Blackberry PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE Administration Manual
Blackberry PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE Administration Manual

Blackberry PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE Administration Manual

Version: 4.1 service pack: 4
Hide thumbs Also See for PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE:
Table of Contents

Advertisement

Quick Links

Administration Guide
BlackBerry Professional Software for Microsoft Exchange
Version: 4.1 | Service Pack: 4

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE and is the answer not in the manual?

Questions and answers

Summary of Contents for Blackberry PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE

  • Page 1 Administration Guide BlackBerry Professional Software for Microsoft Exchange Version: 4.1 | Service Pack: 4...
  • Page 2 SWD-313211-0911044452-001...
  • Page 3: Table Of Contents

    Change how to load existing email messages on to BlackBerry devices................Options for assigning a BlackBerry device to a user account....................Assign a BlackBerry device to a user account using the BlackBerry Manager..............Assigning a BlackBerry device to a user over the wireless network..................
  • Page 4 Map user-defined address book fields to address book fields on all BlackBerry devices..........Map an address book field in the email application to an address book field on a specific BlackBerry device..Map user-defined address book fields to address book fields on a specific BlackBerry device.........
  • Page 5 Preconfigured IT policies in the BlackBerry Professional Software..................Enforcing IT policy changes over the wireless network......................Changing the default behavior of BlackBerry devices and the BlackBerry Desktop Software in your organization ........................................Reverting to the default behavior of BlackBerry devices and BlackBerry Desktop Software..........
  • Page 6 Configure the BlackBerry MDS Connection Service to authenticate on behalf of BlackBerry devices with content servers that use LTPA................................Configure the BlackBerry MDS Connection Service to authenticate on behalf of BlackBerry devices with the RSA Authentication Manager................................ Allowing push applications on external web servers to make trusted connections to the BlackBerry MDS Connection Service......................................
  • Page 7 Assign a software configuration to a user account......................Send an application to a BlackBerry device over the wireless network................Load the BlackBerry Device Software or applications on to a BlackBerry device using the BlackBerry Manager..Managing applications on BlackBerry devices........................
  • Page 8 Add a CAL key....................................Copy a CAL key to a text file..............................Remove a CAL key..................................11 Removing the BlackBerry Professional Software from the host server..............Remove the BlackBerry Professional Software from the host server.................. Remove the registry entries from the host server........................
  • Page 9: Managing User Accounts

    Managing user accounts Add a user account You must set up user accounts on your messaging server before you set up user accounts in the BlackBerry® Professional Software. When you create a user account, you can assign an IT policy to control settings for the account. You can select one of the preconfigured IT policies, or create your own and select it.
  • Page 10: Remove A User Account From The Blackberry Professional Software

    Remove a user account from the BlackBerry Professional Software When you remove a user account from the BlackBerry® Professional Software, you can retain the BlackBerry configuration and permissions information in the user's mailbox so that you can add the user account again at a later time.
  • Page 11: Managing Blackberry Devices

    By default, the BlackBerry® Professional Software loads up to 200 message headers from the previous 5 days on to BlackBerry devices. If you set the BlackBerry Professional Software to load both the email message body and message headers on to a BlackBerry device, the BlackBerry Professional Software can load up to 750 email messages from the previous 14 days for a user.
  • Page 12: Assign A Blackberry Device To A User Account Using The Blackberry Manager

    Assign a BlackBerry device to a user account using the BlackBerry Manager You can use this method if you want to assign a BlackBerry® device to a user account and control the activation of the BlackBerry device before distributing it to the user.
  • Page 13: Create And Send A Wireless Activation Message To A User

    Assign a BlackBerry device to a user using the BlackBerry Desktop Manager When the BlackBerry® Desktop Manager is installed on a user's computer, the user can control the initial activation of a BlackBerry device. During the activation process, the BlackBerry Desktop Manager prompts the user to associate the BlackBerry device with the user's account on the messaging server and to generate an encryption key.
  • Page 14: Protect A Lost Blackberry Device

