?
Solved

rights being wiped out/overwritten Windows 2003

Posted on 2006-06-30
2
Medium Priority
?
250 Views
Last Modified: 2010-08-05
Hello,

We have all windows 2003 standard edition service pack one servers, and are using blackberries through our Windows 2003 blackberry server and getting e-mail through our though our exchange 2003 sp2 server. Anyway, as you may know, we have to set up our default blackberry user account to have "send as" permissions for all of our end users who use blackberries to send and receive e-mails in Users and computers.

Anyway, whether I give the "send as" rights right at the individual user level, or at the OU level and set it so the rights filter down, and set the users to be able to inherit the send as rights, the rights that I assign either way seem to get completly erased whithin an hour or so. The blackberries all recieve e-mail fine, but when you reply or compose you get the red X. If i set the "send as" permission and send an e-mail while the rights are still how they should be, it sends fine. But within an hour the rights being assigned they are completly removed. Any idea what might cause this behavior and how I can get these rights to stay as I am setting them? Thanks!
0
Comment
Question by:IRRexperts
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 85

Accepted Solution

by:
oBdA earned 1000 total points
ID: 17018802
That's very probably because the user accounts you're using are members of "protected groups" (Administrators, Account Operators, Server Operators, Print Operators, Backup Operators, Domain Admins, Schema Admins, Enterprise Admins, Cert Publishers).
Members of these groups are protected against security changes.
Check here for details and possible workarounds:

The "Send As" right is removed from a user object after you configure the "Send As" right in the Active Directory Users and Computers snap-in in Exchange Server
http://support.microsoft.com/?kbid=907434

Delegated permissions are not available and inheritance is automatically disabled
http://support.microsoft.com/?kbid=817433

AdminSDHolder Thread Affects Transitive Members of Distribution Groups
http://support.microsoft.com/?kbid=318180

Security tab of the adminSDHolder object does not display all properties
http://support.microsoft.com/?kbid=301188
0
 

Author Comment

by:IRRexperts
ID: 17019116
The print operators group was the problem here. Wee originally took everybody out of that group when we first set up our Blackberry server, but I forgot that was what we did to make the rights stick. Thanks!!!!!!!!!!!
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question