Turn On Integrated Windows Authentication So That Users Can Access Resources On Your Organization's Network - Blackberry PRD-10459-016 - Enterprise Server For MS Exchange Administration Manual

Administration Guide
located in a different Microsoft Active Directory domain than the global catalog server, you must create the Microsoft Active
Directory account in the Microsoft Active Directory domain that includes the global catalog server.
You do not need to configure constrained delegation for the Microsoft Active Directory account that you create in the
Microsoft Active Directory domain that includes the messaging server or global catalog server.
Configure the BlackBerry MDS Connection Service when the messaging
server is located in a remote Microsoft Active Directory domain
Before you begin: Create a Microsoft Active Directory account in the Microsoft Active Directory domain that the messaging
server or global catalog server is located in.
1. On the computer that hosts the BlackBerry MDS Connection Service, navigate to <drive>:\Program Files\Research In
Motion\BlackBerry Enterprise Server\MDS\Servers\instance\config .
2. In a text editor, open the rimpublic.properties file.
3. In the rimpublic.properties file, type application.handler.exchange.domain=
<domain_name> is the Microsoft Active Directory domain that contains the messaging server. For example, type
application.handler.exchange.domain=domain123.example.com.
4. Save and close the rimpublic.properties file.
5. In the Windows Services, restart the BlackBerry MDS Connection Service service.
After you finish: Turn on Integrated Windows authentication when BlackBerry device users access resources on your
organization's network.
Related information
Restarting BlackBerry Enterprise Server components,
Turn on Integrated Windows authentication so that
users can access resources on your organization's
network
Before you begin:
• Configure the Microsoft Active Directory account to access resources on your organization's network.
• If required, configure BlackBerry MDS Connection Service to use a Microsoft Active Directory account when the
messaging server is in a remote Microsoft Active Directory domain.
1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry solution
topology > BlackBerry Domain > Component view.
2. Click MDS Connection Service.
3. Click Edit component.
318
Managing how users access enterprise applications and web content
392
<domain_name> where