[darkmatter2]

BES is running on Win2K3 SBS / Exchange 2003

BES Version 4.1.4.19

Just installed BES last week, made sure all permissions were set for the BB account in Exchange and ADUC, etc. according to instructions, but can't send emails from the mobile devices.

Everything else works perfectly. Sending from an smtp based account works fine.

I get the red X and Status: Desktop Email program unable to send message.

Help?

Thanks.

Vince

[penguin3107]

Is the BES user also a Domain Admin, or in some protected AD group with elevated domain privileges?
KB04707 - Unable to send email messages because Send As permission has been revoked - Port3101.org : Your BES Connection

[besadmin23]

Good suggestion penguin3107. this is clearly a permissions issue. Your gonna have to re-check your AD perms...

[darkmatter2]

Two out of five users can't send. Only one of them is an admin. The other a regular user. I checked to make sure each had the BESadmin account with Send As permissions as required. Also performed dsacls command with service off, waited 20 min, restarted, no go.

Any other suggestions?

Thanks.

[darkmatter2]

Update, I solved the regular user's problem, turns out he was in a security group. I'm going to remove the admin from any superior security groups and see if that helps as well. I'll then create a new account for him to use to access admin priviledges.

[penguin3107]

Originally Posted by darkmatter2

I'm going to remove the admin from any superior security groups and see if that helps as well. I'll then create a new account for him to use to access admin priviledges.

x2

[darkmatter2]

Originally Posted by penguin3107

x2

Unfortunately I've had no success with the last account. I have identical settings for both users, including groups, OU, but the latter cannot send still...

Any other ideas?

Thanks.

[usererror]

in our environment anyone who was a domain admin could not send email from their handheld, we all have to have separate domain admin accounts.

[penguin3107]

Originally Posted by darkmatter2

Unfortunately I've had no success with the last account. I have identical settings for both users, including groups, OU, but the latter cannot send still...

Any other ideas?

Thanks.

After you removed that user from the Domain Admins group (and all other prtoected groups) you might need to reapply the SendAs permission for their Exchange account.
Make sure the BES service account has the proper SendAs permissions for this user.
They may have been removed or never properly applied to begin with.

[hdawg]

What ^ said. You need to manually apply after you do the removal from the protected group.