Microsoft Office Communication Server 2007 Client for BlackBerry 6.0 / BlackBerry Torch

UPDATE: RIM released a new version that works with 6.0, simply go to their download section to get it.

Hey I just got the torch and I am loving it! Sure it’s a little laggy now and then and sometimes it doesn’t play nice with my WiFi but all in all, BEST BLACKBERRY EVER! The two things I mentioned I believe will be fixed with soon upcoming future releases of the OS.

However there is one problem, BES isn’t push my OCS / Communicator Client to the phone. I did a little Google Searching and didn’t find anything. Here is how I fixed it.

Special Note: If RIM releases a new version please don’t follow these directions anymore, this is just a work around for now and I am not responsible if you toast your torch 😉


1) Download the desktop version from RIM’s site:

2) Extract the following files to your desktop
– \oc2007\For_5.0.0\net_rim_bb_qm_oc2007.cod
– \oc2007\For_5.0.0\net_rim_bb_qm_oc2007_resource_en.cod

3) Download BBSAK 1.7 (if you don’t already have it) from here:

4) Open BBSAK (if no start menu short cut its here: C:\Program Files\BBSAK\BBSAK.exe)

5) Put in your device password (if you have one) then go to the Modify COD’s tab

6) Click on “JAD Maker”

7) Add the two files on your desktop, Name the App “Enterprise Manager”, give it a description, Version “2.5.20”, and Vendor is Research in Motion”.

8) Finally click Create JAD

9) Once its created click the INSTALL JAD button and select the newly created JAD file. NOTE: This may reboot the device, scared me a lot but it came up just fine after the boot and application works.

Thanks and let me know if you have any problems!

Configure BES 5.0.2 SSO / Auto Logon (Active Directory)

So when I heard they released BES 5.0.2 (v5 SP2) I was super excited because they were finally enabling single sign-on for the admin and web desktop.

However like many things RIM they made it EXTREMELY hard to configure. When I called T-Support they didn’t know how to configure it but forwarded me to page 260 of the 5.0.2 admin guide.

For those that just want the steps scroll down, the next few paragraphs will be me ranting. Look for the larger underlined text for the steps.

Ok let’s see, Step 1 from the Admin Guide:

Use the Windows Server® ADSI Edit tool to add the following SPNs for the BlackBerry® Administration Service pool to the

Microsoft® Active Directory® account :

• HTTP/<BAS_pool_FQDN> (for example, HTTP/

• BASPLUGIN111/<BAS_pool_FQDN> (for example, BASPLUGIN111/

Ok doesn’t really make any sense, doesn’t tell you for which AD account nor how to do those steps but I am sure step 2 will explain better.

If you create separate pools of BlackBerry Administration Service instances and BlackBerry Web Desktop Manager instances

in the BlackBerry Administration Service pool, add the HTTP/<BAS_pool_FQDN> SPN for each pool to the Microsoft Active

Directory account.

Nope, no help there. THANKS RIM! Super awesome instructions! I called back and got their overseas call center. He was not helpful at all, when I told him “listen it’s a new feature that came out yesterday, let’s just save us both some time and pass me along to someone who has actually enabled this before” I was told he could not. When I asked for his manager he told me that management wasn’t technical and couldn’t help me either. I insisted and magically I got elevated to level 2 (an “analyst”) without speaking to the manager.

Side Note: If they put as much thought into their tech documents as they do their technical support tier names I think I wouldn’t have to call them.

Level 2 wasn’t much more help, they definitely didn’t get any training on what I would think would be a highly requested feature. He put me on hold for 10 minutes and came back with a “private section of the admin guide”. I am going to spare you the 8 pages of nonsense from that and instead give you clear steps on how to enable this feature.

Configuring AD at accept BlackBerry Enterprise Server 5.0.2 Single Sign-on

Background info: I am going to be using a Windows 7 / 2008 R2 Active Directory Users and Computers MMC, if you don’t have this version you can use ADSI edit to do the same thing. For deployment I decided to make a new AD Account for the purpose of Single Sign-On instead of making AD changes to the existing BES Service Account we had been using. The documentation isn’t clear if this is the way you should do it or not.

