BlackBerry Forums Support Community

Closed Thread
LinkBack Thread Tools
Old 07-07-2006, 05:29 PM   #1 (permalink)
New Member
Join Date: Jul 2006
Model: 7200
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Exclamation Active Directory and BES problem

Please Login to Remove!

We have an exchange 2003 server and blackberry enterprise server version 4.0. After applying updates to exchange we had to add the Blackberry Admin AD account to the domain root with “SendAs” permission.

That corrected the problem of users not being able to send e-mails from the blackberry with the exception of a few users.

To my knowledge just one user OU in AD is affected. When ever a security change is made on one of the affected user accounts still affected the security change is unapplied after a few hours. Freaking weird. I can make the change to that account and set it to inherit permission from its OU which has the correct security but the user account just revokes back to the way it was a few hours ago. I’ve made this change on a few account but about 5 out of 8 won't take the change.

Any ideas on why AD keeps reverting back.
Old 07-19-2006, 10:41 PM   #2 (permalink)
Thumbs Must Hurt
Join Date: Aug 2005
Model: 7290
Posts: 181
Post Thanks: 0
Thanked 0 Times in 0 Posts

I'm not sure if you aware but any user account within AD which is a part of a protected group will have the "Send As" permission revoked after about an hour. The reason for this is that the AdminSDHolder object is compaired against any user account which is apart of a protect group and will revoke any permissions which doesnt meet the template.

Please review Microsoft article 907434.

That should help you out.

Copyright © 2004-2016
The names RIM © and BlackBerry © are registered Trademarks of BlackBerry Inc.