BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 06-20-2006, 09:13 PM   #1 (permalink)
New Member
 
Join Date: Jun 2006
Model: 7100i
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Unhappy Unable to send mail from Admin accounts

Please Login to Remove!

Hello all,

The Exchange/BES admin from our company recently left and I'm assuming the new role however have limited experience with AD/Exchange/and BES. We were affected recently by the Windows patch that affects send as permssions. I went through all user accounts and added the send as permissions and all domain users are working. The problem I'm having is with the domain admins. When admins send from their BB they receive a red check. I know the admins group is a protected group which appears can only be modified using Dsacls.exe tool. Does anyone know of another work around. I'm having a heck of a time figuring out the syntax and I'm scared to break things on the domain. Any help is much appreciated.
Offline  
Old 06-21-2006, 05:29 AM   #2 (permalink)
Knows Where the Search Button Is
 
Join Date: Mar 2005
Model: 8707
Carrier: Orange Israel
Posts: 22
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

the send as permission you applyed cant be set on Domain Admins unit.

In microsoft there is somthing called AdminSDHolder group witch reset permissions on some AD objects including domain admin.

You can see more about this here http://support.microsoft.com/?kbid=232199

do a search in google for AdminSDHolder and you will find some ways to go around the problem
Offline  
Old 06-21-2006, 12:50 PM   #3 (permalink)
New Member
 
Join Date: Jun 2006
Model: 7100i
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Thanks for the response, I've gotten that far already. My question is there any other way of getting around the protected adminsSholder object without trying to use dsacls tool. In particular A third party gui based app perhaps, or maybe some other work around. I've tried degrading my account status as a test to just a regular user and tried adding the appropriate send as permissions but that never worked for me.
Offline  
Old 06-22-2006, 11:44 AM   #4 (permalink)
New Member
 
Join Date: Jun 2006
Model: 7230
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default ADSIEdit

You can edit the propers of the object by using ADSI Edit. You have to open a console (mmc) session on a computer with the tools loaded, then add the applet to your console. It won't be listed in the Start menu anywhere.

After that you can browse to Domain/System to find the object.

However, applying permissions directly to AdminSDHolder hasn't solved my problem. I am still researching how to keep user admins from getting the Send As permission stripped off every hour.

Apologies if I misunderstood your question... You may have done this already.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.