Active Directory Certificate Services (AD CS). AD CS role services install on a number
of operating systems, including Windows Server 2008, Windows Server 2003, and
Windows 2000 Server. Naturally the fullest implementation of AD CS is only possible
on Windows Server 2008. You can deploy AD CS as a single standalone certification
authority (CA), or you can deploy multiple servers and configure them as root, policy, and
certificate issuing authorities. You also have a variety of Online Responder configuration
possibilities.
Active Directory Domain Services (AD DS). This is the role in the Windows Server
2008 operating system that stores information about users, computers, and other
resources on a network. AD DS is also used for directory-enabled applications such as
Microsoft Exchange Server. AD also stores all information required for Group Policy.
Active Directory Federation Services (AD FS). AD FS employs technology that
allows users over the life of a single online session to securely share digital identity
and entitlement rights, or ‘‘claims,’’ across security and enterprise boundaries. This
role—introduced and supported on all operating systems since Microsoft Windows
Server 2003 R2— provides Web Single Sign-On (SSO) services to allow a user to access
multiple, related Web applications.
Active Directory Lightweight Directory Services (AD LDS). This service is ideal if you
are required to support directory-enabled applications. AD LDS is a Lightweight Directory
Access Protocol (LDAP) compliant directory service.
Active Directory Rights Management Services (AD RMS). This service augments
an organization’s security strategy by protecting information through persistent usage
policies. The key to the service is that the right management policies are bound to the
information no matter where it resides or to where it is moved. AD RMS is used to lock
down documents, spreadsheets, e-mail, and so on from being infiltrated or ending up in
the wrong hands. AD RMS, for example, prevents e-mails from being accidentally forwarded
to the wrong people.
The Application Server role. This role supports the deployment and operation of custom
business applications that are built with Microsoft .NET Framework. The Application
Server role lets you choose services for applications that require COM+, Message Queuing,
Web services, and Distributed Coordinated Transactions.
DHCP and DNS. These two roles install these two critical network service services
required for every network. They support Active Directory integration and support IPv6.
Fax Server role. The fax server lets you set up a service to send and receive faxes over
your network. The role creates a fax server and installs the Fax Service Manager and the
Fax service on the server.

File Server role. This role lets you set up all the bits, bells, and whistles that come with a
Windows file server. This role also lets you install Share and Storage Management, the Distributed
File System (DFS), the File Server Resource Manager application for managing file
servers, Services for Network File System (NFS), Windows File Services, which include
stuff like the File Replication Service (FRS), and so on.
Network Policy and Access Services. This provides the following network connectivity
solutions: Network Access Protection (NAP), the client health policy creation, enforcement,
and remediation technology; secure wireless and wired access (802.1X), wireless
access points, remote access solutions, virtual private network (VPN) services, Radius, and
more.
Print Management role. The print services provide a single interface that you use to
manage multiple printers and print servers on your network.
Terminal Services role. This service provides technologies that enable users to access
Windows-based programs that are installed on a terminal server. Users can execute applications
remotely (they still run on the remote server) or they can access the full Windows
desktop on the target server.
Universal Description, Discovery, and Integration (UDDI). UDDI Services provide
capabilities for sharing information about Web services. UDDI is used on the intranet,
between entities participating on an extranet, or on the Internet.
Web Server role. This role provides IIS 7.0, the Web server, ASP.NET, and the Windows
Communication Foundation (WCF).

Windows Deployment Services. These services are used for deployment of new computers
in medium to large organizations.

What is email reconciliation?

Email reconciliation is used to configure email deletion handling option of email accounts that are set in BB device.
For each mail account you can state whether you want the e-mail deleted on the handheld or the mailbox and handheld;
You can set the device the following ways:
Enable or disable wireless reconciliation and configure how conflicts are handled.

In order to set reconciling options on Black Berry Device go to:

Messages –> then select “Options”–> “Email Reconciliation”

Reconciliation options are:

Delete on: “Mailbox & handheld” – Means: When you delete message on Device or outlook message will be deleted.
Delete on: “Handled” – Means: When you delete message on Device, message won’t be deleted from mailbox.
Recommended settings setup:

1. From your home screen, go into your Messages folder.
2. Once in your messages, folder, bring up your menu
3. Scroll down to and choose “Options”.
4. Scroll down to and select “Email Reconciliation”.
5. In the “Email Reconciliation” menu, make sure “Delete On” is set to “Mailbox & Handheld”.
6. Confirm that Wireless Reconcile is set to “On”
7. Confirm that “On Conflicts” your “Mailbox Wins”
8. Save your changes.
9. Exit back out to your messages folder, and once again bring up the menu.
10. Scroll down to “Reconcile Now” to force reconciliation between your handheld and In-Box.
11. Your messages should now synchronize between your BlackBerry and In-Box.
Some general guidelines for Reconciliation

