[mckinneycm]

I can receive emails from BES, but I can't send. I just get a red X and the message never goes through. I've compared my BES account to others that work and I can't see anything different. Can someone plese help??

[thebear8me]

check with your IT dept. You may be over your quota for email and will need to clean out your server side email box. Whenever i reach my quota i am not able to send only recieve. I need to move my email from inbox, sent box and deleted from the server to local mailboxes. this cleans it up and allows me to send email.

In outlook you should have two sets of mailboxes one is on the server and one is local. you will be able to drag the mail form the server side to local.

hope that makes sence and helps.

[mckinneycm]

It does make sense, however; I am the IT department and I have no quota setup for myself. Everyone else on my BES is fine except me.

[penguin3107]

Originally Posted by mckinneycm

It does make sense, however; I am the IT department and I have no quota setup for myself. Everyone else on my BES is fine except me.

Is your user account in any special groups with elevated permissions in Active Directory?
Are you a domain admin by chance?

If so, you'll need to remove yourself from the special groups.

[CO_BBTechie]

There may be a problem with your service books. Did you recently have any changes to the BES? If this is the issue, an enterprise activation should correct it.

[mckinneycm]

Originally Posted by penguin3107

Is your user account in any special groups with elevated permissions in Active Directory?
Are you a domain admin by chance?

If so, you'll need to remove yourself from the special groups.

That doesn't make sense. I have other domain admins that are working just fine.

[mckinneycm]

Originally Posted by CO_BBTechie

There may be a problem with your service books. Did you recently have any changes to the BES? If this is the issue, an enterprise activation should correct it.

I'm going to delete my account and then recreate myself from scratch.

[penguin3107]

Originally Posted by mckinneycm

That doesn't make sense. I have other domain admins that are working just fine.

You don't have to believe me. I won't be insulted.
Just give this a read through before convincing yourself that I'm not making sense.
BlackBerry Search Results

[mckinneycm]

Nobody is insulting you. I just don't understand how that can be the cause when other domain admins are working.

[penguin3107]

Originally Posted by mckinneycm

Nobody is insulting you. I just don't understand how that can be the cause when other domain admins are working.

Did you read through the KB article and related KB articles I linked to above?
It will explain your situation.

Just remove your AD account from any administrative groups described in the KB article above.
Wait 20 minutes or so, reassign your Send As permission and see if your problem is resolved. I'm 99% sure it will be.

[mckinneycm]

And then can I add myself back??

[penguin3107]

No, your user account should not be a Domain Admin. This breaks the Send As permissions on BES, and you need them to be intact in order to send mail from your BlackBerry.

This is a very commonly reported issue for new BES admins who don't understand how BES privileges work. Search the BES admin forum and you'll find dozens of topics on this.

The easiest way to solve your issue is to create a separate login ID for yourself in AD and give that second account Domain Admin privs. You should use that account to do admin type stuff when necessary.

Your normal login ID should not be a domain admin. This is unsafe and irresponsible of you as an IT admin. You should be following the Principle of least privilege to keep yourself in check.
Principle of least privilege - Wikipedia, the free encyclopedia

Running as a domain admin full-time gives yourself too much power to cause damage.

[mckinneycm]

Ok, then I'm still not understanding. Why are all the other domain admins working??

[penguin3107]

I REALLY REALLY suggest that you read through that KB article.
If you had, then you would have seen this:

"Additional Information

It is possible to modify Microsoft Active Directory permissions to allow BlackBerry smartphone users who are members of protected groups to send email messages from their BlackBerry smartphones without creating secondary email accounts. For instructions on modifying the permissions that are associated with the AdminSDHolder Microsoft Active Directory object and have been changed by the recent Microsoft Exchange update, search for article 817433 in the Microsoft Support Knowledge Base.

Important: This procedure is not recommended by Microsoft or by Research In Motion."

[juwaack68]

One really quick way, if you don't want to read all the way thru that (probably correct) document, is to log into a PC as the service account that was used to set up the BES (the svc-besadmin account, probably).

Create an Outlook profile for the service account, compose an email, and in the FROM field, put your name (send to your cubicle neighbor, if you like). Click Send.

Now click Send/Receive (since you might be impatient like me) and see if the message bounces or goes to your neighbor. Does it bounce? Then read the article Penguin references.

[mckinneycm]

I just looked at the list of protected accounts and I'm not a memeber of any of those. Apparently we created our own group called 'Net Admins' and we're not using the Domain Admins group.

[CO_BBTechie]

Then maybe someone will acknowledge my service book suggestion.....

[juwaack68]

I don't see the obvious question: What is the Message Status on the messages that recieve the red X? Open one and scroll up.....Message Status = what?

[penguin3107]

Originally Posted by mckinneycm

I just looked at the list of protected accounts and I'm not a memeber of any of those. Apparently we created our own group called 'Net Admins' and we're not using the Domain Admins group.

Is 'Net Admins' nested in any of the special groups, or does it otherwise inherit any privileges from those groups?

[mckinneycm]

'Desktop email program unable to submit message'