Taken from the RIM site, these are the permissions needed for Blackberry BES to run.
We are running Exchange 2007 SP3.
Basically, the BES service account has: Send As, Receive As, and Administer information Store permissions.
All our IT Admins know the BES service account password.
Does this mean they can access anyone's mailbox using those credentials?