I have followed ALL RIM support documents and verified ALL permissions in Exchange, AD, and BES, and I still cannot send e-mail from a Blackberry if the user is a member of a protected group (in this case, domain admins).
I add our BESAdmin account to the AdminSDHolder object and gave it "Send As" permissions. This added it to all of our domain admins and it no longer removes itself after an hour or so.
However, I am still unable to send. I've rebooted the BES, restarted the Information Store on Exchange, shut the BB Router service off for 20min, 2 hours, you name it. I've shut the BB devices themselves off for 2 hours... still no luck.
If I shut the Router service off and then back on... I can send e-mail for about 20min, and then it stops again.
This just started happening recently (apparently from a MS update). I've read all of the threads here to no avail. Any suggestions? Is adding "Send As" to the AdminSDHolder object the same as running that DCACLS.exe tool? I have NOT run that yet since I thought it was the same thing.