RE: [ActiveDir] AD object (User accounts) Permissions dissappearing

[Williams, Robert]

Maybe AdminSDHolder is biting you?   Here’s an article that talks about the Send-As specifically, but it’s more than just that: http://support.microsoft.com/kb/907434/   If the user in question is a member of any of the following groups, then you could be seeing this:   The following list describes the protected groups in Windows 2000: • Enterprise Admins • Schema Admins • Domain Admins • Administrators The following list describes the protected groups in Windows Server 2003 and in Windows 2000 after you apply the 327825 hotfix or you install Windows 2000 Service Pack 4: • Administrators • Account Operators • Server Operators • Print Operators • Backup Operators • Domain Admins • Schema Admins • Enterprise Admins • Cert Publishers Additionally the following users are also considered protected: • Administrator • Krbtgt The above was taken from:  http://support.microsoft.com/kb/817433/ Robert Williams  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Danny Sent: Thursday, September 07, 2006 10:49 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD object (User accounts) Permissions dissappearing   Environment: Windows Server 2003 R2 and 2000 mixed AD forest with Exchange Server 2003 SP2 and one BES (Blackberry Enterprise Server) server. Scenario: Existing AD account with full Exchange mailbox and provisioned BES user. Out of the blue the user is unable to send from their BlackBerry. Permissions are checked in ADUC, and the required SendAs permission granted to the BES account have disappeared. This has happened to new and existing users. I do not know where to start. I am reviewing a dcdiag /e /v to see if there are any potentially related problems. Thanks, ...D 2006-09-07, 13:03:30 The information contained in this e-mail message and any attachments may be privileged and confidential. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to this e-mail and delete the message and any attachments from your computer.