Disclaimer: This is all at your own risk. This did work for me but I do not clam to know your exact environment. If you are in doubt of any of these steps contact T-Support and have them help you. Also if you find better ways or if I have items that are not accurate please leave me a comment so I can clean it up. For all my ranting at RIM the real reason I do this is so others don’t have to go through the hassle that I did.

1) Open ADUC (Active Directory Users and Computers MMC)

2) Make sure Advanced Features are enabled by clicking View -> Advanced Features (checked means its enabled)

3) Find a nice OU to put your new service account in and create the account. (For my example I called mine svc-blackberry-ldap)

4) Right click your new user account and go to properties

5) Go to the Attribute Editor (if not there you don’t have advanced features enabled or you are not using a later version of ADUC, if that is the case use ADSI edit)

6) Double click on “servicePrincipalName”

7) Add the following:

BASPLUGIN111/<poolname /w FQDN>
HTTP/<poolname w/FQDN>

If your blackberry pool is called blackberry and your domain name is company.local then it would be:


That is SPN then forward slash then FQDN of Pool. No spaces.

8) Then click OK.

9) Next open the properties of the new account again by right click -> properties

10) You should see a delegation tab next to telephone

11) Select the “Trust this user for delegation to specified service only” and the sub option of “Use Kerberos only”

12) Next click Add on the bottom of the delegation screen

13) Click the “Users or Computers…” button

14) Type in the name of that service account you just created (that you also have the properties open for) my example is “svc-blackberry-ldap” and click OK

15) Next click Select All on the bottom then click OK

16) Then click OK the finish configuring AD.

Now your AD is setup correctly, we have to move onto configuring the BES/BAS Server to use this account. If you have a larger environment you may want to wait till AD replication is finished. In my setup both DC’s that my BES/BAS server used were local site, I waited 5 minutes anyways just to be safe.

Configuring BAS / BlackBerry Enterprise Server 5.0.2 Single Sign-on

1) Logon to your BES/BAS Admin Site (I recommend using the account you used to install but not required if you have full admin rights)

2) Click on Administrator User -> Create an Administrator User

3) Next put in the account details from the service account you just created and click “create an administer user” (note | the password is of the BES Admin not the new account.)

4) Next navigate to Server and Components -> BlackBerry Solutions Topology -> BlackBerry Domain -> Component View -> BlackBerry Administration Service

Side note: these names and structure could have only been thought up by a java programmer who has total disregard for end user mental stability.

5) Click on the Microsoft Active Directory Authentication Tab

6) Click on Edit Components on the bottom

Side Note: Ah the final configuration screen, this was by far the hardest part. This page is riddled with bugs so you have to be very careful here.

8) Change the Username to the new account on the top box, make sure domain is in there, put the password of your new account, set the default domain, then set the Single sign-on to YES and click SAVE ALL.

If it works it will take a second then tell you it was ok and to restart the BAS service. If it failed there can be a number of reasons. One, if you only have one domain you do not need to put anything on the bottom box (which BTW doesn’t have a name!!! It’s not called the “account forest name” box is it??) If you have more than one domain my directions might not be exactly right for you but should give a good start.

9) Restart BAS. Easiest way is to use the services.msc console to restart the BAS-NC service, this will stop and start the app service as well.

So with any luck you should be good to go now. Enjoy and shame on you RIM for not documenting this properly! This only took me 6 hours on the phone with your support and 1 hour to write up. If you are going to take the time to release a feature you could take 1 hour to make sure that bullet listed features are easy to configure.

UPDATE / SIDE NOTE: Sandra from in the comments added that you can not test this on the server console locally, you must do it from another machine.

Fix: Facebook for BlackBerry contact and calendar sync disabled | Options Grayed out

So with Facebook for Blackberry in version 1.5 they introduced three new options.

  • BlackBerry Calendar Application
  • BlackBerry Message Application
  • BlackBerry Contacts Application

They are really cool features. The Contacts Application sync’ed all my Facebook profile images with my contacts in BlackBerry. When someone calls, their profile photo shows on the caller ID.

Anyways, when I upgraded to 1.6 and beyond, the Calendar and Contacts options grayed out and were no longer able to be selected.

To fix this you need to have access to your BlackBerry Enterprise Server.

