Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

AdminSDHolder & Blackberry Enterprise Server on Administrator member

Posted on 2008-10-08
1
Medium Priority
?
681 Views
Last Modified: 2012-06-21
I have a couple of users in active directory that are members of the administrators group.  I need to add the BES user account  to these users so that it can use the exchange send as permission to be able to send mail from their blackberry on their behalf.  Because of the AdminSDHolder, if I give them the permission to send as, one hour later AdminSDHolder takes it back away from them due to the security restrictions on Administrator groups having the send as permission.

How can I add the BES user account to these two users without AdminSDHolder taking it back away due to the send as permission?  They are currently unable to send emails due to this.

Obviously one solution is to take them out of the admin group, but that is not an acceptable solution.
0
Comment
Question by:durrence71
1 Comment
 
LVL 11

Accepted Solution

by:
ALogvin earned 2000 total points
ID: 22673913
Use the dsacls command, part of the Server 03 toolkit.

dsacls "cn=adminsdholder,cn=system,dc=mydomain,dc=com" /G "mydomain\besadmin:CA;Send As"


Why it happens:
http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB12309&sliceId=SAL_Public&dialogID=192652288&stateId=1%200%20192646785

Good Read:

http://blogs.technet.com/sbs/archive/2006/06/30/439685.aspx



0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Please read the paragraph below before following the instructions in the video — there are important caveats in the paragraph that I did not mention in the video. If your PaperPort 12 or PaperPort 14 is failing to start, or crashing, or hanging, …

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question