For example, type CN=Server1/0=Organization.

r BlackBerry Enterprise Server for Novell oupWise, specify the user ID that you want the ckBerry Enterprise Server User Administration

ol to use.

> Type the user ID. For example, type Admin.

t access rights that the BlackBerry Enterprise rver User Administration Tool clients can use to nnect to the BlackBerry Enterprise Server.

> Type Y to permit access to only BlackBerry Enterprise Server User Administration Tool clients that are logged in with the same account ID that you set to start the BlackBerry Enterprise Server User Administration Tool service; otherwise, type N.

14


BlackBerry Enterprise Server User Administration Tool service log filesIf you run the BlackBerry Enterprise Server User Administration Tool service on a computer on which the BlackBerry Manager runs, the BlackBerry Enterprise Server User Administration Tool service creates log files that are locaAdminiBlackBe_BBUA___.txt.

Berry Enterprise Server User Administration Tool audit log files configure the BlackBerry Enterprise Server User Administration Tool service to create BlackBerry ise Server User Administration Tool audit files. If you run the BlackBerry Enterprise Server User stration Tool service on a computer on which the BlackBerry Manager runs, the BlackBerry Enterprise

ser Administration Tool creates audit log files that are located in the same folder as the BlackBerry log herwise, the BlackBerry Enterprise Server User Administration Tool creates audit log files in the same which the BESUserAdminService.exe file is located. The BlackBerry Enterprise Server User

stration Tool saves the audit log files in a text file named me>_BBUA_AUDT___.txt.

ult, the BlackBerry Enterprise Server User Administration Tool audit logging feature is turned off.

the BlackBerry Enterprise Server User Administration Tool audit logging the computer on which the BlackBerry Enterprise Server User Administration Tool service runs, in the istry Editor, browse to HKEY_CURRENT_USER\Software\Research In Motion\BlackBerry Enterprise ver\Admin.

form any of the following tasks:

re to run the BlackBerry Enterprise Server User Administration Tool

y BESUserAdminClient.exe and CE.dll to a folder on the computer on which you plan to run the ckBerry Enterprise Server User Administration Tool client.

sk Steps

rn on the BlackBerry Enterprise Server User ministration Tool audit logging feature.

1. Double-click the AuditLogEnabled value.

2. In the Value data field, type 1.

3. Click OK.

ange the location in which the BlackBerry Enterprise rver User Administration Tool creates the audit log files.

1. Double-click the AuditLogDir value.

2. In the Value data field, type the location in which to create the audit log files.

3. Click OK.


Specify a local system account to run the BlackBerry Enterprise Server User Administration ToolDuring the installation of the BlackBerry Enterprise Server User Administration Tool service component, adminisBlackBeaccounfor the User Ad

Chang1. Log

Adm

2. OpEnt

3. Rig

4. Sav

5. In tMoMo

6. In tthe

7. Sav

8. In t

Changlocal s1. Sto

2. In tser15

trator permissions are given to the user account logged in at the time of installation. You must use the rry Enterprise Server User Administration Tool with this account. If you want to specify a local system

t to run the BlackBerry Enterprise Server User Administration Tool, you must change the registry settings BlackBerry Enterprise Server User Administration Tool and then change the BlackBerry Enterprise Server ministration Tool service to log in using the local system account.

e the BlackBerry Enterprise Server User Administration Tool service registry settings in to the Microsoft Windows account that you use to run the BlackBerry Enterprise Server User inistration Tool service.

en the Registry Editor and browse to HKEY_CURRENT _USER\Software\Research In Motion\BlackBerry erprise Server\Admin.

ht-click Admin. Select Export.

e the registry settings to a registration file (*.reg).

he registration file, change the text from HKEY_CURRENT _USER\Software\Research In tion\BlackBerry Enterprise Server\Admin to HKEY_USERS\.DEFAULT\Software\Research In tion\BlackBerry Enterprise Server\Admin.

he registration file, remove any line break after a hashed password where the closing quotation mark is on next line.

e the file.

he Registry Editor, import the registration file.

e the BlackBerry Enterprise Server User Administration Tool service to log in using a ystem accountp the BlackBerry Enterprise Server User Administration Tool service.

he Microsoft Windows Services window, in the BlackBerry Enterprise Server User Administration Tool vice properties, change the login account to the local system account.

