http://support.microsoft.com/kb/912918

http://blogs.technet.com/exchange/ar...28/426707.aspx

Taken from bink.nu

In short , send as get more restricted and BES admins will need to add BES service account additonal rights on user level.

Script example in KB article for multiple users.

Change will affect new service pack for store.exe as well as hotfixes so plan ahead now.

Good catch. RIM has had their KB article out since January on it. No offense to them, but their instructions needs to be updated ever so slightly. When this is presented to some companies who have thousands of users, I'm sure that neither Microsoft's or RIM's resolutions will be adequate.

http://www.blackberry.com/knowledgec...nodeid=1166052

The hotfix that APPLIES the change can be found here:
http://support.microsoft.com/kb/895949/

That KB article basically states that the functionality change WILL BE included in Exchange 2003 SP3 (no ETA date on that though). I'm sure this will be the same for Exchange 2007 as well.

Doesn't really appear to be an issue now, but obviously it could be at some point sooner than later.

We ran into this snag while doing some updates on our BES servers, but it only seemed to affect one of them. I'm not sure what happend and what was done to fix as I was working on a few other servers.

And can risk being in a store.exe hotfix , missed the KB articly from RIM guess im slow

It on the surfave it seems like a resonable patch if they did it on the read part also instead of just sent.

From a admin point of view every aspect can be scripted so it shouldnt add much load to a bes admin

I read it as already being potentially being an issue, Exchange 2000 sp2 or 2003 sp1 if you install the available hotfix.
Keebler, someone probably put the hotfix on one of your servers for some reason.
Hotfix that causes the issue:
2000 sp2 >kb915358 Store.exe file version that is equal to or later than version 6619.4.
2003 sp1 >kb895949 Store.exe file version that is equal to or later than version 7233.51

I have a question. Why in the hell would they put implicit 'Send As' permissions within Active Directory -AND- Exchange? It would make sense that if we marked this service account with permissions on the damn Store that it would replicate on down to the users!