Solved

rights being wiped out/overwritten Windows 2003

Posted on 2006-06-30
2
244 Views
Last Modified: 2010-08-05
Hello,

We have all windows 2003 standard edition service pack one servers, and are using blackberries through our Windows 2003 blackberry server and getting e-mail through our though our exchange 2003 sp2 server. Anyway, as you may know, we have to set up our default blackberry user account to have "send as" permissions for all of our end users who use blackberries to send and receive e-mails in Users and computers.

Anyway, whether I give the "send as" rights right at the individual user level, or at the OU level and set it so the rights filter down, and set the users to be able to inherit the send as rights, the rights that I assign either way seem to get completly erased whithin an hour or so. The blackberries all recieve e-mail fine, but when you reply or compose you get the red X. If i set the "send as" permission and send an e-mail while the rights are still how they should be, it sends fine. But within an hour the rights being assigned they are completly removed. Any idea what might cause this behavior and how I can get these rights to stay as I am setting them? Thanks!
0
Comment
Question by:IRRexperts
2 Comments
 
LVL 84

Accepted Solution

by:
oBdA earned 250 total points
ID: 17018802
That's very probably because the user accounts you're using are members of "protected groups" (Administrators, Account Operators, Server Operators, Print Operators, Backup Operators, Domain Admins, Schema Admins, Enterprise Admins, Cert Publishers).
Members of these groups are protected against security changes.
Check here for details and possible workarounds:

The "Send As" right is removed from a user object after you configure the "Send As" right in the Active Directory Users and Computers snap-in in Exchange Server
http://support.microsoft.com/?kbid=907434

Delegated permissions are not available and inheritance is automatically disabled
http://support.microsoft.com/?kbid=817433

AdminSDHolder Thread Affects Transitive Members of Distribution Groups
http://support.microsoft.com/?kbid=318180

Security tab of the adminSDHolder object does not display all properties
http://support.microsoft.com/?kbid=301188
0
 

Author Comment

by:IRRexperts
ID: 17019116
The print operators group was the problem here. Wee originally took everybody out of that group when we first set up our Blackberry server, but I forgot that was what we did to make the rights stick. Thanks!!!!!!!!!!!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question