• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 240
  • Last Modified:

Microsoft Exchange User permissions

In Microsoft Exchange Server Manager I'm setting up a new user and am setting permissions in under the security tab. What happens is after a 1/2 hour or so those permissions disappear back to the original settings.

Anybody have any ideas?
0
thenrich
Asked:
thenrich
  • 3
  • 2
1 Solution
 
dmwynneCommented:
Have you tried using the delegate permissions wizard?
0
 
thenrichAuthor Commented:
No I have not. I will give it a shot.
0
 
MesthaCommented:
What permissions are you setting?
If the user is an administrator or a member of another protected group then Exchange will remove some of the permissions by default. That is what it sounds like you are seeing.

Simon.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
thenrichAuthor Commented:
Yup I'm an admistrator and am trying to setup BESAdmin for my blackberry account. But for whatever reason after a 1/2 hour or so BESAdmin is removed.
0
 
MesthaCommented:
If you are an administrator and you are trying to set the permissions on your own account, then the behaviour you are seeing is expected. Microsoft made a change in the behaviour of the permissions that means that someone in a protected group (Administrators, Domain Admins etc) cannot have other permissions applied, they will be removed.

There is a very long MS article about this here: http://support.microsoft.com/kb/912918

Simon.
0
 
thenrichAuthor Commented:
Here is what is going on:

If you change the rights or the permissions on the adminSDHolder object for a protected account, a background task will undo the change within several minutes. For example, if you grant the Send As permission on a domain administrator object for an application service account, the background task will automatically revoke the permission.

Therefore, you cannot grant the Send As permission to an application service account for an account that is protected by the adminSDHolder object unless you change the adminSDHolder object itself. If you do change the adminSDHolder object, the access permissions for all protected accounts will change. You should only change the adminSDHolder object after a complete review of the security implications that may occur with the change.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now