Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Microsoft Exchange User permissions

Posted on 2009-05-04
Medium Priority
Last Modified: 2013-11-05
In Microsoft Exchange Server Manager I'm setting up a new user and am setting permissions in under the security tab. What happens is after a 1/2 hour or so those permissions disappear back to the original settings.

Anybody have any ideas?
Question by:thenrich
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 14

Expert Comment

ID: 24298359
Have you tried using the delegate permissions wizard?

Author Comment

ID: 24299273
No I have not. I will give it a shot.
LVL 65

Expert Comment

ID: 24300420
What permissions are you setting?
If the user is an administrator or a member of another protected group then Exchange will remove some of the permissions by default. That is what it sounds like you are seeing.

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.


Author Comment

ID: 24303686
Yup I'm an admistrator and am trying to setup BESAdmin for my blackberry account. But for whatever reason after a 1/2 hour or so BESAdmin is removed.
LVL 65

Accepted Solution

Mestha earned 2000 total points
ID: 24304321
If you are an administrator and you are trying to set the permissions on your own account, then the behaviour you are seeing is expected. Microsoft made a change in the behaviour of the permissions that means that someone in a protected group (Administrators, Domain Admins etc) cannot have other permissions applied, they will be removed.

There is a very long MS article about this here: http://support.microsoft.com/kb/912918


Author Comment

ID: 24304733
Here is what is going on:

If you change the rights or the permissions on the adminSDHolder object for a protected account, a background task will undo the change within several minutes. For example, if you grant the Send As permission on a domain administrator object for an application service account, the background task will automatically revoke the permission.

Therefore, you cannot grant the Send As permission to an application service account for an account that is protected by the adminSDHolder object unless you change the adminSDHolder object itself. If you do change the adminSDHolder object, the access permissions for all protected accounts will change. You should only change the adminSDHolder object after a complete review of the security implications that may occur with the change.

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Mailbox Overload?
Outlook for dependable use in a very small business   This article is about using the Outlook application (part of Microsoft Office) in a very small business, or for homeowners where dependability and reliability are critical requirements. This …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question