Solved

AdminSDHolder & Blackberry Enterprise Server on Administrator member

Posted on 2008-10-08
1
674 Views
Last Modified: 2012-06-21
I have a couple of users in active directory that are members of the administrators group.  I need to add the BES user account  to these users so that it can use the exchange send as permission to be able to send mail from their blackberry on their behalf.  Because of the AdminSDHolder, if I give them the permission to send as, one hour later AdminSDHolder takes it back away from them due to the security restrictions on Administrator groups having the send as permission.

How can I add the BES user account to these two users without AdminSDHolder taking it back away due to the send as permission?  They are currently unable to send emails due to this.

Obviously one solution is to take them out of the admin group, but that is not an acceptable solution.
0
Comment
Question by:durrence71
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 11

Accepted Solution

by:
ALogvin earned 500 total points
ID: 22673913
Use the dsacls command, part of the Server 03 toolkit.

dsacls "cn=adminsdholder,cn=system,dc=mydomain,dc=com" /G "mydomain\besadmin:CA;Send As"


Why it happens:
http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB12309&sliceId=SAL_Public&dialogID=192652288&stateId=1%200%20192646785

Good Read:

http://blogs.technet.com/sbs/archive/2006/06/30/439685.aspx



0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question