I'm having the same problem. According to the MS KB, you should be able to circumvent the automated hourly removal of custom permissions on protected groups by specifying the permissions on the adminSDHolder object. However, adding Send As for BESAdmin does not solve the Domain Admins sending issue.
Can anyone please confirm that they have successfully worked around this issue without removing users from the Domain Admins account? If so, please explain in detail which method you've used and how.
Please do not respond unless you have specific experience in solving this issue. We're all just looking for concrete results. Thanks! ;)
|