Solved

rights being wiped out/overwritten Windows 2003

Posted on 2006-06-30
2
241 Views
Last Modified: 2010-08-05
Hello,

We have all windows 2003 standard edition service pack one servers, and are using blackberries through our Windows 2003 blackberry server and getting e-mail through our though our exchange 2003 sp2 server. Anyway, as you may know, we have to set up our default blackberry user account to have "send as" permissions for all of our end users who use blackberries to send and receive e-mails in Users and computers.

Anyway, whether I give the "send as" rights right at the individual user level, or at the OU level and set it so the rights filter down, and set the users to be able to inherit the send as rights, the rights that I assign either way seem to get completly erased whithin an hour or so. The blackberries all recieve e-mail fine, but when you reply or compose you get the red X. If i set the "send as" permission and send an e-mail while the rights are still how they should be, it sends fine. But within an hour the rights being assigned they are completly removed. Any idea what might cause this behavior and how I can get these rights to stay as I am setting them? Thanks!
0
Comment
Question by:IRRexperts
2 Comments
 
LVL 83

Accepted Solution

by:
oBdA earned 250 total points
ID: 17018802
That's very probably because the user accounts you're using are members of "protected groups" (Administrators, Account Operators, Server Operators, Print Operators, Backup Operators, Domain Admins, Schema Admins, Enterprise Admins, Cert Publishers).
Members of these groups are protected against security changes.
Check here for details and possible workarounds:

The "Send As" right is removed from a user object after you configure the "Send As" right in the Active Directory Users and Computers snap-in in Exchange Server
http://support.microsoft.com/?kbid=907434

Delegated permissions are not available and inheritance is automatically disabled
http://support.microsoft.com/?kbid=817433

AdminSDHolder Thread Affects Transitive Members of Distribution Groups
http://support.microsoft.com/?kbid=318180

Security tab of the adminSDHolder object does not display all properties
http://support.microsoft.com/?kbid=301188
0
 

Author Comment

by:IRRexperts
ID: 17019116
The print operators group was the problem here. Wee originally took everybody out of that group when we first set up our Blackberry server, but I forgot that was what we did to make the rights stick. Thanks!!!!!!!!!!!
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now