Quote:
Originally Posted by dmonty
Glad I found this forum! It has been very helpful. One question I had. Is there a way that a domain admin can take advantage of a BES account? I tried adding my domain admin account and I couldn't send emails, etc.
|
The only way a Domain Admin can take advantage of a BES account is if you use the
dsacls command to modify permissions of the directory ... such as:
dsacls "cn=adminsdholder,cn=system,dc=domain,dc=com " /G "DOMAINNAME\BESadmin:CA;Send As"
That said, I'd recommend you not do this and instead read
AdminSDHolder - or where did my permissions go? ... and then abide by the principle of least priviledge.
Domain Admins are administrative accounts ... not user accounts. They should be secured and used only when needed.