Re: BES Server Account Permissions Still exist

Tech-Archive recommends: Fix windows errors by optimizing your registry

I agree with your irritation at this whole thing, and particularly at
Microsoft for tossing a rather major change in the way permissions work into
a critical, yet unrelated, security patch. I haven't applied it yet as I'm
still getting our domain admins moved to separate mailboxes (yuck). That
said, in amongst all the knowledge base articles I think I saw one that said
the BES may have to be restarted after patching the Exchange server. Did you
try that?

-Peter

"ny65stang" <ny65stang@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:197E91E4-659C-4E5C-AE38-7E94320A3670@xxxxxxxxxxxxxxxx
Yes. Pretty simple AD actually. Basiically the permissions for send as
exist in each users account. So you would trhink it would work. I am
running Exchange 2003 with all patches except SP2 which i am inclied to
install to make sure that has nothing to do with it.

I started to think it was a issue with the store.exe and the version
number?
But honestly that makes no sense that there are multiple versions of the
Store.exe running for people running the same software.



"Susan" wrote:

what's your domain structure like? are all your users in one domain? I
did
this, and it worked exactly as advertised...no problems...

--
Susan Conkey [MVP]



"ny65stang" <ny65stang@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:95B82F8C-CA0A-42F4-9FDB-DCA1C63EAA6D@xxxxxxxxxxxxxxxx
I am still having issues with the patch and my blackberry server and
cannot
seem to get any solid answers.

I aded the send as permission to user objects at the top of the domain.
(As
per the KB 912918 article) When I look at the users account security
they
all have explcit entries to for the BES account for send as.

After applying the patch I had to back it out as the mail was getting
rejected. Effectivel the permissions change did not work.

This seems really poorly handled by both MS and RIM. I have a critical
patch not installed and no one it really talking about it in any great
detail. The kb article sucks ecause it talks about all sorts of
irrelevant
stuff but touches on the main point in there.

It also vaguley refers top a hot fix which I am nto really sure I need
and
if I do need it it doens not tell me where to get it.

Equally fustrating is the lack of help from RIM which i guess is to be
expected now that they are competing.

I would love to get some solid help if there is anyone out there who
can
do
so.





.

Relevant Pages

  • [PATCH v3] vfs: new O_NODE open flag
    ... permissions on new device are difference than on old device. ... We should go through each filesystem and allow O_NODE on a case by ... This patch doens't change any of that except the file opened without ... This patch adds a new open flag, ...
    (Linux-Kernel)
  • Re: BES Server Account Permissions Still exist
    ... BES adn Exchange servers for better or worse are married and in most ... After applying the patch I had to back it out as the mail was getting ... Effectivel the permissions change did not work. ...
    (microsoft.public.exchange.admin)
  • [RFC][PATCH] Simple privacy enhancement for /proc/<pid>
    ... sorry it took me so long before offering another patch for restricting ... see different permissions for certain files in there. ... This patch introduces two kernel parameters: ...
    (Linux-Kernel)
  • KB835732 Errors and Fixes
    ... On our network we recently pushed this patch, ... administrator rights, the problems with Outlook, IE, etc ... The fix involves resetting the permissions under the WINNT ...
    (microsoft.public.win2000.windows_update)
  • Re: security update for exchange 2003 and effects on Blackberry
    ... considering only 20% of my users are also blackberry users, ... Objects" to locate the "Send As" permissions checkbox. ... I thought maybe it was the patch negating the permissions, ... If you're running Exchange Server 2003 SP1 it does update Store.exe. ...
    (microsoft.public.exchange.admin)