Suggestion: Remove the Exchange/Blackberry users from the protected groups. When these users *really* need some sort of admin rights to perform a task they can use "Run As". If they still need an account thats part of a protected group provide them with a second account that is not mail enabled. This is what we did, everyones happy with it and we've reduced the potential security impact by having email enabled accounts as part of these protected groups.
Sam _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
