Welcome!

Welcome to the official BlackBerry Support Community Forums.

This is your resource to discuss support topics with your peers, and learn from each other.

inside custom component

BlackBerry® Enterprise Service 10

Reply
Contributor
thumper999
Posts: 10
Registered: ‎11-04-2008
My Device: Not Specified

User with Microsoft admin privaleges unable to use a Blackberry

Not sure the correct place to ask this question, but a couple of years ago my company installed a daylight savings time patch to our exchange server.  Apparently Microsoft made a security change to one of the hot fixes\service packs that prevent anyone with administrative privaleges from being able to use a Blackberry.  Has anyone else run into this issue and do you know of any fixes that Microsoft may have provided?
Please use plain text.
Guru III
knottyrope
Posts: 30,596
Registered: ‎06-25-2008
My Device:

I'm rockin the BlackBerry Passport, Z30, Z10, Q10, BlackBerry Mini Stereo Speaker, 64 gig PlayBook, BlackBerry Wireless Headset HS-700

My Carrier: I am on AT&T. Please edit your Personal Profile with your DEVICE TYPE, DEVICE OS and Carrier

Re: User with Microsoft admin privaleges unable to use a Blackberry

If you want your BES and handhelds to work correctly for everyone, all of the time, then you need to follow RIM's guidelines and best practices.

It's called the Principle of Least Privilege... and you're not following it.
Principle of least privilege - Wikipedia, the free encyclopedia

Make yourselves normal users, and then create a secondary login with Domain Admin privileges. Only use that secondary login when necessary.

 




Click here to Backup the data on your BlackBerry Device! It's important, and FREE!


Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals

BESAdmin's, please make a signature with your BES environment info.


SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope


Want to thank me? Buy my KnottyRope App here


BES 5.0.4 and BES 10.2.2 with Exchange 2010 and SQL 2008


Please use plain text.
Forums Veteran I
bbhorrigan
Posts: 2,036
Registered: ‎12-04-2008
My Device: 8900

Re: User with Microsoft admin privaleges unable to use a Blackberry

Why would you ever have a regular user with domain admin privileges? Doesn't seem to be a very good idea. I would suggest you utilize service accounts.
******************************************************************


If someone helped you give them kudos. Research all info!
Please use plain text.
Contributor
thumper999
Posts: 10
Registered: ‎11-04-2008
My Device: Not Specified

Re: User with Microsoft admin privaleges unable to use a Blackberry

I am the user, and I am also a domain admin.
Please use plain text.
Guru III
knottyrope
Posts: 30,596
Registered: ‎06-25-2008
My Device:

I'm rockin the BlackBerry Passport, Z30, Z10, Q10, BlackBerry Mini Stereo Speaker, 64 gig PlayBook, BlackBerry Wireless Headset HS-700

My Carrier: I am on AT&T. Please edit your Personal Profile with your DEVICE TYPE, DEVICE OS and Carrier

Re: User with Microsoft admin privaleges unable to use a Blackberry

My name is knottyrope

I am a domain abuser, currently I am on my 7th year of recovery.

 

Every day I am tempted to elevate my privileges. It has been hard using Run as at times and using a second account can be daunting, but in the end it has been worth it to keep things more secure for my company and fellow employees.

 

 

 

 

 




Click here to Backup the data on your BlackBerry Device! It's important, and FREE!


Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals

BESAdmin's, please make a signature with your BES environment info.


SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope


Want to thank me? Buy my KnottyRope App here


BES 5.0.4 and BES 10.2.2 with Exchange 2010 and SQL 2008


Please use plain text.
Forums Veteran I
bbhorrigan
Posts: 2,036
Registered: ‎12-04-2008
My Device: 8900

Re: User with Microsoft admin privaleges unable to use a Blackberry

Hi my name is BBhorrigan, and I was once a domain abuser.

 

It is a battle you fight one day at a time.

 

you never really win.

******************************************************************


If someone helped you give them kudos. Research all info!
Please use plain text.
Contributor
thumper999
Posts: 10
Registered: ‎11-04-2008
My Device: Not Specified

Re: User with Microsoft admin privaleges unable to use a Blackberry

My problem is that I am an admin for 200 plus Blackberry users and I cannot use one of the devices myself.  I will check with Microsoft.
Please use plain text.
Guru III
knottyrope
Posts: 30,596
Registered: ‎06-25-2008
My Device:

I'm rockin the BlackBerry Passport, Z30, Z10, Q10, BlackBerry Mini Stereo Speaker, 64 gig PlayBook, BlackBerry Wireless Headset HS-700

My Carrier: I am on AT&T. Please edit your Personal Profile with your DEVICE TYPE, DEVICE OS and Carrier

Re: User with Microsoft admin privaleges unable to use a Blackberry

Administration accounts in protected Windows Active Directory groups
http://www.blackberry.com/btsc/KB12309

 snip

 

It is possible to modify Microsoft Active Directory permissions to allow BlackBerry smartphone users who are members of protected groups to send email messages from their BlackBerry smartphones without creating secondary email accounts using the DSACLS.exe utility. For instructions on modifying the permissions that are associated with the AdminSDHolder Microsoft Active Directory object and have been changed by the recent Microsoft Exchange update, refer to the Microsoft Support Knowledge Base.

 

Important: This procedure is not recommended by Microsoft or by Research In Motion.

 

 

 snip

 

You have been warned, good luck.

 




Click here to Backup the data on your BlackBerry Device! It's important, and FREE!


Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals

BESAdmin's, please make a signature with your BES environment info.


SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope


Want to thank me? Buy my KnottyRope App here


BES 5.0.4 and BES 10.2.2 with Exchange 2010 and SQL 2008


Please use plain text.