Blackberry service account permissions

Hi

Taken from the RIM site, these are the permissions needed for Blackberry BES to run.

http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB02276

We are running Exchange 2007 SP3.

Basically, the BES service account has: Send As, Receive As, and Administer information Store permissions.

All our IT Admins know the BES service account password.

Does this mean they can access anyone's mailbox using those credentials?
LVL 2
bruce_77Asked:
Who is Participating?
 
Confucious2Connect With a Mentor Commented:
Correct, assuming as you said the BES account has Administrative access to your information store
0
 
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
Yes, but they shouldn't need to know the password to do general day to day administration such as activating or managing users.
0
 
Rob KnightConsultantCommented:
Hi,

Set each of your admin up as Administrative users.

Regards,


RobMobility
0
 
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
For that matter, if your admin's account have domain admin privleges, they can access everyone's mailbox anyway, uness you have specifically changed permissions in Exchange.
0
 
bewaarseCommented:
If the Mailbox Store service is enabled at services.msc then only the besadmin can access other users mailboxes. you can disable it.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.