If you are using 4.x then follow the directions here: Facebook for BlackBerry contact and calendar sync disabled in 1.6

If you are using 5.x of BES Server then you need to follow the directions here: BlackBerry 5.0 Applications Not Working | Permissions Issues


Fix: Amazon Kindle App for BlackBerry Not Working | Permissions Issue

Finally! Amazon releases the Kindle application. Thank you Amazon!

Unfortunately with the default policies enforced by a BlackBerry Enterprise Server (BES) 5.0 I was unable to open the application.

I have created directions for fixing the issue here: BlackBerry 5.0 Applications Not Working | Permissions Issues

Few other disappointing things on the Kindle application for BlackBerry:

  • Lack of support for the BlackBerry Storm 1 or 2. It will only go portrait, won’t turn to landscape view. | iPhone version has this
  • No inverted colors (white text on black), Blackberries have really bad brightness controls, trying to read a book in the dark burns your eyeballs out when the background is white and the brightness is set too high. It also wastes the battery. | iPhone version has this

Other than that it does work as advertised. Amazon if you are out there please make a revision with these two basic and simple things in it. While you are at it please add inverted colors to the desktop version too. Please?

Fix: BlackBerry 5.0 Applications Not Working | Permissions Issues

Since BlackBerry Device 5.0 OS and BlackBerry Enterprise Server (BES) 5.0 a lot of applications no longer work by default. They prompt you for the permissions that the app would like to have. However if you are on a corporate BES server you may not be able to select “allowed”, you may only have the “Prompt” and “Deny”.

If this is the case have no fear. I have already called T-Support and been told its not their problem and I should see the app vendor. Thanks RIM again for that really awesome level 1 support. However this is in fact not the case, it is a BES server issue. RIM should really have level one technical reps that at least know all the corners of the BES application or they shouldn’t be supporting it.

I was able to find the “Application Control Polices” causing the issue. To get this fixed you need to have admin rights to the BES server or get your Admin to do it for you.

Configuring “Application Control Polices”

1) Logon to the BES Server

2) Click on the “Manage Application Control Policies for unlisted Applications” under BlackBerry Solution Management -> Software (on the left had side).

3) Then click on the “Standard Unlisted Optional” link on the right had side

4) Next click the “Edit Application Control Policy” and then “Access Settings” Tab.

5) Finally change the needed permission here. Unfortunately they don’t map name for name on OS and BES so you will have to do some trial and error. Also I have found updating the policy then doing a battery pull on the device and waiting 5 minutes generally tends to get the new policy down to the device.

DISCLAIMER TIME: I have no idea how unsecure this makes your deployment. Use these directions at your own risk. I have set all to “allowed” for the purpose of this screenshot only, I do not recommend doing this unless you know what you are doing. I would love to see some comments on what you find as some of this still doesn’t make total sense to me.

Fix: BES 5 on SQL 2008 (BAS: “cannot display the webpage”)

Wanted to take a quick second to let everyone know SQL 2008 does work on BlackBerry Enterprise Server 5.0. After spending what could arguably be the greatest waste of one hour of my life on the phone with TSupport they told me it’s not supported. However it does. Since its not officially supported make sure to always tell them you are running SQL 2005 and if for some reason the server breaks you are on your own.

The install was using a remote SQL 2008 cluster (although should work the same for a non-cluster.) The actual install worked fine, DB’s were created and every looked good. NETSTAT –an showed it was listening on 443 but when I went to a browser I would get “Internet Explorer cannot display the webpage”.

I never laugh so hard as when TSupport level 1 told me to click the “Diagnose Connection Problems”. That alone told me I was in for a bumpy ride.

Officially IE8 (Internet Explorer 8 ) is not supported and nether is SQL 2008. This is just another example of RIM not getting it (very common). In fact you think that once got the server running using the migration tools is going to be a snap. Well think again, no IT policy import and export between 4 and 5. Shame on RIM, seriously. Their Java programmers are on another planet. The user migrator isnt bad however.

Make sure to install MR1 right after installing the server (even before its actually working).

So my problem ended up being the SQL settings. Make sure in the BlackBerry Server Configuration you check off “Use dynamic ports”. It will not work hard coded to 1433 even if you have that set on the SQL Server.

