AD issue with blackberry service user

[busta1616]

I recently added my blackberry to our company's blackberry professional server ver 4.1.4. I am having sporadic issues with the blackberry service user being deleted from my security tab in active directory for my user. I am a domain admin. I have removed myself from this AD group and this still happens.

I have always been able to receive emails but when the blackberry service user is not in the security tab on my AD user I cannot send or respond to emails. Not sure how this user is being deleted out of my security tab. Any suggestions?

The blackberry service user and all of it's appropriate rights are inherited on our exchange server on all of our mail stores. This is only happening on my user.

[sniffs]

So your BB service account, let's call it BESadmin is being removed from the security tab?

the reason you can't send/receive email is because the BESadmin account is using SendAs/ReceiveAs and Administer Information Store to send/receive emails, but as you.

Also, if you're in protected AD groups, you wont be able to send/receive emails either..

Anything in the bes logs, the mail agent logs or any of the others that would indicate it? What about the event viewer?

[Rh1noo]

You can be in a protected group like domain admins and use a blackberry if you set the correct AD permissions.

I have already posted these but if you can't find them let me know.

[busta1616]

Yes the BESadmin account gets removed from my security tab on the properties of my AD account. I add it back with the send as/ receive as and it works fine. Then all of a sudden it is gone again. I can continue to receive emails on my blackberry but cannot send. I understand the reason for that not working but I do not understand why the BESadmin gets removed from my AD account.

[sniffs]

Originally Posted by busta1616

Yes the BESadmin account gets removed from my security tab on the properties of my AD account. I add it back with the send as/ receive as and it works fine. Then all of a sudden it is gone again. I can continue to receive emails on my blackberry but cannot send. I understand the reason for that not working but I do not understand why the BESadmin gets removed from my AD account.

That sounds exactly like you're in a protected AD group.. HMM.. *thinking*

My solution was to just remove myself from the groups and create a normal AD account to sync, and then another account which was the domain admin account.

[busta1616]

yeah, i took myself out of the domain admin group and the issue still happened for 3 days. i ruled out me being a domain admin as the issue.

[sniffs]

When you try and send an email, the email sticks in your mailbox with a red X

If you open the email, it'll show you a REFid and an error.. what's the error?

[busta1616]

Message Status: Desktop email program unable to submit message.

I then go and look at my AD account and the BESadmin is missing. I add it back and it begins to work. Sometimes I have to reboot the BlackBerry server to clear the cache.

[sniffs]

Have you checked your perms? It could be set to inherit from above..

Set it at a higher level or you can check not to inherit.

there's a tool from MS that sets perms for the BB..we had to use it when we installed Sp2

You Had Me At EHLO... : New Exchange fixes may disrupt Blackberry, Goodlink and other services

Users cannot send e-mail messages from a mobile device or from a shared mailbox in Exchange 2000 Server and in Exchange Server 2003

[sam2500]

I use two accounts one for BB and one for domain admin stuff.