Blackberry PRD-10459-016 Administration Guide - Page 353

Administration Guide Configuring the BlackBerry Enterprise Server to use LDAP to retrieve email addresses and organizer data Prevent the BlackBerry Enterprise Server from retrieving contact information for specific users If you are required by your organization to prevent BlackBerry® device users from finding contact information for specific users, you can specify a list of users that you want to prevent BlackBerry device users from finding contact information for or you can filter users using an attribute in Microsoft® Active Directory®. Before you begin: • Configure the BlackBerry® Enterprise Server to resolve email addresses and organizer data information using LDAP. • If you want to filter users using an attribute, choose an attribute in Microsoft Active Directory such as Mail or any of the extensionAttributes (extensionAttribute1 through extensionAttribute15). You can use the Active Directory Users and Computers console to change the value for the attribute to HideFromBlackBerry for all users that you do not want BlackBerry device users to find. 1. On the computer that hosts the BlackBerry Enterprise Server, click Start > Run. 2. Type regedit. Click OK. 3. Perform one of the following actions: • If you are running a 32-bit version of Windows®, navigate to HKEY_LOCAL_MACHINE\Software\Research In Motion\BlackBerry Enterprise Server\Agents. • If you are running a 64-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software \WOW6432Node\Research In Motion\BlackBerry Enterprise Server\Agents. 4. Create a String value named LDAPALPObjectCategory. 5. Change the value to one of the following options: • If your organization uses Microsoft® Exchange 2007 or Microsoft Exchange 2010, use msExchDynamicDistributionList,Group,Person))(!(=HideFromBlackBerry, where is the name of the attribute that you want to filter (for example, extensionAttribute1). • If your organization uses earlier versions of Microsoft Exchange, use Group,Person))(! (=HideFromBlackBerry, where is the name of the attribute that you want to filter (for example, extensionAttribute1). You can use an asterisk (*) as a wildcard. 6. In the Windows Services, restart the BlackBerry Controller. Related topics Restarting BlackBerry Enterprise Server components, 330 Restrict the location in Microsoft Active Directory that the BlackBerry Enterprise Server can retrieve email addresses and organizer data from You can configure a BlackBerry® Enterprise Server instance so that it searches for email addresses and organizer data only in a specified BaseDN in Microsoft® Active Directory®. 1. On the computer that hosts the BlackBerry Enterprise Server, click Start > Run. 351