04-30-2008, 07:23 AM
Join Date: Aug 2006
Post Thanks: 0
Thanked 0 Times in 0 Posts
If you followed the KB Article, and then prevented the AdminSDHolder object from applying, rather removing the Send As attributes, then all you need to do is to stamp the Send As again on those domain admins and it'll work.
I still think you should follow the principle of least privilege ... but that is your call.