    Protect a lost BlackBerry device If a user misplaces a BlackBerry® device, you can help protect the data on the BlackBerry device by issuing commands to lock the BlackBerry device or to make it unavailable. In the BlackBerry Manager, click the Users tab.
  • Page 15: Prepare An Existing Blackberry Device For Distribution To A New User

    Prepare an existing BlackBerry device for distribution to a new user To prepare an existing BlackBerry® device for distribution to a new user, delete the previous user’s application data from the BlackBerry device and add or remove applications. To remove all applications and data from the BlackBerry device, return the BlackBerry device to its factory default state.
  • Page 16 Administration Guide Protecting lost or stolen BlackBerry devices On the Device Software Configuration screen, clear the check boxes beside the applications that you want to remove. Select the check boxes beside the applications that you want to install. Complete the application loader wizard.
  • Page 17: Configuring Organizer Data Synchronization

    • To synchronize address book data from the BlackBerry device to the BlackBerry Professional Software only, click Device to Server. • To synchronize address book data from the BlackBerry device to the BlackBerry Professional Software and from the BlackBerry Professional Software to the BlackBerry device, click Bidirectional.
  • Page 18: Customize Address Book Synchronization For A Specific User Account

    • To synchronize address book data from the BlackBerry device to the BlackBerry Professional Software only, click Device to Server. • To synchronize address book data from the BlackBerry device to the BlackBerry Professional Software and from the BlackBerry Professional Software to the BlackBerry device, click Bidirectional.
  • Page 19: Customizing Task Synchronization

    In the left pane, click Global PIM Sync. In the Tasks section, in the Synchronization Type drop-down list, click one of the following synchronization options: • To synchronize task data from the BlackBerry® Professional Software to the BlackBerry device only, click Server to Device.
  • Page 20: Turn Off Task Synchronization For A Specific User Account

    Administration Guide Customizing memo synchronization • To synchronize task data from the BlackBerry® Professional Software to the BlackBerry device only, click Server to Device. • To synchronize task data from the BlackBerry device to the BlackBerry Professional Software only, click Device to Server.
  • Page 21: Turn Off Memo Synchronization For All User Accounts

    In the left pane, click PIM Sync. In the Memos section, in the Synchronization Type drop-down list, click one of the following synchronization options: • To synchronize memo data from the BlackBerry® Professional Software to the BlackBerry device only, click Server to Device.
  • Page 22: Turn Off Memo Synchronization For A Specific User Account

    In the Message Filters section, in the Synchronization Type drop-down list, accept the Bidirectional option. In the Conflict Resolution drop-down list, click one of the following conflict resolution options: • To specify that the BlackBerry® Professional Software information overrules the BlackBerry device information, click Server Wins.
  • Page 23: Turn Off Message Filter Synchronization For A Specific User Account

    In the Message Filters section, in the Synchronization Type drop-down list, accept the Bidirectional option. In the Conflict Resolution drop-down list, click one of the following conflict resolution options: • To specify that the BlackBerry® Professional Software information overrules the BlackBerry device information, click Server Wins.
  • Page 24: Customize Message Setting Synchronization For A Specific User Account

    Turn off synchronization for contact pictures on a user account By default, pictures that users add to contact entries in their address books are synchronized between their BlackBerry® devices and the email application on their computers. Users can add, delete, and change pictures in the email application on their computers or on their BlackBerry devices.
  • Page 25: Managing The Wireless Backup And Recovery Of Organizer Data

    You can create both global field mappings that apply to all user accounts and user field mappings that apply to specific user accounts. When users request a remote address lookup in the global address list, the fields that you configure display on BlackBerry devices.
  • Page 26: Map An Address Book Field From The Email Application To An Address Book Field On All Blackberry Devices

    In the Device Field column, in the drop-down list, click the address book field that you want to map to a field on BlackBerry devices. Click OK. Map user-defined address book fields to address book fields on all BlackBerry devices In the BlackBerry® Manager, click the Home tab.
  • Page 27: Map User-Defined Address Book Fields To Address Book Fields On A Specific Blackberry Device

