Re: Membership in Admin groups resets Send As permissions - Blackberry's broken for administrators

Tech-Archive recommends: Fix windows errors by optimizing your registry

True -- I guess it's been a long time since you've been in the 'real world'
:)


"Andy David - MVP" <adavid@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:t7hh8256po0g1j7nuor26ghrbq6gj8a07o@xxxxxxxxxx
It's extremely frustrating to me that this 'feature' is being jammed down
our throats.

Thoughts?

== John ==



Doesnt the KB state exactly that?

no ... it doesn't say "we're going to jam this down your throats" :p

just joking ...

This really isn't clear. And yes, it did say that but I missed it.

"Special rules for adminSDHolder Protected Accounts"
is really poorly worded. It should have said
"Special rules for Domain Administrators and adminSDHolder Protected
Accounts".

and it doesn't cover all cases, 2 of the users were not domain admins. In
further tracking this down, in one particular case, the user was a member of
'print operators', NOT domain admins. And yes, I checked, and the builtin
Print Operators is not a member of domain admins.

The KB work around for adminSDHolder protected accounts is a poor solution
for people with existing mailboxes.

== John ==


.

Relevant Pages

  • Re: Membership in Admin groups resets Send As permissions - Blackberrys broken for administrator
    ... it doesn't say "we're going to jam this down your throats":p ... and it doesn't cover all cases, 2 of the users were not domain admins. ... Print Operators is not a member of domain admins. ...
    (microsoft.public.exchange.admin)
  • Re: Membership in Admin groups resets Send As permissions - Blackberrys broken for administrator
    ... All kidding aside, I do think this is ... Print Operators is not a member of domain admins. ...
    (microsoft.public.exchange.admin)
  • Re: How to change domain administrator to limited/restricted user?
    ... Depending on the number of users, computers, member servers and the rest of the infrastructure, I might be tempted to start over. ... If it's "a" domain administrator, then remove the user from the ... Are the individual users direct members of the Domain Admins group or members of a group added to the Domain Admins group. ... Check a workstation or two and see if the user is a member of the local workstation administrators group. ...
    (microsoft.public.windows.server.sbs)
  • Re: no Domain Admin rights to a Domain Server
    ... If the computer is still a member of the domain with proper DNS name ... the domain it needs to be joined to the domain again and the domain admins ... I can logon locally to the machine but the rights are that of a ... the server belongs to engineering and the person in charge ...
    (microsoft.public.win2000.security)
  • Re: Group Policy on a remote computer
    ... By default, members of Domain Admins are administrators on member computers, but not Enterprise Admins. ... The domain controller is Windows Server 2003 R2 SP2; the target computer is XP Professional SP2. ... The usual process is to create a Group Policy Object in the Domains Active Directory and link it to the OU with the target computer accounts or user accounts. ...
    (microsoft.public.windows.group_policy)