We are in the midst of migrating to 4.1.5 and have started to grant our desktop folks access to BES via the Senior Help Desk role. They are running Blackberry Manager from their own desktops and I've verified that the MAPI profiles/settings are correct (RIM also verified this during a long call today). The problem is that they can add users to BES, however, they cannot activate them. Also, when they add a user to BES, that user doesn't receive a mailbox agent ID...it just stays at 0. No entries appear in the app log either stating that the user was added to BES.

It's not machine specific because we've tried it on multiple machines. And when I use my own credentials (I have security rights) on one of their machines, it works fine. I've also added my account to the senior help desk role to reduce my rights and it also works fine for me (I do have AD/Exchange rights that they don't have).

Is there any other permission that they would need on the AD/Exchange side that would allow them to activate users? Thanks for any advice/input.