16


Client password authenticationThe BlackBerry Enterprise Server User Administration Tool client uses the client password to authenticate with the BlackBerry Enterprise Server User Administration Tool service. When the BlackBerry Enterprise Server User AdminiAdminilogin daTool serclient pTool serAdmini

If you tyfollowincomma

Res

Reaser

Reacti1. On

RegSer

2. Cre

3. Rig

4. Typclie

5. Clo

6. In tpas

BlackbasedTo permAdminithe Blachave systration Tool client starts, it obtains tokenized data from the BlackBerry Enterprise Server User stration Tool service. The BlackBerry Enterprise Server User Administration Tool client uses this unique ta to create an encrypted password that it sends to the BlackBerry Enterprise Server User Administration vice. The BlackBerry Enterprise Server User Administration Tool service uses this same tokenized data and assword to create an encrypted password locally. The BlackBerry Enterprise Server User Administration vice compares its encrypted password to the value that the BlackBerry Enterprise Server User stration Tool client created. The encrypted passwords must match exactly for authentication to succeed.

pe the client password incorrectly three times (in total, not consecutively), you must perform one of the g actions before the BlackBerry Enterprise Server User Administration Tool client can process more

nds:

tart the BlackBerry Enterprise Server User Administration Tool service.

ctivate the client password without restarting the BlackBerry Enterprise Server User Administration Tool vice.

vate the client password the computer on which the BlackBerry Enterprise Server User Administration Tool service runs, in the istry Editor, browse to HKEY_CURRENT_USER\SOFTWARE\Research In Motion\BlackBerry Enterprise ver\Admin.

ate a new String Value called ReallowHostnames.

ht-click ReallowHostnames. Click Modify.

e the host name of the computer on which the BlackBerry Enterprise Server User Administration Tool nt runs.

se the Registry Editor.

he BlackBerry Enterprise Server User Administration Tool client, type the command and the client sword.

Berry Enterprise Server User Administration Tool authentication for role- administration

it role-based administration, the user account that you use to run the BlackBerry Enterprise Server User stration Tool client must authenticate with the BlackBerry Configuration Database. The user account for kBerry Enterprise Server User Administration Tool must be given permissions for the database, and it must

stem administrator access and security administration access.


The BlackBerry Enterprise Server User Administration Tool supports role-based administration for client user accounts using Microsoft Windows authentication, Microsoft SQL Server authentication, and IBM DB2 UDB authentication. After the BlackBerry Enterprise Server User Administration Tool service determines the role assigned to the client user account, the BlackBerry Enterprise Server User Administration Tool service determines whethepermissthe opeAdminiadded o

ManThe Blaroles, to

By defaauthentUser Adauthentin the B

You canServer U

Note: TUser AdBlackBe

Add a1. At t

2. Typ

17

r the user role permits the action that the client user account invokes. If the user role does not have ion to perform the action, the BlackBerry Enterprise Server User Administration Tool service reports that ration cannot complete because of insufficient permissions. The BlackBerry Enterprise Server User stration Tool service checks for changes made to role-based administration, such as when user accounts r roles assigned, at 5-minute intervals.

aging user accountsckBerry Enterprise Server uses predefined roles, which correspond to common corporate administrative control who can perform specific tasks and limit who can access sensitive data.

ult, the BlackBerry Enterprise Server User Administration Tool client uses the Microsoft Windows ication credentials that you type when you log in to your computer. If the BlackBerry Enterprise Server ministration Tool client uses Microsoft SQL Server authentication or IBM DB2 UDB authentication to icate with the BlackBerry Configuration Database, you must specify the database user name and password lackBerry Enterprise Server User Administration Tool client commands.

identify the role assigned to the user account for which you are logged in to the BlackBerry Enterprise ser Administration Tool client by using the verbose logging parameter (-v).

he database authentication information is encrypted when it passes from the BlackBerry Enterprise Server ministration Tool client to the BlackBerry Enterprise Server User Administration Tool service and to the rry Configuration Database.

user account to the BlackBerry Enterprise Serverhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -add and the following parameters:

-p

-u

-PIN (use in conjunction with the -u parameter for the BlackBerry Enterprise Server for MDS Applications only)

-b

-sqluser (if you use database authentication)

-sqlpass (if you use database authentication)

-n (if the BlackBerry Enterprise Server User Administration Tool service and the BlackBerry Enterprise Server User Administration Tool client do not run on the same computer)

18


See Parameters available for use with the BlackBerry Enterprise Server User Administration Tool on page 45 for more information.

