Solved

rights being wiped out/overwritten Windows 2003

Posted on 2006-06-30
2
245 Views
Last Modified: 2010-08-05
Hello,

We have all windows 2003 standard edition service pack one servers, and are using blackberries through our Windows 2003 blackberry server and getting e-mail through our though our exchange 2003 sp2 server. Anyway, as you may know, we have to set up our default blackberry user account to have "send as" permissions for all of our end users who use blackberries to send and receive e-mails in Users and computers.

Anyway, whether I give the "send as" rights right at the individual user level, or at the OU level and set it so the rights filter down, and set the users to be able to inherit the send as rights, the rights that I assign either way seem to get completly erased whithin an hour or so. The blackberries all recieve e-mail fine, but when you reply or compose you get the red X. If i set the "send as" permission and send an e-mail while the rights are still how they should be, it sends fine. But within an hour the rights being assigned they are completly removed. Any idea what might cause this behavior and how I can get these rights to stay as I am setting them? Thanks!
0
Comment
Question by:IRRexperts
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 84

Accepted Solution

by:
oBdA earned 250 total points
ID: 17018802
That's very probably because the user accounts you're using are members of "protected groups" (Administrators, Account Operators, Server Operators, Print Operators, Backup Operators, Domain Admins, Schema Admins, Enterprise Admins, Cert Publishers).
Members of these groups are protected against security changes.
Check here for details and possible workarounds:

The "Send As" right is removed from a user object after you configure the "Send As" right in the Active Directory Users and Computers snap-in in Exchange Server
http://support.microsoft.com/?kbid=907434

Delegated permissions are not available and inheritance is automatically disabled
http://support.microsoft.com/?kbid=817433

AdminSDHolder Thread Affects Transitive Members of Distribution Groups
http://support.microsoft.com/?kbid=318180

Security tab of the adminSDHolder object does not display all properties
http://support.microsoft.com/?kbid=301188
0
 

Author Comment

by:IRRexperts
ID: 17019116
The print operators group was the problem here. Wee originally took everybody out of that group when we first set up our Blackberry server, but I forgot that was what we did to make the rights stick. Thanks!!!!!!!!!!!
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question