Solved

AdminSDHolder & Blackberry Enterprise Server on Administrator member

Posted on 2008-10-08
1
671 Views
Last Modified: 2012-06-21
I have a couple of users in active directory that are members of the administrators group.  I need to add the BES user account  to these users so that it can use the exchange send as permission to be able to send mail from their blackberry on their behalf.  Because of the AdminSDHolder, if I give them the permission to send as, one hour later AdminSDHolder takes it back away from them due to the security restrictions on Administrator groups having the send as permission.

How can I add the BES user account to these two users without AdminSDHolder taking it back away due to the send as permission?  They are currently unable to send emails due to this.

Obviously one solution is to take them out of the admin group, but that is not an acceptable solution.
0
Comment
Question by:durrence71
1 Comment
 
LVL 11

Accepted Solution

by:
ALogvin earned 500 total points
ID: 22673913
Use the dsacls command, part of the Server 03 toolkit.

dsacls "cn=adminsdholder,cn=system,dc=mydomain,dc=com" /G "mydomain\besadmin:CA;Send As"


Why it happens:
http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB12309&sliceId=SAL_Public&dialogID=192652288&stateId=1%200%20192646785

Good Read:

http://blogs.technet.com/sbs/archive/2006/06/30/439685.aspx



0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now