Example

besuser-it_poli

Example

besuser-n xx.xx

Example

besuser-it_poli

Example

besuser-it_poli

Add a1. At t

2. Typ

See Pamore in: Adding a user account to a BlackBerry Enterprise Server for Microsoft Exchange

adminclient -add -p password1 -u [email protected] -b -n computer01 -pin xxxxxxxx cy User Can Change Timeout

: Adding a user account to a BlackBerry Enterprise Server for IBM Lotus Domino

adminclient -add -p password1 -u CN=Clyde Warren/O=Server01 -b CN=Server01/O=test.rim.net .xx.xx -pin xxxxxxxx -it_policy User Can Change Timeout

: Adding a user account to a BlackBerry Enterprise Server for Novell GroupWise

adminclient -add -p password1 -u clydewarren -b server01 -n computer01 -pin xxxxxxxx cy User Can Change Timeout

: Adding a user account to a BlackBerry Enterprise Server for MDS Applications

adminclient -add -p password1 -u 204FEA39 -pin xxxxxxxx -b server01 -n computer01 cy User Can Change Timeout

user account to a grouphe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -add and the following parameters:

-p

-u

-b

-group




rameters available for use with the BlackBerry Enterprise Server User Administration Tool on page 45 for formation.


Example: Adding a user account to a BlackBerry Enterprise Server for Microsoft Exchange, a group, and an IT policy

besuseradminclient -add -p password1 -u [email protected] -b server01 -n computer01 -pin xxxxxxx -group

Add a1. At t

2. Typ

See Pamore in

Example

besuser

Remo1. At t

2. Typ

19

administrators -it_policy User Can Change Timeout

n existing user account to a grouphe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -change and the following parameters:

-p

-u

-b

-group





: Adding an existing user to a group

adminclient -change -p password1 -u [email protected] -b server01 -group administrators

ve a user account from the BlackBerry Enterprise Serverhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -delete and the following parameters:

-p

-u

-b



20



See Pamore in

Example

besuser

Remo1. At t

2. Typ

See Pamore in

Example

besuser

MoveBoth Bl

1. At t

2. Typ


: Removing a user from the BlackBerry Enterprise Server for Microsoft Exchange

adminclient -delete -p password1 -u [email protected] -b server01

ve a user account from a grouphe command prompt, switch to the folder in which BESUserAdminClient.exe is located.


-p

-u

-b

-cgroup





: Removing a user account from a group on the BlackBerry Enterprise Server for Microsoft Exchange

adminclient -change -p password1 -u [email protected] -b server01 -cgroup

a user account to a different BlackBerry Enterprise ServerackBerry Enterprise Server computers must use the same BlackBerry Configuration Database.

he command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -move and the following parameters:

-p

-u


-b

-t


See Pamore in

Example

besuser

Move1. At t

2. Typ

See Pamore in

Example

besuser

Find 1. At t21




: Moving a user account to a different BlackBerry Enterprise Server for Microsoft Exchange

adminclient -move -p password1 -u [email protected] -b server01 -t server02

a user account to a different grouphe command prompt, switch to the folder in which BESUserAdminClient.exe is located.


-p

-u

-b

-group





: Moving a user account to a different group

adminclient -change -p password1 -u [email protected] -b server01 -group security

a user account on a BlackBerry Enterprise Serverhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

22


2. Type besuseradminclient -find and the following parameters:

-p

-u

See Pamore in

Example

besuser

ChanThe Bla

1. At t

2. Typ

See Pamore in

Example

besuser-sqluser (if you use database authentication)




: Finding a user account on the BlackBerry Enterprise Server for Microsoft Exchange

adminclient -find -p password1 -u [email protected]

ge user account settingsckBerry Enterprise Server for MDS Applications does not support this task.



