Domain admin with working BB???

[dpcamp]

After the DST 2007 patch I have had nothing but problems. But the biggest problem is the Send As permission being revoked if your user account has Administrator rights. Has anyone had success getting a Domain Admin to send emails without removing their administratrative rights?
I have tried the following:
1) Removed my mailbox then added another user with basic domain rights with a mailbox that I was granted full access to, and set the send as permission to allow for that user. didn't work

2) Contacted Microsoft to obtain a hotfix listed in KB Article ID 895949, that supposedly would allow the send as permission to users sending out emails through another users mailbox. nothing.

I have ran setsendaspermission.exe -a adminitrator -u mymail@domain.com as well as turning the blackberry router service off for 20 minutes and starting back up after making any small change to make sure permissions get set.

It would make sense to me that #1 should work, maybe i don't have it set up right, I don't know.

But is there anyone out there running as a Domain Admin and able to send emails from there Blackberry, and if there is can you please walk me throught how you did it?

[naviwilliams]

...am dashing out the door, but wanted to give you an answer. We had to add a check mark to the 'send as' & 'receive as' BlackBerry account on the security tab in Active Directory for the respective BlackBerry user...

Works fine now...

[dpcamp]

that didn't seem to do anything. that was for a domain admin account?

[naviwilliams]

Right!

You just have to go to Active Directory on the domain controller. Find the user with the BlackBerry, use 'advanced' options (so you see more tabs on the users properties). Then, go to the security tab on that users properties, find the blackberry service account. In the bottom section look for 'send as' & 'receive as'. Make sure both are checked...

ps: am a domain admin, and this was the fix I got from Microsoft the day after DST issues started. I implemented it, and it worked. Scary, but it worked.

[naviwilliams]

I've been digging in my old emails! This is the old kb file from Microsoft. When this whole DST thing first started we had to call them to get a hotfix; I don't believe it can be downloaded anywhere...

[audit]

Damn Red X - BlackBerryForums.com : Your Number One BlackBerry Community

That's what I did on mine.

[GaryCutri]

To correct the "Send As" issue I have outlined the steps I use to quickly resolve this issue:

1. Stop the Blackberry Router service.

2. Open Active Directory and from the View menu select "Advanced Features". Then go to each user that will be added to the BES and open their properties, go to the security tab and add the user BESadmin and add the security permission "Send As".

3. Run the following script logged on as Administrator
Note: Only use this step if you have BlackBerry users that are members of Admin groups. Using best practice methods it is recomended that mobile user accounts aren't members of any administration groups.

dsacls "cn=adminsdholder,cn=system,dc=domainname,dc=c om " /G "DOMAINNAME\BESadmin:CA;Send As"

Example 1: dsacls "cn=adminsdholder,cn=system,dc=experts-exchange,dc=com " /G "EXPERTS_EXCHANGE\BESadmin:CA;Send As"

Example 2: dsacls "cn=adminsdholder,cn=system,dc=blackberryforum s,dc =com,dc=au " /G "BLACKBERRYFORUMS\BESadmin:CA;Send As"

Example 3: dsacls "cn=adminsdholder,cn=system,dc=mobilenetwork,d c=lo cal" /G "MOBILENETWORK\BESadmin:CA;Send As"

NOTE: dsacls can be found in the Windows Server 2003 SP1 Support Tools pack: Download details: Download details: Windows Server 2003 Service Pack 1 32-bit Support Tools

4. Wait 20 minutes and then restart the BlackBerry Router service.

5. Restart the BES server.

[GaryCutri]

I have further info on the link (i.e. the replies that I posted) below which fully details how and why this affects Admin users:

Unlisted message error or Desktop email program unable to submit message - BlackBerry Forums

[dpcamp]

ok question on that
dsacls "cn=adminsdholder,cn=system,dc=experts-exchange,dc=com " /G "EXPERTS_EXCHANGE\BESadmin:CA;Send As"
would I do that for the blackberry users accounts as well? or just the BESadmin account

[GaryCutri]

Originally Posted by dpcamp

ok question on that
dsacls "cn=adminsdholder,cn=system,dc=experts-exchange,dc=com " /G "EXPERTS_EXCHANGE\BESadmin:CA;Send As"
would I do that for the blackberry users accounts as well? or just the BESadmin account

You only need to run this script as shown above for the BESadmin ONLY.