asked on

Exchange 2003 SP2 - Mobile Services - Required Rights?

What rights are required to manage Exchange 2003 SP2 Mobile Services - Device Security - Exception list?

I have some helpdesk staff who are going though the process of updating smart phones to the Mobile Security Pack. I need the helpdesk staff to have the ability to remove users from the "Exception List." I've testing giving them security rights to the Mobile Services page with no luck. I've also tried giving them delegated Exchange Administrator rights with no luck. It just errors out and gives the person the following message:

Facility: LDAP Provider
ID no: 80070005
Exchange System Manager

I'm guessing that there are some AD rights that might be needed but I'm not entirely sure.

Funny thing is I've tried calling Microsoft who flat out refuses to help me with anything regarding Active Sync or Mobile services. Go figure, you'd think it wasn't their product.

ASKER CERTIFIED SOLUTION

LeeDerbyshire

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

SLafferty1983

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

CrazyStand

ASKER

Thanks for the response. The two fields that are updated are msExchOMAAdminExtendedSettings and msExchOMAAdminWirelessEnable. Apparently when you bring up the exception list, an LDAP query is performed which looks for msExchOMAAdminExtendedSettings value of PolicyDataExemption:True. Whether the user is actually exempt or not comes from the msExchOMAAdminWirelessEnable field having a certain value.

Anyway, making the helpdesk person a part of the Account Operators seems to have worked. It took me a good deal of hunting and comparing users in ADSI edit to find those to fields.

Once I found out the two fields that seemed to be different I was able to find this article that does a much better job of explaining it all:
http://msexchangeteam.com/archive/2005/06/20/406586.aspx

Thank you both for pointing me in the right directions.