Re: Exchange Server DST Patch
- From: jljansen <jljansen@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 15 Feb 2007 09:41:10 -0800
We have not applied the Exchange DST patch yet, but I am bracing myself for
this very issue. The service account we use for BES is a member of the
Exchange View Only Admin Role, which I understand is also considered a
protected group. If we give Send As permissions to the BES service account
at the domain level and allow the rights to propagate, will the rights be
removed by the adminSDHolder object? In addition, what will happen when the
BES account permissions are inherited by a user who is a member of Domain
Admins or any of the other protected groups?
Any insight is greatly appreciated!
J
"Danny Sanders" wrote:
.Microsoft has a work around, but the work around calls
for us admins to create a new mailbox and give us domain admins send as
rights to that
mailbox. This isn't what we want to do, that is too much work for
something so simple
as email. All we need to do is for AD to allow us to put the send as
permission on Domain Admin
accounts. Please help.
I would assume the MS workaround would be describing how MS suggests you fix
the problem that occurs when you run the DST patch for Exchange and there
are Blackberrys involved. They usually provide a workaround because it is
easier than the alternative.
If you don't want to follow the MS work around, maybe you should check with
Blackberry and see if they provide a solution that is more to your liking.
hth
DDS
"Zachary Dundore" <dundorez@xxxxxxxxxxxxxxx> wrote in message
news:%23Ipq5dIUHHA.1636@xxxxxxxxxxxxxxxxxxxxxxx
The DST patch for exchange server doesn't allow any user to send as a
domain admin.
This is an issue because us 4 domain admins at work here can't send emails
from our blackberry anymore.
We have tried to manually reapply the send as permission to each domain
admin account,
but after about an hour the permission is removed. We also have set the
send as permission
on the AdminSDHolder object and have the domain admins inherit the
permission. That doesn't
work because after the same period of time the check box that allows the
account to
inherit permissions from above becomes unchecked. Is there any way to
apply the send as
permission to the domain admins? Microsoft has a work around, but the
work around calls
for us admins to create a new mailbox and give us domain admins send as
rights to that
mailbox. This isn't what we want to do, that is too much work for
something so simple
as email. All we need to do is for AD to allow us to put the send as
permission on Domain Admin
accounts. Please help.
Zachary
IT Professional
- References:
- Exchange Server DST Patch
- From: Zachary Dundore
- Re: Exchange Server DST Patch
- From: Danny Sanders
- Exchange Server DST Patch
- Prev by Date: Re: UPN Suffixes
- Next by Date: Security Logging in ADAM
- Previous by thread: Re: Exchange Server DST Patch
- Next by thread: Windows 2003 RC2 and Windows 2003 domain Controllers
- Index(es):
Relevant Pages
|
