Mail Server Help
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationMail Server Help

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now!
  #1  
Old April 3rd, 2008, 08:40 PM
Fisherman's Avatar
Fisherman Fisherman is offline
Inherits Programmer.Slacker
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Aug 2003
Location: Between my Id and your Ego
Posts: 2,171 Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 1 Week 1 Day 9 h 1 m 37 sec
Reputation Power: 110
Send a message via ICQ to Fisherman Send a message via AIM to Fisherman
Blackberry Enterprise Server

We recently upgraded our Blackberry Enterprise Server to the most recent version, and are now having problems with members of the Domain Admin group sending emails from their handhelds.

We have found references to a command that supposedly corrects the problem, but everything that we have read about it says that it "increases risk", but we can't find out specifically what that "risk" is. does anyone have any ideas/information the following command?

Code:
dsacls cn=adminsdholder,cn=system,dc=domainname,dc=com "/G DOMAINNAME\BESadmin;CA;Send AS"
__________________
Fisherman

"Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius -- and a lot of courage -- to move in the opposite direction." - A.Einstein

Reply With Quote
  #2  
Old April 4th, 2008, 08:13 AM
Fisherman's Avatar
Fisherman Fisherman is offline
Inherits Programmer.Slacker
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Aug 2003
Location: Between my Id and your Ego
Posts: 2,171 Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level)Fisherman User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 1 Week 1 Day 9 h 1 m 37 sec
Reputation Power: 110
Send a message via ICQ to Fisherman Send a message via AIM to Fisherman
Mods -

Do you think this thread is more appropriate in the "Security & Cryptography" forum?

Reply With Quote
  #3  
Old April 4th, 2008, 11:05 PM
PWD's Avatar
PWD PWD is offline
Network Engineer
Dev Shed Novice (500 - 999 posts)
 
Join Date: Jun 2004
Location: 127.0.0.1
Posts: 678 PWD User rank is First Lieutenant (10000 - 20000 Reputation Level)PWD User rank is First Lieutenant (10000 - 20000 Reputation Level)PWD User rank is First Lieutenant (10000 - 20000 Reputation Level)PWD User rank is First Lieutenant (10000 - 20000 Reputation Level)PWD User rank is First Lieutenant (10000 - 20000 Reputation Level)PWD User rank is First Lieutenant (10000 - 20000 Reputation Level)PWD User rank is First Lieutenant (10000 - 20000 Reputation Level)PWD User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 5 Days 15 h 9 m 6 sec
Reputation Power: 176
DSACLS is a command line utility to change permissions within Active Directory. If these users were simple 'Domain Users', you would be elevating their privilages within Active Directory. Seeing as they're part of the Domain Admins group, I probably wouldn't worry about any elevation of privilages...

Here's the Technet on the DSACLS command:

DSACLS
__________________
PWD
MCSE, MCSA, MCP, Security+

NEW Windows Administration Forum
Admin Source
Could REALLY, REALLY, REALLY use you and your issues!

Last edited by PWD : April 4th, 2008 at 11:09 PM.

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationMail Server Help > Blackberry Enterprise Server


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 3 hosted by Hostway