I need to change the permissions below so that the Deny : True for each of these is set to False. Is there a command that will do this that I can enter in the shell?User : ****\BESAdminIdentity : NPMS02Deny : TrueAccessRights : {ExtendedRight}ExtendedRights : {Send-As}IsInherited : FalseProperties :ChildObjectTypes :InheritedObjectType :InheritanceType : All User : ****\BESAdminIdentity : NPMS02Deny : TrueAccessRights : {ExtendedRight}ExtendedRights : {Receive-As}IsInherited : FalseProperties :ChildObjectTypes :InheritedObjectType :InheritanceType : All User : ****\BESAdminIdentity : NPMS02Deny : TrueAccessRights : {CreateChild, DeleteChild}ExtendedRights :IsInherited : FalseProperties :ChildObjectTypes : {ms-Exch-Public-MDB}InheritedObjectType :InheritanceType : All

Hi,Well, I must ask, are you trying to configure BES service account permission? Looks like you have given Exchange Server Admin permission to BESAdmin account because when you delegates any account for Exchange Server Admin Role it sets Deny on Send-As, Receive-As & CreateChild +DeleteChild. So remove the BESAdmin account from Exchange Server Admin role because BES service account requires only Exchange View Only Administrator role, Send As, Receive As & Administer Information Store permission on server level. Refer below article to configure permission for it. http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB12483&sliceId=SAL_Public&dialogID=32739606&stateId=0%200%2032737699Amit Tank || MVP - Exchange || MCITP - Exchange 2007 || http://ExchangeShare.WordPress.com