08-24-2009 11:22 AM
08-24-2009 11:58 AM
If you want your BES and handhelds to work correctly for everyone, all of the time, then you need to follow RIM's guidelines and best practices.
It's called the Principle of Least Privilege... and you're not following it.
Principle of least privilege - Wikipedia, the free encyclopedia
Make yourselves normal users, and then create a secondary login with Domain Admin privileges. Only use that secondary login when necessary.
08-24-2009 12:19 PM
08-24-2009 01:28 PM
My name is knottyrope
I am a domain abuser, currently I am on my 7th year of recovery.
Every day I am tempted to elevate my privileges. It has been hard using Run as at times and using a second account can be daunting, but in the end it has been worth it to keep things more secure for my company and fellow employees.
08-24-2009 01:40 PM
Hi my name is BBhorrigan, and I was once a domain abuser.
It is a battle you fight one day at a time.
you never really win.
08-24-2009 02:07 PM
It is possible to modify Microsoft Active Directory permissions to allow BlackBerry smartphone users who are members of protected groups to send email messages from their BlackBerry smartphones without creating secondary email accounts using the DSACLS.exe utility. For instructions on modifying the permissions that are associated with the AdminSDHolder Microsoft Active Directory object and have been changed by the recent Microsoft Exchange update, refer to the Microsoft Support Knowledge Base.
Important: This procedure is not recommended by Microsoft or by Research In Motion.
You have been warned, good luck.