One last recommendation, change the LDAP settings to just the domain name. By default it puts a domain controller in there. Only problem, if that DC is not there BES will not be able to query. Assuming your DNS is setup to resolve FQDN to your DC’s then change the LDAP from server.domain.ext to domain.ext as shown in this example. Always make sure to click verify.

*** UPDATE **** Installing the Native SQL Server Client 10.0 also seemed to help. Had problems with Office Communication Server 2007 intergration that was fixed by installing the client. Also make sure you are running the 2.1.19 (for 4.6 OS and lower) and 2.2.21 (for 4.7 OS and greater).

Eric’s List of Best Must Have BlackBerry Storm Applications

I have seen a lot of these app lists in the past but they are never complete.  Since I seem to rebuild my Blackberry all the time I thought it would be nice to share a complete list of what applications I install for the BlackBerry Storm each time.  They are all free unless otherwise noted. Also a lot of these applications will work on standard Blackberries as well.

Must Have Applications for the BlackBerry Storm:


  • FaceBook
    • Actually made by RIM, it’s a clean, very deeply integrated client for the BlackBerry.
    • With version 1.6 you can do everything you need right from your mobile device.
    •  (from your wireless device)
  • BlackBerry App World
  • Pod Trapper
    • The #1 application on the BlackBerry Storm, period.
    • Allows for automatic download of Podcasts to your BB, will delete old ones automatically.
    • Great to have Audio and Video on BB for those times you have nothing to do.
    • Some really good Podcasts out there (will post a list of some of the good ones soon).
    • Paid Software ($10 and worth every penny).
    • Free 30 day trial.
  • Visible Vote
    • A must have.
    • VV will show you all pending legislation and allow you to vote on it.
    • Once you have voted it will show you your state legislators and how many voted with you or against you.
    • Has some FaceBook integration too if you dare bring politics to FaceBook
    • Best part, when you vote it emails your senators letting them know how you would like them to vote.
  • Slacker Radio
    • At work I use Pandora but on the road you have to use Slacker.
    • It has offline cache of up to 25 radio station for free (great for slow BB’s on t-mobile)
    • Advanced UI, easy to use.
    • (from your wireless device) 
  • Google Maps
    • Google always knocks it out of the park.
    • Best app for maps and directions.
    • Also great for looking at local traffic.
    • (from your wireless device) 
  • YouTube
    • Another great app for the BlackBerry Storm from Google.
    • It’s a really rich full featured application for watching YouTube videos. 
  • Mobi Pocket
  • CoinToss for BB
  • Weather Bug
    • Uses GPS to tell you local weather without having to type in where you are.
    • Get it right off the App World for Free. 
  • Staples Easy Button
  • StormSketch

Honorable Mention Applications: 

YouTube App for BlackBerry Storm

Not new news but I wanted to post a link to the BlackBerry YouTube application that was developed by Google. For some reason people (including me) have a hard time locating it.

This client is awesome, full rich UI (not the mobile web pages.) It’s the most iPhone feeling app for blackberry.

Direct your Blackberry over to and it should offer a version 1.6 or greater.

Also you can check out more by visiting there product page:

Only works for the BlackBerry Storm.

Fix: Facebook for BlackBerry contact and calendar sync disabled in 1.6

So with Facebook for Blackberry in version 1.5 they introduced three new options.

  • BlackBerry Calendar Application
  • BlackBerry Message Application
  • BlackBerry Contacts Application

They are really cool features. The Contacts Application sync’ed all my Facebook profile images with my contacts in BlackBerry. When someone calls, their profile photo shows on the caller ID.

Anyways, when I upgraded to 1.6, the Calendar and Contacts options grayed out and were no longer able to be selected.

UPDATE: The following directions are for a BES 4.x server, if you have a BES 5.x server please follow these directions:

After some research I came across this:

Basically RIM (who makes the Facebook app) decided that this functionally would be controlled by your IT admin (fortunately that’s me.) I followed the directions but I still couldn’t figure out where the new settings were in the IT policy.

I finally found them here:

Lastly, once the settings are configured you need to restart the BES services before the devices can take the new settings.