    Map user-defined address book fields to address book fields on a specific BlackBerry device You can map up to four address book fields that users define in the email application to a specific field on the BlackBerry® device. In the BlackBerry Manager, click the Users tab.
  • Page 29: Configuring Message Handling

    When a user receives an email message in the incoming message queue, the BlackBerry Professional Software applies filters to determine how to direct the message: forward, forward with priority, or do not forward to the user’s BlackBerry device. Email message filters that you configure in the BlackBerry Professional Software overrule the email message filters that users define using the BlackBerry®...
  • Page 30: Turn On An Email Message Filter That Applies To All User Accounts

    13. Click Move Up or Move Down to move the filter higher or lower in the list. The BlackBerry® Professional Software applies email message filters based on the order in which they appear. Organize the email message filters from the least restrictive to the most restrictive.
  • Page 31: Turn On An Email Message Filter That Applies To A Specific User Account

    13. Click Move Up or Move Down to move the filter higher or lower in the list. The BlackBerry® Professional Software applies email message filters based on the order in which they appear. Organize the email message filters from the least restrictive to the most restrictive.
  • Page 32: Managing How Messages Are Forwarded To A User Account

    BlackBerry devices. You can also manage individual user accounts, provide support to users, and control the size of the message queue and the load on the BlackBerry Messaging Agent to process forwarding requests. By default, email message forwarding is turned on for all user accounts.
  • Page 33: Turn Off Synchronization For Email Messages Sent From A Blackberry Device

    When you turn off message forwarding for a user account, the user can send email messages but cannot receive them on the BlackBerry device. The user can later turn on message forwarding on the BlackBerry device manually.
  • Page 34: Turn On Reconciliation For Permanently Deleted Email Messages

    In the left pane, click Redirection. In the Auto Signature section, double-click the Signature field. Type the signature that you want to appear in the messages that the user sends from the BlackBerry device. Click OK. Add a disclaimer to all messages sent from all BlackBerry devices Users cannot change the disclaimers that you define.
  • Page 35: Sending Notification Messages To Users

    Click OK. Specify conflict rules for multiple disclaimers If you add different disclaimers for a single user and for all users, you can specify conflict rules to control how the BlackBerry® Professional Software applies the disclaimers. In the BlackBerry Manager, click the Home tab.
  • Page 36: Send A Notification Message To All Users

    When you delete pending messages from the incoming message queue, the BlackBerry® Professional Software does not send the messages to the user’s BlackBerry device. Messages still appear in the email application on the user’s computer. In the BlackBerry Manager, click the Users tab.
  • Page 37: Monitoring Messages Sent From Blackberry Devices

    Monitoring messages sent from BlackBerry devices If your organization requires you to retain a copy of all messages that users send from their BlackBerry® devices, use the auto BCC option in the BlackBerry® Professional Software to send copies of all messages to a specified recipient.
  • Page 39: Configuring Support For Attachments

    The BlackBerry® Attachment Service in the BlackBerry® Professional Software uses distillers to convert attachments in supported file formats for display on the BlackBerry device. By default, all supported distillers are turned on. You can add or turn off support for attachment file formats.
  • Page 40: Add Support For Attachment File Formats

    By default, the BlackBerry® Attachment Service in the BlackBerry® Professional Software does not limit the file size of an attachment that is embedded in a message or retrieved through a link . The BlackBerry Professional Software sends data to the BlackBerry device in packets that are no larger than 64 KB; however, the BlackBerry Professional Software can send an unlimited number of packets.
  • Page 41: Configure The Maximum File Size For Attachments

    Configure the maximum file size for attachments You can change the maximum file size of attachment file formats to control the amount of memory that the BlackBerry® Attachment Service in the BlackBerry® Professional Software uses during the attachment conversion process.
  • Page 42: Change The Maximum File Size Of Attachments That Users Can Send

