Solved

AdminSDHolder & Blackberry Enterprise Server on Administrator member

Posted on 2008-10-08
1
675 Views
Last Modified: 2012-06-21
I have a couple of users in active directory that are members of the administrators group.  I need to add the BES user account  to these users so that it can use the exchange send as permission to be able to send mail from their blackberry on their behalf.  Because of the AdminSDHolder, if I give them the permission to send as, one hour later AdminSDHolder takes it back away from them due to the security restrictions on Administrator groups having the send as permission.

How can I add the BES user account to these two users without AdminSDHolder taking it back away due to the send as permission?  They are currently unable to send emails due to this.

Obviously one solution is to take them out of the admin group, but that is not an acceptable solution.
0
Comment
Question by:durrence71
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 11

Accepted Solution

by:
ALogvin earned 500 total points
ID: 22673913
Use the dsacls command, part of the Server 03 toolkit.

dsacls "cn=adminsdholder,cn=system,dc=mydomain,dc=com" /G "mydomain\besadmin:CA;Send As"


Why it happens:
http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB12309&sliceId=SAL_Public&dialogID=192652288&stateId=1%200%20192646785

Good Read:

http://blogs.technet.com/sbs/archive/2006/06/30/439685.aspx



0

Featured Post

Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question