Bes On A Standalone Server
Hi friends. Newbie to BES here.
I've setup BES 5.0 for Exchange 2007. I have experienced some issues that I'll work out with the help & suggestions in the other threads. My question today is has anyone tried setting BES 5.0 up on a standalone server? Meaning, does the machine have to be a member of the domain? If so, what did you discover? Does it work? The reason I ask this is because the BESAdmin account is running as a service and is also a domain admin. Since all domain computers trust the BES server because it's part of the domain, if someone got control of the BESAdmin account then that'd be game over. |
Then why make the besadmin account a domain admin account?
|
Quote:
|
I'm pretty sure the setup tutorial said to put the besadmin account in the group "administrators" at the domain level.
|
No no, the BESAdmin account needs to be a local admin on the BES server it's self only, not the domain.
It does need access to the mailfiles of the mail system your using, but as far as AD admin rights go, only local admin access to the server is sits on, and the ability to run as a service. |
Quote:
It should be a local admin on the BES. |
Quote:
And how is BESAdmin any different than 'Administrator'? The chances of somebody getting access to BESAdmin are no greater than Administrator. |
I thought the besadmin account also had to be a member of the domain in order for it to do the "Send As" abilities on each user's account.
|
Wirelessly posted (Bold 9000)
The besadmin account must be a domain account, and have the sendas permissions, but it does not need to be added to the domain admin group. Just make sure its added locally to the admin group on the server. |
Check out module #2.
blackberry. com/ select/ toolkit/ 02.shtml# Should the besadmin account also be a local admin on the Exchange server in order to get access to other peoples mailbox? |
Quote:
This should clear things up for you: KB02276 - Assigning permissions for a BlackBerry Enterprise Server service account - Port3101.org : Your BES Connection Follow that KB article and you should be fine. |
Quote:
|
Thank you. I followed your instructions to the letter and all was good. Still having issues that I'll search the forums for help on.
|
All times are GMT -5. The time now is 06:36 AM. |
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.