    DOM and caches the DOM locally. By default, the BlackBerry Attachment Service maintains the cache for 25 minutes or until a new request exceeds the cache limit for that process. If the cache limit is exceeded, the BlackBerry...
  • Page 43 Attachment Service deletes the document with the oldest time stamp in the cache. When users request to view an attachment on their BlackBerry devices, the BlackBerry Attachment Service accesses the DOM to process the request. The BlackBerry Attachment Service keeps all cached data in memory only and never caches the original document.
  • Page 44 Administration Guide Optimize the handling of file attachments Click OK. On the server that hosts the BlackBerry Professional Software, in the Microsoft® Windows® Services, restart the BlackBerry Attachment Service.
  • Page 45: Controlling Blackberry Device Behavior Using It Policy

    Controlling BlackBerry device behavior using IT policy You can use one or more IT policies to customize and control the functionality of BlackBerry® devices and the BlackBerry® Desktop Software. You can customize the settings in the IT policy rules for your environment. For more information, see the Policy Reference Guide.
  • Page 46 Administration Guide Preconfigured IT policies in the BlackBerry Professional Software IT policy rule Default IT Basic Medium Medium Advanced Advanced policy password password password security IT policy security security IT security IT security (disallow policy policy (disallow application application downloads) IT...
  • Page 47: Enforcing It Policy Changes Over The Wireless Network

    BlackBerry Desktop Software behavior over the wireless network. By default, the BlackBerry Professional Software resends the IT policy to the appropriate BlackBerry devices within a short period of time after you update the IT policy. You can also resend an IT policy to a BlackBerry device manually. You can configure the BlackBerry Professional Software...
  • Page 48: Reverting To The Default Behavior Of Blackberry Devices And Blackberry Desktop Software

    BlackBerry device. When an IT policy rule allows a numeric range, you can select any numerical value within the permitted range. A lock icon next to a field on the BlackBerry device indicates that the IT policy controls the setting and the user cannot change it.
  • Page 49: Create An It Policy Based On An Existing It Policy

    10. Click Apply. Create an IT policy based on an existing IT policy In the BlackBerry® Manager, click the Home tab. In the Common section, click Create IT Policy. In the list of policies, click the IT policy that you want to base the new IT policy on.
  • Page 50: Assign An It Policy To A User Account

    IT policy rules that control features or services that are not included in your version of the BlackBerry® Professional Software. Do not edit the IT policy definitions file. Download the .xml file that contains IT policy rule definitions from www.blackberry.com. Unzip the file to a temporary folder.
  • Page 51: Resend An It Policy To A Blackberry Device Manually

    Administration Guide Resend an IT policy to a BlackBerry device manually Resend an IT policy to a BlackBerry device manually In the BlackBerry® Manager, click the Users tab. Click the user account that you want to resend the IT policy to.
  • Page 53: Customizing Wireless Access To Enterprise Applications

    Specify the central push server You can configure the BlackBerry® MDS Connection Service as a central push server. The central push server acts as a single host that receives content push requests from server-side applications that reside on a corporate application server, web server, or database.
  • Page 54: Configure The Blackberry Mds Connection Service To Authenticate On Behalf Of Blackberry Devices With Content Servers That Use Ntlm

    Configure the BlackBerry MDS Connection Service to authenticate on behalf of BlackBerry devices with content servers that use LTPA Turn on HTTP cookie storage to allow the BlackBerry® MDS Connection Service to authenticate with content servers that use LTPA authentication technology.
  • Page 55: Configure The Blackberry Mds Connection Service To Authenticate On Behalf Of Blackberry Devices With The Rsa Authentication Manager

    Your organization can trust a web server that hosts push applications but is external to your environment if the BlackBerry® Professional Software stores a certificate for it in the key store file. To trust external web servers, you can configure BlackBerry devices to use the BlackBerry MDS Connection Service to retrieve certificate information for web servers that host push applications, and then use the Java®...
  • Page 56: Permit Blackberry Devices To Connect To Untrusted External Web Servers

    Do not change the default LDAP port parameters unless there is a port conflict with another service on the same computer. If you change port or host information, you must stop and restart the BlackBerry MDS Connection Service to reload the configuration information.
  • Page 57: Install Retrieved Certificates For Web Servers

