Quote:
|
If someone has access to the BES server one basically has access to all mailboxes due to this configuration.
|
That's not absolutely true. We never use BESAdmin for BES administration, we use our normal AD user IDs for it. That makes auditing much easier.
You just have to give the users that need it the role of "Enterprise Administrators" on the BES.
For upgrades, as nobody7290 says, you will still need the BESAdmin accounts.