permissions revoked
Hi,
I recently installed BES 4.1 at a clients office.
I have done this many times but they have a problem that I can't seem to fix.The user has to give 'send as' permissions to the blackberry service account.If all is set up correctly you just need to make sure the inherate permssions box is ticked on the user.
This all looks ok but after about 15 mins the user loses these permissions.I have checked the MS KB and implemented KB article 895949 which I have done in the past to a similar issue.This doesn't work - even if I allow another account to have full control over another it loses the permission after about 15 minutes.
If anyone knows how to fix I would be grateful.
September 19th, 2006 8:32am
The problem is likely that those accounts are part of the AdminSDHolder protected group.
http://support.microsoft.com/kb/907434/
"The "Send As" right is removed from a user object after you configure the "Send As" right in the Active Directory Users and Computers snap-in in Exchange Server"
Free Windows Admin Tool Kit Click here and download it now
September 19th, 2006 4:27pm
Thanks Andy - absolutely spot on!
At the same time I was talking to a guy from RIM too who told me to check out that KB.
The user was a member of a group which was a member of another group which was a member of one of the protected groups.
Once I took these rights away, stopped the blackberry router service for 20 mins, all was ok.
Thanks for your helpKieran
September 21st, 2006 8:07am