Keep Track of BlackBerry PINs the Easy Way

You need to run BPS.vbs under an account that has enough rights to let the script access and update contacts in any account as well as read from the BESAdmin mailbox. The simplest way to make sure the script has the necessary rights is to run the script under the same service account that you use for your BlackBerry services. Alternatively, you can create a separate service account. However, creating a separate service account also creates a separate opportunity for compromise, so using the BES account is safer.

If you choose to create a separate service account, you need to grant the account rights in Exchange. The Microsoft article "XADM: How to Get Service Account Access to All Mailboxes in Exchange 2000" (http://support.microsoft.com/?kbid=262054) describes two methods to create a service account. You should use the second method. You can also follow the steps detailed in Chapter 2 of the BES Installation and Getting Started Guide. The steps are in the "Assigning further Microsoft Exchange permissions to service accounts" section. . . .