-p

-u

-b



-n (if the BlackBerry Enterprise Server User Administration Tool service and BlackBerry Enterprise Server User Administration Tool client do not run on the same computer)


: Clearing the user account filters

adminclient -change -p password1 -u [email protected] -b server01 -cf


Example: Making the BlackBerry MDS Connection Service unavailable, changing the password, and specifying the password expiry time for the user account

besuseradminclient -change -p password1 -u [email protected] -b server01 -dm -w password3 -wt 96

Example

besuser

Add a1. At t

2. Typ

See Pamore in

Example

besuser

Remo1. At t

2. Typ

23

: Specifying the activation password and activation password expiry time for a group of users

adminclient -change -p password1 -g administrators -w password3 -wt 120

user account to a software configurationhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -assign_swconfig -sw and the following parameters:

-p

-u

-b





: Adding a user account to a software configuration

adminclient -p password -u Clyde Warren -b server1 -assign_swconfig -sw games

ve a user account from a software configurationhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -assign_swconfig -csw and the following parameters:

-p

-u

-b



24



See Pamore in

Example

besuser

List t1. At t

2. Typ

See Pamore in

Example

besuser

Man

Set th1. At t

2. Typ


: Removing a user account from a software configuration

adminclient -p password -u Clyde Warren -b server1 -assign_swconfig -csw

he groups in a BlackBerry Domainhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -list -groups and the following parameters:

-p





: Listing the groups in a BlackBerry Domain

adminclient -p password -list -groups

aging BlackBerry devices

e BlackBerry device passwordhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -set_password and the following parameters:

-p

-u

-b




-n (if the BlackBerry Enterprise Server User Administration Tool service and the BlackBerry Enterprise Server User

See Pamore in

Example

besuser

Set oTo set tinformaspecify

1. At t

2. Typinp

See Pamore in

Example

besuser

Example

besuser-b serve25

Administration Tool client do not run on the same computer)


: Setting the BlackBerry device password

adminclient -set_password devicepassword1 -p password1 -u [email protected] -b server01

wner information on a BlackBerry devicehe owner information that appears on the BlackBerry device, you can use a command to specify the tion in quotes, or you can create an input file to contain the information and then use a command to the input file.


e besuseradminclient -set_owner_info and the following parameters:

-p

-u

-b





: Setting owner information on a BlackBerry device

adminclient -set_owner_info -info Clyde Warren -p password -u [email protected] -b server01

: Setting owner information on a BlackBerry device using an input file

adminclient -set_owner_info -infofile userinformation.txt -p password -u [email protected] r01

26


Delete data from the BlackBerry device memory and make the BlackBerry device unavailable 1. At the command prompt, switch to the folder in which BESUserAdminClient.exe is located.

2. Typ

See Pamore in

Example

besuser

PurgeThe Bla

1. At t

2. Typ

See Pamore ine besuseradminclient -kill_handheld and the following parameters:

-p

-u

-b



-n (if the BlackBerry Enterprise Server User Administration Tool service and the BlackBerry Enterprise Server User Administration Tool client do not run on the same computer.)


: Deleting data from the BlackBerry device memory and making the BlackBerry device unavailable

adminclient -kill_handheld -p password1 -u [email protected] -b server01

pending messagesckBerry Enterprise Server for MDS Applications does not support this task.


e besuseradminclient -change -purge_pending_messages and the following parameters:

-p

-u

-b






Example: Purging pending messages for a user account

besuseradminclient -change -purge_pending_messages -p password1 -u [email protected] -b server01

Resen1. At t

2. Typ

See Pamore in

Example

besuser

Resen1. At t

2. Typ

27

d the peer-to-peer encryption key to the BlackBerry devicehe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -resend_peer_to_peer_key and the following parameters:

-p

-u

-b





: Resending the peer-to-peer encryption key to the BlackBerry device for a user

adminclient -resend_peer_to_peer_key -p password1 -u [email protected] -b server01

d a service bookhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -resend_service_book and the following parameters:

-p

-u

-b




28



Example

besuser

Obt

Obta1. At t

2. Typ

See Pamore in

Example

besuser

Example

besuser

Example

besuser

Example

besuser: Resending a service book to the BlackBerry device

adminclient -p password -u [email protected] -b server1 -resend_service_book

ain or clear user account statistics

in user account statisticshe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -stats and the following parameters:

