Hi,
I thought I might do well to post this here while I
wait for my subscription to one of the Exchange lists to get
processed. I find that I don't understand the permissions model too well
so I will try to explain this as best I can.
This is as concerns the following article -->
http://support.microsoft.com/kb/912918/ which our TAM had advised us about because we have a
Blackberry infrastructure in one of our domains here ( at least we do for
now :-D ). This Blackberry infrastructure uses a service account
within the domain to accomplish its tasks, so that service account is the
trustee I'm interested in at the moment.
The resolution section of this article states
that the trustee must be granted the "Send As" permission on all user
objects. It suggests that we apply this permission at the root of the
domain naming context (for the sake of this discussion please ignore the
resolution suggestion for administrative accounts).
When I look at the ACL on the ORG level (top) in the
Exchange System Manager, I can see that this service account is currently
[already] granted "Full Control" (including "Send As"), and have confirmed that
this permission is being inherited all the way down to the mailbox store
level. Best I can tell (again, sorry I'm not an Exchange person), these
permissions map to the Config. partition in the forest, but yet some of
them have the same names ("Send As", "Receive As") that one would see on a User
Object in the domain partition.
So my primary goal here is just to determine
whether or not the condition mentioned in this article has already been
satisfied, or if I will still need to grant "Send As" to the user objects in the
domain. Another goal (personally) is to try and understand the differences
in setting mailbox permissions from "Mailbox Rights" within ADUC (which I
understand is a represenation of the mailbox store permissions, is that right??)
and setting them at, for example, the server level in the config. partition (or
from Exchange System Manager).
For the second goal, any recommended reading or
articles would be great - thanks so much for your time!
-DaveC
To find out more about Reuters visit www.about.reuters.com
Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of Reuters Ltd.
