Solved

rights being wiped out/overwritten Windows 2003

Posted on 2006-06-30
2
243 Views
Last Modified: 2010-08-05
Hello,

We have all windows 2003 standard edition service pack one servers, and are using blackberries through our Windows 2003 blackberry server and getting e-mail through our though our exchange 2003 sp2 server. Anyway, as you may know, we have to set up our default blackberry user account to have "send as" permissions for all of our end users who use blackberries to send and receive e-mails in Users and computers.

Anyway, whether I give the "send as" rights right at the individual user level, or at the OU level and set it so the rights filter down, and set the users to be able to inherit the send as rights, the rights that I assign either way seem to get completly erased whithin an hour or so. The blackberries all recieve e-mail fine, but when you reply or compose you get the red X. If i set the "send as" permission and send an e-mail while the rights are still how they should be, it sends fine. But within an hour the rights being assigned they are completly removed. Any idea what might cause this behavior and how I can get these rights to stay as I am setting them? Thanks!
0
Comment
Question by:IRRexperts
2 Comments
 
LVL 83

Accepted Solution

by:
oBdA earned 250 total points
ID: 17018802
That's very probably because the user accounts you're using are members of "protected groups" (Administrators, Account Operators, Server Operators, Print Operators, Backup Operators, Domain Admins, Schema Admins, Enterprise Admins, Cert Publishers).
Members of these groups are protected against security changes.
Check here for details and possible workarounds:

The "Send As" right is removed from a user object after you configure the "Send As" right in the Active Directory Users and Computers snap-in in Exchange Server
http://support.microsoft.com/?kbid=907434

Delegated permissions are not available and inheritance is automatically disabled
http://support.microsoft.com/?kbid=817433

AdminSDHolder Thread Affects Transitive Members of Distribution Groups
http://support.microsoft.com/?kbid=318180

Security tab of the adminSDHolder object does not display all properties
http://support.microsoft.com/?kbid=301188
0
 

Author Comment

by:IRRexperts
ID: 17019116
The print operators group was the problem here. Wee originally took everybody out of that group when we first set up our Blackberry server, but I forgot that was what we did to make the rights stick. Thanks!!!!!!!!!!!
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question