[guruleenyc]

It is BES SBE 4.1 on a Windows 2003 Member Server w/Exchange 2003 Ent. Edition as well.

The user does not belong to any priviledged groups and I dont see any GPO policy manipulating the security; lastly inheritance is off on the Security tab

[guruleenyc]

I have read these MSFT KB articles and they have NOT resolved my issue. The send-as and resceive-as keep disapearing....

[hdawg]

guruleenyc> Can you give a rundown of your environment in 1 post?

BES Version & Service Pack
Exchange Version & Service Pack
What other services are on the BES server besides BES (Exchange / Domain Controller / SQL (or MSDE)
Group Membership of BESAdmin account

Group membership of users having problem
models of devices with users having problem.
exact error message received.

Method you are using to stamp the AD permission 'Send As' for each user. In addition to stamping each user the exchange servers need to have these permissions set within ESM.

Sorry, this thread has really gotten out of control with troubleshooting two different issues.

[guruleenyc]

BES Ver.: 4.1.2.25
Exch ver.: 2003 Ent SP2
Roles: Member Server, old BES MSDE service (migrated to stand-alone SQL)
BESadmin Membership: local builtin admin, domain users
Group Membership of affected users: Domain users
BB Models: AT&T 8300 Curve
Error Msg: Desktop Email Program unable to submit message
Method for Applying security: AD U&C | Advanced | User | Properties | Security

[guruleenyc]

I overlooked that the two affected users were members of the 'Print Operators' group, which conflicts with the BB Send-As requirements.

As per RIM:

1. Stop BB Router Service
2. Remove ALL Administrative accounts (i.e. Admin.., Print Op.., Backup.., etc.)
3. Go To AD User/computers on the DC | Advanced mode
4. Right click on domain, choose Properties | Security | Advanced
5. Remove BESadmin user <apply>, re-add BESadmin w/user-object property Send-as rights <apply> and <ok> out of each dialog box
6. Wait 20min and then re-start BB Router Service

I'll update this thread with the results shortly....

[hdawg]

ding! that'd be it.

[guruleenyc]

Thanks for shedding light on this piece!!!!!

[hdawg]

Word, it is a piece a'ight; yo.

heh.

[guruleenyc]

I added my second to last post with the results and new findings with RIM. (Look up)

[hdawg]

You also need to wait for the Mailbox Cache Age Limit to flush from Exchange; which by default can take up to 120 minutes.

[GordonCopestake]

I wish my problem was as easy! I've just traced all my group memberships for the users involved and all are just normal users, no elevated privledges at all.

[hdawg]

Sounds like its time to get on the horn with RIM and give them a call.

[guruleenyc]

Wirelessly posted (NXTL7520: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) BlackBerry7520/4.1.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/103)

my last post w/ steps taken as per Rim did not resolve my issue. I still get the following error o the bb:

"Desktop program nable to submit message"

Calling RIM back now!!!!

[GordonCopestake]

Originally Posted by hdawg

Sounds like its time to get on the horn with RIM and give them a call.

I agree

[guruleenyc]

Error:Desktop Email Program Unable to Submit Message

FINAL RESOLUTION

1. Stop BB Router
2. Make sure the user is not a member of any "Protected" security groups
3. Go to AD U&C | Adv View | User Properties | Security | Advanced
4. Allow Inheritance from parent | Apply
5. Wait 20min, start BB Router service

NOTE: Although I have granted the 'besadmin' account Send-as at the domain (parent) level and I was manually setting identical permissions at the User object level w/o inheritance enabled, it was still being stripped out for some strange reason.

Its been working so far.....