    Install retrieved certificates for web servers Use the Java® keytool to add a certificate for a web server to the BlackBerry® Professional Software key store and permit connections to the trusted web server. For more information about using the Java keytool, visit java.sun.com/j2se/1.5.0/...
  • Page 58: Restrict Web Content Requests From Blackberry Devices

    Turn on pull authorization for the BlackBerry® MDS Connection Service to prevent users from accessing web content on their BlackBerry devices. If you want to provide access to certain web servers, you can create URL patterns and assign a pull rule that allows a user to access specified web servers.
  • Page 59: Assign Url Patterns To A Pull Rule

    Using standard definitions for MIME media types, you can restrict the types of media—for example, audio and video—that the BlackBerry® MDS Connection Service can deliver to applications on the BlackBerry device. For more information about MIME media types, visit www.iana.org.
  • Page 60: Prevent Users From Accessing Certain Types Of Media

    You can configure the BlackBerry® MDS Connection Service to prevent users from accessing every format of a media type (for example, video), or a specific format of a media type (for example, mp4), from the applications on the BlackBerry device.
  • Page 61 Configure the timeout interval for HTTP connections with web servers You can specify the length of time, in milliseconds, that the BlackBerry® MDS Connection Service waits for a web server to send data before it closes the HTTP connection with the web server. The default interval is 120,000 milliseconds (2 minutes).
  • Page 62: Restricting The Push Content That Users Can Receive On Their Blackberry Devices

    HTTP redirections occur when an application on the BlackBerry® device requests a web page from a web server and the web server returns a redirection status code that indicates a new URL for the web page. The default value is five redirections.
  • Page 63: Create A Push Initiator For A Push Application

    Double-click Push Initiators. Click New. Double-click Push Principal Name. Type the name of the server-side application that you want to allow to send push requests to BlackBerry devices. Double-click Credentials. Type the password for the server-side push application. Make sure that the value of the authorization HTTP header in a push request from a server-side push application matches the push principal name and password that you specified for the push initiator.
  • Page 64: Create A Push Rule

    Administration Guide Restricting the push content that users can receive on their BlackBerry devices Create a push rule In the BlackBerry® Manager, click the Home tab. Click Edit Global Properties. In the left pane, click Access Control. Double-click Push Rules.
  • Page 65: Encrypt Push Requests That Push Applications Send To Blackberry Devices

    You can configure the BlackBerry® MDS Connection Service to encrypt the push requests that server-side push applications send to BlackBerry devices using SSL or TLS. By default, the BlackBerry MDS Connection Service does not encrypt the push requests that server-side push applications send.
  • Page 66: Store Push Application Requests In The Blackberry Configuration Database

    Click Push/PAP. Click Store Push Submissions. In the drop-down list, click True. Click Apply. On the server that hosts the BlackBerry® Professional Software, on the taskbar, click Start > Administrative Tools > Services. Right-click BlackBerry MDS Connection Service. Click Restart.
  • Page 67 Connection Service can process You can configure the maximum number of push connections that the BlackBerry® MDS Connection Service can process at the same time. When this limit is reached, the BlackBerry MDS Connection Service queues the remaining push connections.
  • Page 68: Clear The Push Request Queue Manually On A Microsoft Sql Server

    Click Apply. Specify the BlackBerry MDS Connection Service flow control timeout limit You can specify how long the BlackBerry® MDS Connection Service waits for acknowledgement from a BlackBerry device before it discards pending content for that BlackBerry device. In the BlackBerry Manager, click the Connection Service tab.
  • Page 69: Specify The Maximum Number Of Persistent Socket Connections

    Make sure there is adequate system memory to support the thread pool size that you want to specify. You can specify the maximum number of threads that the BlackBerry® MDS Connection Service can process at the same time before it rejects processing requests.
  • Page 70: Specify How Often The Blackberry Mds Connection Service Polls For Configuration Information

    Administration Guide Managing push application requests On the server that hosts the BlackBerry® Professional Software, on the taskbar, click Start > Administrative Tools > Services. Right-click BlackBerry MDS Connection Service. Click Restart. Notify any push application developer in your environment that you have changed the port number.
  • Page 71: Managing Blackberry Device Software And Wireless Applications

