Once you have installed your Exchange server you can now install you BES Express server, but before you can install your Bes server, you need to setup a bes admin account.
The bes admin account needs to have local admin rights on the bes server but doesn't need domain admin rights. There are some specific rights that the account needs or you'll have problems with user rights and the bes server wont work, so this is how you setup the account.
First open AD users and computers and click on view in the menu bar and advance features.
You now need to add the besadmin account and give it the appropriate rights, click on the add button.
Type in besadmin and click check name and then ok.
Now click on the advance button and click on the besadmin account and click on the edit button as shown below in yellow.
Now make sure the type is set to allow and select descendant user object in the applies to selection, finally click on send as in the permission section and click ok. close all the other boxes.
CDO Download
You are now ready to install Bes 5.0.4. Download the current version of BES express to your desktop and click on setup to start the install process.
Make sure that you log on to Windows as besAdmin as this is the account that needs to be used for the install process.
Click next on the next page.
Review the pre-installation checklist and click next.
Install the SQL express unless you want to run big boy SQL, click next.
On the next page type in your besAdmin username and password and click next.
You may at this stage get an error prompting you to install .net 3.0, if this is the case mount the windows 2012 CD and install .net using the option below.
If you had to install .net, you will need to run through the install process again and up to the summary page. the next stage of the installation is the database options, keep the default settings and click next.
You will be prompted to install a database, click yes, the database will now be installed. once the DB installation has completed, click ok on the box and click next.
You now need to type in your bes key, the SRP identifier, and the SRP authentication key which you should of obtained from the blackberry site. if you haven't got one, go to this link blackberry.com
Now add the name of your exchange 2010 server and the besadmin username and click check name. click next.
On the administration setting page you need to type a password for the SSL cert.
On the next page type out the AD details for the besadmin account.
On the next page, keep the default options and click next.
Next the bes services will attempt to start.
Finally if all the service start with no issues, you will come to the final page which will show the URL needed to log onto the web portal, make sure you make a note of this as its a real pain to find after.
The last task is to log onto the web portal to ensure it works.
And that's it you now have your Bes server for your blackberry's.