It appears that the Besadmin account has access to all mailboxes.

Is it possible to remove the Besadmin account from having rights to these? If I did this, what would happen?

Also, when installing updates/upgrades on the BES do I have to be logged into the server as Besadmin or can I just be logged on as Administrator?

I know these may seem like a strange questions buy my IT Security Manager requested that I check this out.

Thanks!
Wanabe