    You can make BlackBerry® Device Software or applications available to users in the following ways: • install BlackBerry Device Software on or add applications to a BlackBerry device that is connected to the server that hosts the BlackBerry® Professional Software •...
  • Page 72: Add The Application Files To The Shared Network Folder

    You create a software index for the applications that you add to the network drive so that the application loader tool and software configurations can locate the applications that are available to add to BlackBerry® devices. When you create a software index, the BlackBerry®...
  • Page 73: Reindex The Applications In The Shared Network Folder

    A software configuration points to the shared network location of the BlackBerry® Device Software and applications that you plan to install on a specific BlackBerry device model. Using a software configuration, you can remotely add and remove third-party applications using the application loader tool on BlackBerry devices that are connected to computers running the BlackBerry®...
  • Page 74: Create A Software Configuration Based On An Existing Software Configuration

    Administration Guide Applying application control policies In the Application Name list, select the check box beside the BlackBerry device models that you want to configure the BlackBerry Device Software or applications for. 10. Select or clear the check box for each application that you want to install or remove.
  • Page 75: Assign An Application Control Policy To An Application

    • To assign the application control policy that is assigned at the application software level, click <default>. An asterisk is added to the policy name. • To assign the default application control policy rules that are preconfigured on the BlackBerry device, click <none>.
  • Page 76: Load The Blackberry Device Software Or Applications On To A Blackberry Device Using The Blackberry Manager

    Remove an application from a BlackBerry device You cannot remove an application from a BlackBerry® device over the wireless network. You can remove the icon for the application, and you can make the application inaccessible on the BlackBerry device; however, the application remains installed on the BlackBerry device.
  • Page 77: Upgrade An Application On A Blackberry Device Over The Wireless Network

    You can upgrade applications on BlackBerry® devices over the wireless network. The BlackBerry® Professional Software might take up to four hours to upgrade an application on a BlackBerry device. If the Disposition is set to Required in the application control policy, the application upgrade is also sent over the wireless network.
  • Page 79: Controlling The Blackberry Environment

    Protecting BlackBerry device data in transit From the time that the user sends data (for example, an email message) from the BlackBerry® device until the BlackBerry® Professional Software receives the data, and from the time that the BlackBerry Professional Software receives and forwards data to the user until the user receives the data on the BlackBerry device, standard BlackBerry encryption uses a symmetric algorithm to protect the data.
  • Page 80 In the drop-down list, click the encryption type that you want to use. Click OK. After you finish: If you change the encryption type, you must reactivate the BlackBerry devices in the BlackBerry Domain under one of the following conditions: •...
  • Page 81: Managing Client Access License Keys

    Save the file. Remove a CAL key You can remove a CAL key only if you have more than one. You must have a CAL key that supports the BlackBerry® Professional Software user accounts in your organization. In the BlackBerry Manager, click the Home tab.
  • Page 83: Removing The Blackberry Professional Software From The Host Server

    Removing the BlackBerry Professional Software from the host server Remove the BlackBerry Professional Software from the host server On the server that hosts the BlackBerry® Professional Software, on the taskbar, click Start > Settings > Control Panel > Add/Remove Programs. Click BlackBerry Professional Software.
  • Page 85: Legal Notice

    Legal notice Legal notice ©2008 Research In Motion Limited. All rights reserved. BlackBerry®, RIM®, Research In Motion®, SureType® and related trademarks, names, and logos are the property of Research In Motion Limited and are registered and/or used in the U.S.
  • Page 86 Administration Guide Legal notice DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM THAT IS THE SUBJECT OF THE CLAIM.
  • Page 87 WARRANTIES PROVIDED BY RIM FOR PORTIONS OF ANY RIM PRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION. Certain features outlined in this documentation require a minimum version of BlackBerry® Enterprise Server Software, BlackBerry® Desktop Software, and/or BlackBerry® Device Software and may require additional development or Third Party Products and Services for access to corporate applications.

Table of Contents