[marc.langman]

Is there a documented time that it takes after giving the bes admin account send as permissions for a user before that user will be able to send messages from their device?

I've seen this numerous times when adding a new user to the BES. The bes admin account will not have send as permissions for the user account at the time it's added to the BES. After the user is added to the BES, the bes admin account is given send as permissions. If this process is followed, the user will not be able to send messages from their device for quite some time, always receiving a red X when sending. Is this period of time documented anywhere?

[jc9394]

Originally Posted by marc.langman

Is there a documented time that it takes after giving the bes admin account send as permissions for a user before that user will be able to send messages from their device?

I've seen this numerous times when adding a new user to the BES. The bes admin account will not have send as permissions for the user account at the time it's added to the BES. After the user is added to the BES, the bes admin account is given send as permissions. If this process is followed, the user will not be able to send messages from their device for quite some time, always receiving a red X when sending. Is this period of time documented anywhere?

Anywhere between 30 minutes to 2 hours. You can flush the cache permission by restart the information store.

[juwaack68]

I've never had a problem with people being able to send mail as soon as their device is activated. They can send within just a few minutes. Perhaps your Active Directory team has some sort of replication timer set?

[udontknowjack]

Marc, from what I read it sounds like your process is to add the besadmin account send as perms after the user has been added to the BES. This will cause a delay because the BES won't see the perms until the next scan of the mailbox. If besadmin has send as before the user is added it should work immediately. I just assigned besadmin send as at the domain for all user objects so I don't have to worry about adding it later. It is really no diferent than before when all mailboxes had the rights.