+ Post New Thread
Page 2 of 2 FirstFirst 12
Results 16 to 18 of 18
Windows Server 2008 R2 Thread, Exchange 2010 SP2 with ActiveSync 14.2 and Blackberry devices in Technical; Originally Posted by Abaddon If you open up Active Directory Users and Computers and locate one of your users that ...
  1. #16

    dhicks's Avatar
    Join Date
    Aug 2005
    Thank Post
    Thanked 781 Times in 678 Posts
    Rep Power
    Quote Originally Posted by Abaddon View Post
    If you open up Active Directory Users and Computers and locate one of your users that is not working, Double-Click into the account and click on the Security Tab (if this is not visible, Click on View> Advanced Features from the Menu at the top of the screen then navigate back to your user). Once on the security tab, click on the Advanced Button and make sure that the ‘Include Inheritable Permissions From This Object’s Parent’ is ticked.
    But as sukh pointed out above, upgrading to service pack 2 shouldn't have affected individual account permissions in Active Directory.

  2. #17
    Abaddon's Avatar
    Join Date
    Mar 2006
    Thank Post
    Thanked 68 Times in 63 Posts
    Rep Power
    Agreed, it shouldn't..

    I've had a couple of issues like yours, with random connection errors (to mail boxes), on diverse handsets (iOS, Blackberry and one Android), and this fixed it on all occasions. May not work for you, but it was worth a try..

  3. Thanks to Abaddon from:

    dhicks (28th February 2012)

  4. #18

    Join Date
    Jan 2006
    Thank Post
    Thanked 307 Times in 243 Posts
    Rep Power
    Some AD ubergeekery that *might* be relevant and has explained a Very Great & Perplexing Mystery[tm] for me in the past:

    If you find a normal user where the AD Inherit permissions tick box is clear then look at the adminCount attribute on the user object. If that's 1, then that will usually explain why the tick box is clear and you must set that attribute to 0, otherwise any tick you put in the Inherit permissions box will be automagically cleared again.

    If you want to find users where adminCount =1, make an ADUC custom query where the advanced tab LDAP query is:

    (objectcategory=person)(samaccountname=*)(admincou nt=1)

    ** eliminate the space this forum puts in the word "admincount" **

    Don't do this to Admin accounts without Googling, in fact Google first regardless. Here's some relevant MS info about AdminSDHolder, protected groups and SDPROP to get you started. In my world this has *always* been about Orphaned AdminSDHolder Objects i.e. someone temporarily put user accounts in a privileged group for some reason or other.
    Last edited by PiqueABoo; 28th February 2012 at 07:18 PM.

  5. 2 Thanks to PiqueABoo:

    Abaddon (1st March 2012), dhicks (28th February 2012)

+ Post New Thread
Page 2 of 2 FirstFirst 12

Similar Threads

  1. Exchange 2010 SP2 RU1 released
    By sukh in forum Enterprise Software
    Replies: 0
    Last Post: 14th February 2012, 08:36 PM
  2. Exchange 2010 SP2 released
    By DrCheese in forum Enterprise Software
    Replies: 13
    Last Post: 12th December 2011, 09:51 AM
  3. in a muddle with exchange 2010 sp1 (owa and certificates)
    By sacrej in forum Windows Server 2008 R2
    Replies: 5
    Last Post: 13th October 2010, 09:26 AM
  4. Exchange and Blackberry Server
    By EduTech in forum Windows
    Replies: 8
    Last Post: 9th February 2009, 10:40 PM
  5. Replies: 5
    Last Post: 21st January 2009, 08:58 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts