I need to be able to grant "send-as" permission to several mailboxes of privileged accounts in order for our Blackberry Enterprise Server to enable users to send messages from their phones. I know that Microsoft recommends against this, but
that's the way we are set up here. Based on an earlier post here, I had enabled inheritance on the user account in AD and it worked and I thought I had the solution. Then I discovered that AD goes through and disables inheritance on all privileged
accounts every hour or so. This BES server works properly with non-privileged accounts and works with privileged accounts as long as inheritance is enabled.
I found a KB ( http://support.microsoft.com/kb/907434 ) about using dsacls to grant this permission so that it would not be removed. This appears to be an older article and said it refers to Exchange 2003 and 2007. Would this procedure still be valid for Exchange 2013 on Windows 2012R2? Is there any other way to get a specific BES admin account to have send-as permission to mailboxes of privileged accounts?
Most of our mailboxes are still on Exchange 2010, and privileged user's mailboxes work fine with that BES server and that BES admin account. Those privileged accounts still on Exchange 2010 still have nothing listed in "send-as" in the console. I'm not sure what the difference is.
Thank you very much for your help with this.