-p

-u

-b





: Obtaining statistics for a user account

adminclient -p password1 -stats -u clyde warren -b server1

: Obtaining statistics for multiple user accounts

adminclient -p password1 -stats -i userinfo.txt -o output.csv

: Obtaining statistics for all user accounts on a BlackBerry Enterprise Server

adminclient -p password1 -stats -users -b server1 -o output.csv

: Obtaining statistics for all users in a group

adminclient -p password1 -stats -users -g administrators -o output.csv


Interpreting the results of a statistics query for a user account

Column Description

User name name of the user

MailBox

ServerD

PIN

Device

State

Messag

Forward

Sent

Pending

Filtered

Expired

Status

Last fwd

Last sen

Last con

Last res

SMTP a

BlackBeConnec

OTA Ca

ITPolicy

ITPolicy

ITPolicy

ITPolicy29

DN mailbox of the user

Platform: This column does not apply to the BlackBerry Enterprise Server for MDS Applications.

N canonical name of the BlackBerry Enterprise Server on which the BlackBerry device user account is located


BlackBerry device PIN (personal information number>

Type BlackBerry device model number

state of messages on the BlackBerry device (turned on or turned off)


e Server messaging server on which the BlackBerry user account is located


ed number of messages that the BlackBerry device forwarded


number of messages and organizer data items that the BlackBerry device sent


number of messages and organizer data items pending for the user account


number of messages and organizer data items that the BlackBerry Enterprise Server filtered


number of expired messages and organizer data items


configuration status of the BlackBerry device

time time when the user forwarded a message from the BlackBerry device


t time last time that the user sent a message or organizer data item from the BlackBerry device


tact time (h) time when the BlackBerry device was last in contact with the BlackBerry Enterprise Server

ult result of the last BlackBerry device contact with the BlackBerry Enterprise Server

ddress SMTP email address of the user account


rry MDS tion Service

whether the BlackBerry MDS Connection Service is available or unavailable

lendar whether wireless calendar synchronization is available or unavailable


name IT policy applied to the BlackBerry device

status status of the IT policy applied to the BlackBerry device

time applied time when the IT policy was applied to the BlackBerry device

time sent time when the BlackBerry Enterprise Server sent the IT policy to the BlackBerry device

30


Clear1. At t

2. Typ

See Pamore in

Example

besuser

Send

Send1. At t

2. Typtexme

ITPolicy time received time when the BlackBerry device received the IT policy

Wireless Message Reconciliation

whether wireless message reconciliation is available or unavailable on the BlackBerry device

Creatio

EA Pass

Encrypt

Service

Group N

Column Description user account statisticshe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -change -cs and the following parameters:

-p

-u

-b





: Clearing user account statistics

adminclient -change -p password1 -u [email protected] -b server01 -cs

ing notification messages to BlackBerry devices

a PIN messagehe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -send_pin with the following parameters:

-p


n Time time that the BlackBerry device user account was created on the BlackBerry Enterprise Server

word Expiry Time expiry time of the enterprise activation password if the password is set; otherwise,N/A appears

ion Type encryption type set on the BlackBerry device

Name name of the BlackBerry Enterprise Server on which the user account is located

ame name of the group to which the user account belongs


-u or -infofile

-b

-subject

See Pamore in

Note: U

Example

besuser

: Sending a PIN message using an input file

adminclient -p password -u Clyde Warren -b server01 -send_pin -infofile userinformation.txt

an email messageckBerry Enterprise Server for MDS Applications does not support this task.


e besuseradminclient -send_email and the following ameters:

-p

-u or -infofile

-b

-subject

-body



32



Using a

See Pamore in

Example

besuser

: Sending an email message using an input file

adminclient -p password -u Clyde Warren -b server01 -send_email -infofile userinformation.txt

aging email and folder redirection

on email redirectionckBerry Enterprise Server for MDS Applications does not support this task.


e besuseradminclient -change -er and the following parameters:

-p

-u

-b




-er



Example: Turning on email redirection for a user account

besuseradminclient -change -p password1 -u [email protected] -b server01 -er

Turn The Bla

1. At t

2. Typ

See Pamore in

Example

besuser

List tThe Bla

1. At t

2. Typ

33

off email redirectionckBerry Enterprise Server for MDS Applications does not support this task.


e besuseradminclient -change -dr and the following parameters:

-p

-u

-b




-dr


: Turning off email redirection for a user account

adminclient -change -p password1 -u [email protected] -b server01 -dr

he folders available for redirectionckBerry Enterprise Server for MDS Applications does not support this task.


e besuseradminclient -list -folders and the following parameters:

-p

-u

-b



34



See Pamore in

Example

besuser

Turn The Bla

For thespecify

1. At t

2. Typ

See Pamore in

Example

besusersubfoldrameters available for use with the BlackBerry Enterprise Server User Administration Tool on page 45 for formation.

