Originally Posted by billpoly
It looks like the upgrade either wasn't performed as the BESAdmin account or the BES services were all switched to the domain admin account for some reason. Switching all services to an already existing BESAdmin account seemed to do the trick.
Cool. As long as all upgrades and patches are done as besadmin you should be fine. Make sure your customers know that the services (except attachment) need to run as besadmin, and they shouldn't change them.