Re: [ActiveDir] AD object (User accounts) Permissions dissappearing

[Danny]

No, but the user is part of a group that is part of a group that has Admin-type permissions on an OU for their site.

On 9/7/06, Brian Desmond < [EMAIL PROTECTED]> wrote:

This user isn't a domain admin or enterprise admin is he/she?

 

Thanks,

Brian Desmond

[EMAIL PROTECTED]

 

c - 312.731.3132

 

From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Danny
Sent: Thursday, September 07, 2006 11:49 AM

To: ActiveDir@mail.activedir.org

Subject: [ActiveDir] AD object (User accounts) Permissions dissappearing

 

Environment: Windows Server 2003 R2 and 2000 mixed AD forest with Exchange Server 2003 SP2 and one BES (Blackberry Enterprise Server) server.

Scenario: Existing AD account with full Exchange mailbox and provisioned BES user. Out of the blue the user is unable to send from their BlackBerry. Permissions are checked in ADUC, and the required SendAs permission granted to the BES account have disappeared. This has happened to new and existing users.

I do not know where to start. I am reviewing a dcdiag /e /v to see if there are any potentially related problems.

Thanks,

...D

--
CPDE - Certified Petroleum Distribution Engineer
CCBC - Certified Canadian Beer Consumer