: Listing the folders available for redirection

adminclient -p password -u clydewarren -b server01 -list -folders

on folder redirectionckBerry Enterprise Server for MDS Applications does not support this task.

BlackBerry Enterprise Server for Microsoft Exchange, a folder name can contain a slash mark (/). To the folder, the slash mark must be preceded by the escape character backslash (\).


e besuseradminclient -set_folder_redirection -er and the following parameters:

-p

-u

-b




-foldername

-er


: Turning on folder redirection with a folder name that contains a slash mark

adminclient -set_folder_redirection -p password1 -u [email protected] -b server01 -foldername Inbox/er1/sub\/folder2 -er


Turn off folder redirectionThe BlackBerry Enterprise Server for MDS Applications does not support this task.

For the BlackBerry Enterprise Server for Microsoft Exchange, a folder name can contain a slash mark (/). To specify

1. At t

2. Typ

See Pamore in

Example

besuser-foldern

Man

List t1. At t

2. Typ

35

the folder, the slash mark must be preceded by the escape character backslash (\).


e besuseradminclient -set_folder_redirection -dr and the following parameters:

-p

-u

-b




-foldername

-dr


: Turning off folder redirection

adminclient -set_folder_redirection -p password1 -u [email protected] -b server01 ame Inbox -dr

aging IT policies and IT policy rules

he IT policy rules in an IT policyhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -list -it_policy_rules and the following parameters:

-p

-u

-b



36



See Pamore in

Example

besuser

Set IT1. At t

2. Typ

See Pamore in

Example

besuserUser Na

List t1. At t

2. Typ-it_policy


: Listing the IT policy rules for an IT policy

adminclient -p password1 -list -it_policy_rules -it_policy WLAN

policy rules for a user accounthe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -set_user_itpolicy_rule and the following parameters:

-p

-u

-b




-policyrule

-policyvalue


: Setting IT policy rules for a user account

adminclient -set_user_itpolicy_rule -p password1 -u [email protected] -b server01 -policyrule VPN me -policyvalue cwarren

he IT policies in the BlackBerry Configuration Databasehe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -list -it_policies and the following parameters:


-p

-u

-b

See Pamore in

Example

besuser

Obt

List t1. At t

2. Typ

See Pamore in

Example

besuser37





: Listing the IT policies in your environment

adminclient -p password -list -it_policies

aining BlackBerry device information

he applications that are available on one or more BlackBerry deviceshe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e -handheld_info -apps and the following parameters:

-p

-u

-b





: Viewing the applications that are available on a BlackBerry device

adminclient -p password1 -handheld_info -apps -u clyde warren -b server1

38


Example: Viewing the applications that are available on the BlackBerry device in verbose detail

besuseradminclient -p password1 -handheld_info -appsfull -u clyde warren -b server1

Example

besuser

List t1. At t

2. Typ

See Pamore in

Example

besuser

List t1. At t

2. Typ

: Viewing the applications available for multiple BlackBerry devices using an input file

adminclient -p password1 -handheld_info -apps -i users.txt

he BlackBerry devices on which a specified application is installedhe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -handheld_info - appname and the following parameters:

-p

-u

-b





: Listing the BlackBerry devices on which the specified application is installed

adminclient -p password -handheld_info -appname sports_scores -o sportscores.txt

he statistics for BlackBerry deviceshe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -handheld_info -hhstats and the following parameters:

-p

-u

-b




-n (if the BlackBerry Enterprise Server User Administration Tool service and the BlackBerry Enterprise Server User

See Pamore in

Example

besuser

Example

besuser

Interp

Column

User Na

PIN

Service

BlackBe

Platform

BlackBe

Phone N

Serial N

Active C

Home C

Security

Networ

Frequen

Memory

Direct C

IT Polic

IT Polic

Configu

Configu

System

Applica

Availab39

Administration Tool client do not run on the same computer)


