RE: ActiveSync and Domain Admins

2010-06-17 Thread Don Andrews
It's a PITA as are most security related changes, but makes sense. From: Paul Steele [mailto:paul.ste...@acadiau.ca] Sent: Thursday, June 17, 2010 8:01 AM To: MS-Exchange Admin Issues Subject: RE: ActiveSync and Domain Admins That did the trick. I don'

RE: ActiveSync and Domain Admins

2010-06-17 Thread Kennedy, Jim
You can. I am old and also in EDU. If I did it anyone can. :) From: Paul Steele [mailto:paul.ste...@acadiau.ca] Sent: Thursday, June 17, 2010 11:01 AM To: MS-Exchange Admin Issues Subject: RE: ActiveSync and Domain Admins I think I'll investigate alternatives and see if an old dog can

RE: ActiveSync and Domain Admins

2010-06-17 Thread Paul Steele
min Issues Subject: RE: ActiveSync and Domain Admins I'm in the domain admins group, and I got my Windows Mobile to work after migrating to 2010 by going in and enabling inheritance on my user account in AD. The adminSDholder process will disable inheritance again but it appears that once yo

RE: ActiveSync and Domain Admins

2010-06-17 Thread Campbell, Rob
work after inheritance is disabled again. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, June 17, 2010 9:00 AM To: MS-Exchange Admin Issues Subject: RE: ActiveSync and Domain Admins And in Exchange 2010 sp1 it's much more accessible and usable. Regards, Michae

RE: ActiveSync and Domain Admins

2010-06-17 Thread Michael B. Smith
:mich...@smithcons.com] Sent: Thursday, June 17, 2010 6:23 AM To: MS-Exchange Admin Issues Subject: RE: ActiveSync and Domain Admins It's not a problem, per se. It's by design. ActiveSync won't work with accounts in any of the protected groups. In order to support RBAC, Exchange has to have perm

RE: ActiveSync and Domain Admins

2010-06-17 Thread Matt Moore
: Thursday, June 17, 2010 6:23 AM To: MS-Exchange Admin Issues Subject: RE: ActiveSync and Domain Admins It's not a problem, per se. It's by design. ActiveSync won't work with accounts in any of the protected groups. In order to support RBAC, Exchange has to have permissions over

RE: ActiveSync and Domain Admins

2010-06-17 Thread Matt Moore
ActiveSync and Domain Admins I noticed that my personal account did not work on my iPod with ActiveSync, but my test account worked ok. I did some checking and came across an article that said that ActiveSync does not work if the user is in the Domain Admins group. ExRCA fails as well with

RE: ActiveSync and Domain Admins

2010-06-17 Thread Jim Holmgren
timore, MD 21201 410.625.2200 (main) 443.524.8573 (direct) 443-506.2400 (cell) www.xlhealth.com From: Chris [mailto:cmu...@gmail.com] Sent: Thursday, June 17, 2010 9:28 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync and Domain Admins Then you also have the issue of why you

RE: ActiveSync and Domain Admins

2010-06-17 Thread Michael B. Smith
Correct on both counts. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Chris [mailto:cmu...@gmail.com] Sent: Thursday, June 17, 2010 9:28 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync and Domain Admins Then you also have the issue of why

RE: ActiveSync and Domain Admins

2010-06-17 Thread Jason Gurtz
> across an article that said that ActiveSync does not work if the user is > in the Domain Admins group. The Blackberry BES server has a similar caveat; it's a by-design security related thing. The Long and short of it is the best practice of not using your domain admin account for day-to-day tas

RE: ActiveSync and Domain Admins

2010-06-17 Thread Michael B. Smith
http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com] Sent: Thursday, June 17, 2010 9:26 AM To: MS-Exchange Admin Issues Subject: Re: ActiveSync and Domain Admins I've seen that with the BES server and Blackberrys, but not with iPods or iPhones. I'm a Domain Admin and I con

Re: ActiveSync and Domain Admins

2010-06-17 Thread Chris
eEssentialExchange.com > > > > *From:* Paul Steele [mailto:paul.ste...@acadiau.ca] > *Sent:* Thursday, June 17, 2010 9:17 AM > *To:* MS-Exchange Admin Issues > *Subject:* ActiveSync and Domain Admins > > > > I noticed that my personal account did not work on my iPod

RE: ActiveSync and Domain Admins

2010-06-17 Thread Kennedy, Jim
June 17, 2010 9:17 AM To: MS-Exchange Admin Issues Subject: ActiveSync and Domain Admins I noticed that my personal account did not work on my iPod with ActiveSync, but my test account worked ok. I did some checking and came across an article that said that ActiveSync does not work if the user

Re: ActiveSync and Domain Admins

2010-06-17 Thread Chris
So the account you use every day is a member of the domain admins group? See if under the advanced securities tab of the user using ADUC if the "Allow inheritance" checkbox is checked. Chris On Thu, Jun 17, 2010 at 8:16 AM, Paul Steele wrote: > I noticed that my personal account did not work o

Re: ActiveSync and Domain Admins

2010-06-17 Thread sms adm
I've seen that with the BES server and Blackberrys, but not with iPods or iPhones. I'm a Domain Admin and I connect to our ISA server which points to one of our FE servers and i have no problem accessing my mail on my iPod. On Thu, Jun 17, 2010 at 9:16 AM, Paul Steele wrote: > I noticed that my

RE: ActiveSync and Domain Admins

2010-06-17 Thread Michael B. Smith
- what does it mean to me). I bugged that last week. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Paul Steele [mailto:paul.ste...@acadiau.ca] Sent: Thursday, June 17, 2010 9:17 AM To: MS-Exchange Admin Issues Subject: ActiveSync and Domain Admi

ActiveSync and Domain Admins

2010-06-17 Thread Paul Steele
I noticed that my personal account did not work on my iPod with ActiveSync, but my test account worked ok. I did some checking and came across an article that said that ActiveSync does not work if the user is in the Domain Admins group. ExRCA fails as well with the error: ExRCA is attempting th