[chadpsualum]

I am at my wits end...

I am running SBS2003 SP2 and also have Exchange Server 2003 SP2.
I am running Store.exe and mdbmsg.dll v6.5.7652.24 (I have heard that the problem may be w/ these files???)

I set up the BES w/ ease and can do everything except send mail.

I have tried 2 different things (see below) and both work right after I do it. However, after the 20 min recycle, permissions get switched back and my besadmin user gets stripped on SendAs Permissions.

Solution Attempt 1:
After going to BB site regarding this issue, I downloaded the SetSendAsPermission.exe tool. So, I stop the BBRouter Service, Run the Tool w/ the proper dependents, wait 20 minutes and restart the BBRouter Service. Boom. It works...but only until the next 20 min cycle is up.

Solution Attempt 2: (Manual)
First, I stop the BBRouter Service. Then, in ActiveDirectory Users and Comp's, I go to myself --> Properties --> Security. Click on Advanced, Add besadmin, click Allow for SendAs and select 'User Objects' on Apply Onto. Wait 20 minutes, restart the BBRouter Service. Again, it works for a bit then not.

Is there something else I can try w/ BES? Am I missing something? I feel like its probably an easy solution but I just don't know what it is.

Thanks
Chad

[hdawg]

Does this happen with all users or just certain users?

... AdminSDHolder - or where did my permissions go? - Directory Services/Active Directory

[chadpsualum]

I am actually the only user on BES currently.

I clicked the link you sent and found that I didn not enable the checkbox on the Advanced Security options that "Allow Inheritable Permission from Parent". I did that and we'll see what happens.

[hdawg]

Is your account in a privileged group? Such as Domain Admins? If so, you'll need to take it out of that group; re-apply the permission and then wait 2 hours for the Exchange permissions cache to clear

[ZeroKool]

yea. hdawg is right. My windows team decided to apply the patch that changes the send as function last saturday night, and all our EXEC's got screwed because they are in a domain admin group.

Since you are the only one you can either have 2 exchange accounts. One for mail/blackberry and the other for admin purpose's. That works best for my setup. Or you will have just to move yourself outta that group. If your not worried about security than you can change that SD_admin thing. (I'm not good with xchange)

[hdawg]

I'm good with Exchange and I don't touch AdminSDHolder objects. I have two accounts.

One I am a LUSER

and one I'm 3|33+

right now, I'm a LUSER

[chadpsualum]

I was a member of the Administrators group so I took myself out. We'll see what happens. As of right now I am able to send out. We'll see if it sticks. Thanks for the help.