Most people thing that message deleted on outlook should disappear from BB device immediately and start panic. So don’t , be more patient . it takes approximately 20 minutes till messages are deleted from Handheld

1. If you delete an email from Outlook you need to leave it in the recycle bin otherwise the BES will lose track of the email and it won’t be deleted from the device. Don’t use (Shift+Delete) If you want to use shift+delete you need to activate Hard deletes reconciliation on BES 5 Server.
2.If you Outlook account is set up to transfer new emails to PST . They will never get to your BB device.
3. Remember! The deletes from Exchange to BlackBerry is not immediate. BES reconcile uses the 20/100 rule. That’s every 20 minutes or 100 changes whichever comes first. Alternatively, you can use the Reconsile Now function. Outlook in cached mode only does send and receive every 5 minutes (this also updates read, deleted & moved items), then the device will only do reconciliations every 15 minutes. To speed this process up just hit “Send & Receive” and then “Reconcile Now” on the device.

Testing:
Outlook to  BB takes up to 20 min. I find it useful to do this test:
Delete – BB
Delete – Outlook

Wait for them to deliver to both mailbox and BB.
Now delete – BB on Blackberry and watch outlook, it should take a min or two. And move to deleted in Outlook
If that works… It’s working as it should and you’re dealing with a user workflow issue. I find it helpful to turn off Empty delete folder on exit.

Show received meetings as tentative:

Meetings are automatically placed on the calendar as tentative, so that timeslots will not be overbooked. As meeting updates come in, prior updates are marked “out of date” and are automatically deleted. This means that meeting updates are not accepted in an out of order fashion keeping your calendar items current.”
You can stop/start the automatic addition of a tentative meeting when meeting request e-mail is received in Outlook by clearing/marking the check box for “Process requests and responses on arrival” :

1. On the Tools menu, click Options.
2. Click Email Options.
3. Click Tracking Options.
4. Click to clear/mark the “Process requests and responses on arrival” check box.

“The operation has been canceled due to restrictions in effect on this computer. Please contact your system administrator.”

Or “This operation has been canceled due to restrictions on your computer”

They are few solutions:

Reset Web settings

1. Start Internet Explorer
2. On the Tools menu, click Internet Options .
3. Click the Programs tab , and then click the Reset Web Settings button.
4. Under Internet programs, verify that the correct e-mail program is selected
5. Click to select the Internet Explorer should check to see whether it is the default browser check box.
6. Click Apply, and then click OK.

Export the registry key from another computer

1. Click Start, and then click Run
2. In the Open box, type regedit, and then click OK
3. Locate the following registry key: HKEY_Local_MachineSoftwareClasseshtmlfileshellopencommand
4. Click the command folder.
5. On the File or Registry menu (depending on your operating system), click Export
6. Note the location of where the file will be saved. The registry file can be saved directly to the hard drive or floppy disk.
7. Type a unique file name, and then click Save
8. Quit the Registry Editor

Here is the Reg File

Other Possible Solutions

1. Follow the instruction on the following KB articles:
   You receive an error message when you click a hyperlink in Outlook
   http://support.microsoft.com/kb/310049/en-us
2. This issue may occur if there is a Group Policy object (GPO) that restricts what
   programs you can run. Programs can be restricted if either of the following
   policies in the domain organizational unit group policy or a local computer group
   policy have been applied:
   o Do not run specified Windows applications.
   o Run only the allowed Windows applications.
3. In HKEY_LOCAL_MACHINESOFTWAREClasseshtmlfileshellopencommand change
   “C:Program FilesInternet ExplorerIEXPLORE.EXE” -nohome to
   “C:Program FilesInternet Exploreriexplore.exe” –nohome
   (and viseversa)
4. Delete the DWORD value named DisallowRun. (or remove IEXPLORE.EXE) – To do so: Locate and then click the following registry key: HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
5. to narrow the policy causing the issue to be:
   User Configuration Administrative Templates Windows Components Internet Explorer Browser menus
   Disable Open in New Window Menu option — set this to DISABLE if it enable
6. Disable the following Group Policy:
   User Configuration Administrative Templates Windows Components Internet Explorer Browser menusFile menu: Disable New Menu option
   File menu: Disable Open Menu option
   File menu: Disable closing the browser and Explorer Windows