Re: BES Server Account Permissions Still exist

I am pretty sure I did. I was hoping to see other people having the same
issue. Perhaps i will make another run at it tonight and see how it goes.
But yes it is disconcerting that this is not given more attention and more
documentation. Certainly there should be a terst tool to make sure your
environment is set up properly. Hey these are productyion servers and the
BES adn Exchange servers for better or worse are married and in most
companies equally relied upon.

Bill


"Peter Durkee" wrote:

I agree with your irritation at this whole thing, and particularly at
Microsoft for tossing a rather major change in the way permissions work into
a critical, yet unrelated, security patch. I haven't applied it yet as I'm
still getting our domain admins moved to separate mailboxes (yuck). That
said, in amongst all the knowledge base articles I think I saw one that said
the BES may have to be restarted after patching the Exchange server. Did you
try that?

-Peter

"ny65stang" <ny65stang@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:197E91E4-659C-4E5C-AE38-7E94320A3670@xxxxxxxxxxxxxxxx
Yes. Pretty simple AD actually. Basiically the permissions for send as
exist in each users account. So you would trhink it would work. I am
running Exchange 2003 with all patches except SP2 which i am inclied to
install to make sure that has nothing to do with it.

I started to think it was a issue with the store.exe and the version
number?
But honestly that makes no sense that there are multiple versions of the
Store.exe running for people running the same software.



"Susan" wrote:

what's your domain structure like? are all your users in one domain? I
did
this, and it worked exactly as advertised...no problems...

--
Susan Conkey [MVP]



"ny65stang" <ny65stang@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:95B82F8C-CA0A-42F4-9FDB-DCA1C63EAA6D@xxxxxxxxxxxxxxxx
I am still having issues with the patch and my blackberry server and
cannot
seem to get any solid answers.

I aded the send as permission to user objects at the top of the domain.
(As
per the KB 912918 article) When I look at the users account security
they
all have explcit entries to for the BES account for send as.

After applying the patch I had to back it out as the mail was getting
rejected. Effectivel the permissions change did not work.

This seems really poorly handled by both MS and RIM. I have a critical
patch not installed and no one it really talking about it in any great
detail. The kb article sucks ecause it talks about all sorts of
irrelevant
stuff but touches on the main point in there.

It also vaguley refers top a hot fix which I am nto really sure I need
and
if I do need it it doens not tell me where to get it.

Equally fustrating is the lack of help from RIM which i guess is to be
expected now that they are competing.

I would love to get some solid help if there is anyone out there who
can
do
so.






.

Relevant Pages

  • [RFC][PATCH] Simple privacy enhancement for /proc/<pid>
    ... sorry it took me so long before offering another patch for restricting ... see different permissions for certain files in there. ... This patch introduces two kernel parameters: ...
    (Linux-Kernel)
  • KB835732 Errors and Fixes
    ... On our network we recently pushed this patch, ... administrator rights, the problems with Outlook, IE, etc ... The fix involves resetting the permissions under the WINNT ...
    (microsoft.public.win2000.windows_update)
  • Re: security update for exchange 2003 and effects on Blackberry
    ... considering only 20% of my users are also blackberry users, ... Objects" to locate the "Send As" permissions checkbox. ... I thought maybe it was the patch negating the permissions, ... If you're running Exchange Server 2003 SP1 it does update Store.exe. ...
    (microsoft.public.exchange.admin)
  • Re: security update for exchange 2003 and effects on Blackberry
    ... Objects" to locate the "Send As" permissions checkbox. ... I thought maybe it was the patch negating the permissions, ... If you're running Exchange Server 2003 SP1 it does update Store.exe. ...
    (microsoft.public.exchange.admin)
  • Re: Blackberry BES DST updates, anyone applied them
    ... Exchange CDO Patch (KB 926666 if you're on Exchange ... Server 2003 SP2) because BES servers have Exch Mgmt Tools, ... devices with DST 2007 Patch Manager. ... this is for SP6 ...
    (microsoft.public.exchange.admin)