Issue:
Domain Admins who are also BlackBerry users may have issue sending mail from their devices.
Possible Solution:
Via terminal, use the Dsacls security tool to update the ACL hierarchy and grant the adminsdholder AD object permissions:
dsacls "cn=adminsdholder,cn=system,dc=domainname,dc=com " /G
Notes:
- Dsacls is the terminal equivalent of the Security tab of the Users and Computers AD object.
- Used to view and change permissions and security attributes of the AD objects.
- Syntax:
dsacls "[\\<Computer>\]<ObjectDN>" [/A] [/D <PermissionStatement> ...] [/G <PermissionStatement> ...] [/I:{T | S | P}] [/N] [/P:{Y | N}] [/R {<User> | <Group>} [{<User> | <Group>}]...] [/S [/T]] [/?]
- - /G = Grant (add)
- - /T = object and children, /S = children of object only, /P = object and first-level children only
- - /A = Adds ownership and auditing information to the object
- - /D = Denies permissions to the object
- - /S = Restores the default for the object to the AD schema
Variant for Local Account:
dsacls "\\BES01\cn=adminsdholder,cn=system,dc=domainname,dc=com " /G
previous page
|