can use Microsoft Active Directory authentication to log users into the BlackBerry Administration Service console and the
BlackBerry Web Desktop Manager.
You must install the BlackBerry Enterprise Server in the resource forest if a resource forest exists in your organization's
environment. In the resource forest, you create a mailbox for each user account and associate the mailboxes with the user
accounts that are located in the account forests. When you associate the mailboxes in the resource forest with the user
accounts in the account forests, the user accounts obtain full access to the mailboxes and the user accounts in the
account forests are connected to the Microsoft Exchange server.
To authenticate users who log in to the BlackBerry Administration Service or BlackBerry Web Desktop Manager, the
BlackBerry Administration Service must read the user information that is stored in the global catalog servers that are part
of the resource forest. To configure the BlackBerry Administration Service to authenticate user accounts that are
associated with mailboxes in the resource forest, you must create a Microsoft Active Directory account for the BlackBerry
Administration Service that is located in a Windows domain that is part of the resource forest. During the BlackBerry
Enterprise Server installation process, you provide the Windows domain, user name, and password for the Microsoft Active
Directory account, and, if required, the names of the global catalog servers that the BlackBerry Administration Service can
use. You can change the Windows domain, user name, and password for the Microsoft Active Directory account and global
catalog servers after the installation process completes.
For more information, visit technet.microsoft.com to read Using a Dedicated Exchange forest.
Related information
Restarting BlackBerry Enterprise Server components, 392
Change the information for Microsoft Active Directoryauthentication
Before you begin:
• Create a Microsoft Active Directory account for the BlackBerry Administration Service that is located in a Windows
domain that is a part of the resource forest. When you create the account, specify a password that meets the security
requirements of your organization and configure the following password settings:
• the user is not required to change the password at next login
�� the user's password never expires
1. In the BlackBerry Administration Service, expand BlackBerry solution topology > BlackBerry Domain > Component
view.
2. Click BlackBerry Administration Service.
3. On the Microsoft® Active Directory® authentication tab, click Edit component.
4. In the User name field, type the name for the Microsoft Active Directory account that has permission to access the
user containers and read the user objects that are stored in the global catalog servers that are located in the resource
forest.
5. In the Password field and Confirm password field, type the password for the Microsoft Active Directory account.
Administration Guide Changing the security settings of the BlackBerry Administration Service and BlackBerry Web Desktop
Manager
268