make sure traffic is opn on port 3101(ill double check on the port number) on the firewall for the blackberry server.......
in the user options you set up a password, and then click generate and send password to the users email, the then go to enterprise activation on the blackberry enter their emial address and the password that was sent to them, it then sends an email to the users email account that contains info about the blackbery for the server to use to send to the blackberry,(this is were mine gets stuck and ive yet to figure out whats wrong)
the server is then supposed to send an email back to the blackberry so the blackberry knows how to send to the server directly, then they sync up, share keys and finalize the connection