Following your step by step instructions, I did see the old besadmin in there, deleted in and added the besadmin2. Rebooted BES and didn't see the besadmin2 right away, but it did come up within a minute or so of log on.
Then I had a moment of panic when I still didn't see messages flowing. Checked event viewer and saw that I had to restart all the BB services. Did that and Voila!. Thanks Kyle and everyone. Apart from having to reconfig the service account, the biggest problem here was my lack of familiarity with revising domain policies. Something for me to brush up on. Stan Mocek On Tue, Oct 27, 2009 at 10:37 AM, Kyle Rollin <[email protected]> wrote: > Local administrators do not need to ever log on as a service. They log on > interactively. > > > > But this is definitely a group policy issue. Try this: > > > > · Open Group Policy Management on a domain controller OR your > management workstation. > > · Look for the GPO that applies to the BES server. Right-click it > and hit “Edit” (Note: This may be just the default domain policy, or this > may be a separate policy. Choose the one that applies to your setup.). > > · Drill down to Computer Configuration / Policies / Windows > settings / Security Settings / Local Policies / User Rights Assignment. > > · On the right pane, look for “Log on as a service”. Add your > besadmin2 account here. > > · Click OK. > > · Exit the group policy editors and reboot the BES server so that > it picks up and applies the new policy. > > > > You might even see your old besadmin account there. You can choose to > delete it or keep it there. > > > > This should hopefully solve your problem. > > > > -Kyle > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Stan Mocek > *Sent:* Tuesday, October 27, 2009 11:23 AM > > *To:* A list for BES Admin's to discuss issues, etc. > *Subject:* Re: [Bes-admins] Logon as Service Grayed out after Besadmin > switch > > > > Hey Moises, > > > > The problem that I'm having is that I can't give besadmin2 the right to log > on as a service. As I mentioned, log on as service is grayed out an will not > allow me to add besadmin2. > > > > Stan Mocek > > On Tue, Oct 27, 2009 at 10:08 AM, Linares, Mo A < > [email protected]> wrote: > > Have you giving these accounts the proper rights under ‘user rights > assignment’ - act as part of the os and log on as a service > > > > I had some similar issues – even the account was part of the admin groups, > I still had to give the specific account these rights – > > > > It seems I always have issues when I update the exchange server and the bes > server doesn’t get restarted – so now I just schedule a bes restart every > time the exchange 2003 sp2 gets restarted – > > > > > > > ------------------------------ > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Stan Mocek > *Sent:* 2009-10-27 11:02 > *To:* A list for BES Admin's to discuss issues,etc. > *Subject:* Re: [Bes-admins] Logon as Service Grayed out after Besadmin > switch > > > > Thanks for the quick response. In checking the default domain policy, I see > that the original besadmin account is in there. I was able to add the > besadmin account there. The account is already a member of the local > administrators group. Interestingly, I noticed in running gpedit on BES that > only the original besadmin account had logon as service rights. No local > administrators. > > On Tue, Oct 27, 2009 at 9:43 AM, <[email protected]> wrote: > > Check your domain policy! It is possible that domain policy is overwriting > local settings. > > One possible way to get around this issue would be to add besadmin2 account > to the local administrators group. Also, please run poledit for the local > policies and verify that local admin have rights to logon as service. > > > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Stan Mocek > *Sent:* Tuesday, October 27, 2009 10:36 AM > *To:* [email protected] > *Subject:* [Bes-admins] Logon as Service Grayed out after Besadmin switch > > > > Greetings, > > > > Having a tough time nailing this down, and everything I've searched on has > com up empty. > > > > First the specs - Blackberry Professional Server running on Windows Server > 2003 Service pack 2. Exchange Server is on an SBS2003 running Exchange > Server 2003.On Friday, after a server reboot I was getting 5305 20406 > errors. Research showed me that the service account was corrupt and I needed > to create another one called mydomain\besadmin2 using KB04293 Finished that > on Friday, everything was fine. Messages have been lowing for the pas t3 and > one half days. > > > > I had to update the SBS server this morning and then the Blackbery Server > stopped talking to Exchange. Rebooted the Blackberry server and now I'm > finding that the new service account can't login because it is not > authorized to logon as service. Went to change that and it's grayed out. I > could have sworn I followed that step when switching accounts. I've > researched the web for the last couple of hours and nothing seems to work. > The mydomain\besadmin2 account is a member of the local adminstrators group. > Also. Any assistance for this would be appreciated. > > > > Stan Mocek > > > _______________________________________________ > Bes-Admins mailing list > [email protected] > http://www.dataoutages.com/mailman/listinfo/bes-admins > http://www.dataoutages.com > http://www.dataoutagenews.com > RSS Feed: http://feeds.feedburner.com/Bes-admins > --------------------------------- > > > > > This message may contain confidential and privileged information. If it has > been sent to you in error, please reply to advise the sender of the error > and then immediately delete this message. Please visit > www.bakernet.com/disclaimer_bm for other important information concerning > this message. > > > _______________________________________________ > Bes-Admins mailing list > [email protected] > http://www.dataoutages.com/mailman/listinfo/bes-admins > http://www.dataoutages.com > http://www.dataoutagenews.com > RSS Feed: http://feeds.feedburner.com/Bes-admins > --------------------------------- > > > > _______________________________________________ > Bes-Admins mailing list > [email protected] > http://www.dataoutages.com/mailman/listinfo/bes-admins > http://www.dataoutages.com > http://www.dataoutagenews.com > RSS Feed: http://feeds.feedburner.com/Bes-admins > --------------------------------- > > >
_______________________________________________ Bes-Admins mailing list [email protected] http://www.dataoutages.com/mailman/listinfo/bes-admins http://www.dataoutages.com http://www.dataoutagenews.com RSS Feed: http://feeds.feedburner.com/Bes-admins ---------------------------------
