Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 684
  • Last Modified:

AdminSDHolder & Blackberry Enterprise Server on Administrator member

I have a couple of users in active directory that are members of the administrators group.  I need to add the BES user account  to these users so that it can use the exchange send as permission to be able to send mail from their blackberry on their behalf.  Because of the AdminSDHolder, if I give them the permission to send as, one hour later AdminSDHolder takes it back away from them due to the security restrictions on Administrator groups having the send as permission.

How can I add the BES user account to these two users without AdminSDHolder taking it back away due to the send as permission?  They are currently unable to send emails due to this.

Obviously one solution is to take them out of the admin group, but that is not an acceptable solution.
0
durrence71
Asked:
durrence71
1 Solution
 
ALogvinCommented:
Use the dsacls command, part of the Server 03 toolkit.

dsacls "cn=adminsdholder,cn=system,dc=mydomain,dc=com" /G "mydomain\besadmin:CA;Send As"


Why it happens:
http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB12309&sliceId=SAL_Public&dialogID=192652288&stateId=1%200%20192646785

Good Read:

http://blogs.technet.com/sbs/archive/2006/06/30/439685.aspx



0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now