: Viewing statistics for a user account

adminclient -p password1 -handheld_info -hhstats -u clyde warren -b server1

: Viewing statistics for all user accounts in a group

adminclient -p password1 -handheld_info -hhstats -users -b server1

reting the results of a statistics query for a BlackBerry device

Description

me name of the user account

PIN (personal information number) of the BlackBerry device

Name service name of the BlackBerry Enterprise Server

rry Device Model model of the BlackBerry device

Version version of the platform that the BlackBerry device uses

rry Version version of the applications that the BlackBerry device uses

umber phone number of the BlackBerry device

umber International Mobile Equipment Identity (IMEI) number of the BlackBerry device

arrier current wireless service provider to which the BlackBerry device is registered

arrier the initial wireless service provider to which the BlackBerry device was assigned

Password whether the BlackBerry device password is set or not set

k Type network type for the BlackBerry device; for example, GPRS or CDMA

cies wireless frequencies that the BlackBerry device supports; for example, GSM (Global System for Mobile Communications) 900

total flash memory size for the BlackBerry device

onnect ID direct connect identification (DCID) for the BlackBerry device, if available

y Name name of the IT policy on the BlackBerry device

y Time time that the BlackBerry Enterprise Server last sent the IT policy to the BlackBerry device

ration Name name of the software configuration that is assigned to the BlackBerry device

ration Status overall status of the defined software configuration of the software that exists on the BlackBerry device

Status status of the BlackBerry Device Software on the BlackBerry device with respect to the software configuration that the user defined

tion Status status of the third-party applications on the BlackBerry device

le Space available space on the BlackBerry device

40


List t1. At t

2. Typ

See Pamore in

Example

besuser

Obt1. At t

2. Typtha

Battery Level current battery capacity level in percentage

Uptime time since the BlackBerry device was last reset

Column Descriptionhe modules and .cod files that are available on a BlackBerry devicehe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -handheld_info -modules and the following parameters:

-p

-u

-b





: Viewing the modules and .cod files on a BlackBerry device

adminclient -p password -handheld_info -modules -u clyde warren -b server1

ain BlackBerry Enterprise Server statisticshe command prompt, switch to the folder in which BESUserAdminClient.exe is located.

e besuseradminclient -stats and the following parameters:

-p

-u

-b






Example

besuser

Example

besuser

Example

besuser41

: Obtaining statistics for a BlackBerry Enterprise Server instance

adminclient -p password1 -stats -b server01

: Obtaining statistics for multiple BlackBerry Enterprise Server instances

adminclient -p password1 -stats -servers -i serverfile.txt -o output.csv

: Obtaining statistics for all BlackBerry Enterprise Server instances

adminclient -p password1 -stats -servers

42


Interpreting the results of a statistics query for a BlackBerry Enterprise Server instance

DispAdm1. At t

2. Typ

See Pamore in

Example

besuser

Column

Server N

Server S

SRP Sta

# Users

Forward

Sent

Pending

Filtered

Expired

BlackBe

PID

Platform

Server Vlay the status of the BlackBerry Enterprise Server User inistration Tool service


e besuseradminclient -status and the following parameter:

-p


: Checking the status of the BlackBerry Enterprise Server User Administration Tool service

adminclient -p password -status

Description

ame name of the BlackBerry Enterprise Server

tatus status of the BlackBerry Enterprise Server

tus status of the BlackBerry Enterprise Server SRP information

number of user accounts on the BlackBerry Enterprise Server

ed number of messages that the BlackBerry Enterprise Server forwarded


number of messages and organizer data items that the BlackBerry Enterprise Server sent


number of messages and organizer data items pending on the BlackBerry Enterprise Server


number of messages and organizer data items that the BlackBerry Enterprise Server filtered


number of expired messages and organizer data items that the BlackBerry Enterprise Server processed


rry MDS Connection Service whether the BlackBerry MDS Connection Service is available or unavailable

BlackBerry Dispatcher process ID

platform on which the BlackBerry Enterprise Server runs

ersion version of the BlackBerry Enterprise Server

Documents

Blackberry_User_administration_guide.pdf