Has anyone used the setadminkey for a Help Desk environment? They have the ability to use the Bes server, but I want to remove the danger zone such as DELETE SERVER and Bes Configuration. Honestly, I only want them to be able to add and remove accounts, see status of the accounts, and make changes to individual accounts. I would like everything else to be grayed out or removed. This is on a 4.0 Server with SP2. Any help would be awesome. I just want to get a feel for how much I can remove from the Help Desk but still allow them to do their job.

Thanks,
CrushingViolet

Yes you can use SetAdminKey for this with -r on a remote BES Manager instalation.

Usage: SetAdminKey [options]
Options are:
-f: Full Permissions Mode : all administration functions are available to the user
-p: IT Policy Permissions Mode: disable server administration, allow IT Policy Editing
-r: Restricted Permissions Mode: (default) disable server administration and IT Policy Editing


Remove SetAdminKey after using from the remote BES Manager PC and disable registery for editing.

Regards,
Bob Hillesum

So it literally does what I need it to do huh? A Rim rep said I couldn't get that deep with the tool. Good to know. Thanks.

Crushingviolet

Where do you get this? I cannot find info in any installation or admin guide.

You can do a search on Blackberry's website for the guide and the file is in the tools section of the install package.

Looks like this utility is for Exchange. I'm running Domino..

Yep, SetAdminKey is for exchange. Domino BES need to wait for BES 4.1

Regards,
Bob