NT Authority Self disappearing
We are on Exchange 2007 SP1.
We have noticed that some of our users have the NT Authority Self missing from their Send As Permission.
We added them but they seem to disappear after a hour or so.
How can I find a list of users who have their NT Authority Self missing from their Send As Permissions?
How can I add this NT Authority Self back into all the accounts "Permanently".
Kindly advise.
Philip
September 20th, 2012 6:55am
On Thu, 20 Sep 2012 10:43:36 +0000, sphilip14 wrote:
>We are on Exchange 2007 SP1.
>
>We have noticed that some of our users have the NT Authority Self missing from their Send As Permission.
>
>We added them but they seem to disappear after a hour or so.
>
>How can I find a list of users who have their NT Authority Self missing from their Send As Permissions?
>
>How can I add this NT Authority Self back into all the accounts "Permanently".
That behavior is typical of the AdminSDHolder and the SDProp thread.
http://blogs.technet.com/b/askds/archive/2009/05/07/five-common-questions-about-adminsdholder-and-sdprop.aspx
http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx
If those users are members of protected (privileged) groups you'll
have to remove them from those groups.
Once you've removed them from those groups you'll have to set the
"adminCount" property on the AD USer objects to 0 (zero) before the
SDProp thread will stop resetting the ACL.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
September 20th, 2012 9:14am
On Thu, 20 Sep 2012 10:43:36 +0000, sphilip14 wrote:
>We are on Exchange 2007 SP1.
>
>We have noticed that some of our users have the NT Authority Self missing from their Send As Permission.
>
>We added them but they seem to disappear after a hour or so.
>
>How can I find a list of users who have their NT Authority Self missing from their Send As Permissions?
>
>How can I add this NT Authority Self back into all the accounts "Permanently".
That behavior is typical of the AdminSDHolder and the SDProp thread.
http://blogs.technet.com/b/askds/archive/2009/05/07/five-common-questions-about-adminsdholder-and-sdprop.aspx
http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx
If those users are members of protected (privileged) groups you'll
have to remove them from those groups.
Once you've removed them from those groups you'll have to set the
"adminCount" property on the AD USer objects to 0 (zero) before the
SDProp thread will stop resetting the ACL.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
September 20th, 2012 9:26am