Ok - I went to the console of the BES and did a gpudpate from there. I still
am not allowed to add besadmin2 for logon as service. It's my understanding
the console should update the policies almost immediately. Am I wrong?

Stan Mocek

On Tue, Oct 27, 2009 at 10:02 AM, Stan Mocek <[email protected]> wrote:

> Thanks for the quick response. In checking the default domain policy, I see
> that the original besadmin account is in there. I was able to add the
> besadmin account there. The account is already a member of the local
> administrators group. Interestingly, I noticed in running gpedit on BES that
> only the original besadmin account had logon as service rights. No local
> administrators.
>
> On Tue, Oct 27, 2009 at 9:43 AM, <[email protected]> wrote:
>
>>  Check your domain policy! It is possible that domain policy is
>> overwriting local settings.
>>
>> One possible way to get around this issue would be to add besadmin2
>> account to the local administrators group. Also, please run poledit for
>> the local policies and verify that local admin have rights to logon as
>> service.
>>
>>
>>
>>
>>
>> *From:* [email protected] [mailto:
>> [email protected]] *On Behalf Of *Stan Mocek
>> *Sent:* Tuesday, October 27, 2009 10:36 AM
>> *To:* [email protected]
>> *Subject:* [Bes-admins] Logon as Service Grayed out after Besadmin switch
>>
>>
>>
>> Greetings,
>>
>>
>>
>> Having a tough time nailing this down, and everything I've searched on has
>> com up empty.
>>
>>
>>
>> First the specs  - Blackberry Professional Server running on Windows
>> Server 2003 Service pack 2. Exchange Server is on an SBS2003 running
>> Exchange Server 2003.On Friday, after a server reboot I was getting 5305
>> 20406 errors. Research showed me that the service account was corrupt and I
>> needed to create another one called mydomain\besadmin2 using KB04293
>> Finished that on Friday, everything was fine. Messages have been lowing for
>> the pas t3 and one half days.
>>
>>
>>
>> I had to update the SBS server this morning and then the Blackbery Server
>> stopped talking to Exchange. Rebooted the Blackberry server and now I'm
>> finding that the new service account can't login because it is not
>> authorized to logon as service. Went to change that and it's grayed out. I
>> could have sworn I followed that step when switching accounts. I've
>> researched the web for the last couple of hours and nothing seems to work.
>> The mydomain\besadmin2 account is a member of the local adminstrators group.
>> Also. Any assistance for this would be appreciated.
>>
>>
>>
>> Stan Mocek
>>
>> _______________________________________________
>> Bes-Admins mailing list
>> [email protected]
>> http://www.dataoutages.com/mailman/listinfo/bes-admins
>> http://www.dataoutages.com
>> http://www.dataoutagenews.com
>> RSS Feed: http://feeds.feedburner.com/Bes-admins
>> ---------------------------------
>>
>>
>>
>
_______________________________________________
Bes-Admins mailing list
[email protected]
http://www.dataoutages.com/mailman/listinfo/bes-admins
http://www.dataoutages.com
http://www.dataoutagenews.com
RSS Feed: http://feeds.feedburner.com/Bes-admins
---------------------------------

Reply via email to