[micronp450]

I setup a few members of the helpdesk team with the Blackberry Manager on their machine so they can add/remove users from the BES. I'm trying to avoid having them go on the BES and using the service account. So, before I even added them on the BES for roles I tried opening the software on tehir machien and they are able to log in and on the top it list the role as "Security Administrator Authority"

They must have some kind of elevated rights somewhere... If I do add them on a role it does change their title but when I take them back off they are still able to access the BES with that SAA permission.

Thanks

[aschieman]

Are you using Windows or SQL authentication?

[micronp450]

Windows Auth...

[BB1877]

Yep. I noticed this too...if I gave a HD tech BlackBerry Manager without a defined role on the BES it defaulted their access to Security Administrator. Pretty scary.

[mahoward]

You must be using Windows NT Authentication, the BUILTIN\Administrators group has sysadmin access on SQL Servers by default, check to see if your admins are inheriting this permission on your SQL box.