Hello everyone. I am getting the following error message using EBPA: I have read the article on enabling the security tab which I already had enabled in my ESM. I just want to make 100% sure that what the article is recommending me to do is to enable "inherit from parent the permission entries that apply to child objects...." My settings currently look like this: Setup: FE+BE, Exchange 2003 sp2 on Server 2003 Enterprise. *note that we also have a BlackBerry server, would modifying this permissions cause any conflicts? Thanks, Ceez

I didnt get you, if you are trying to enable Security Tab in ESM, then follow the below given article http://support.microsoft.com/kb/264733 There is no need to make any change in the inherit permissions Enabling inherit permissions would let the objects take default permissions from the parent folder. Thus it depends on the folder where you are enabling the inherit folder.

Hi Ceez, I hope you have a BES service account to access all the mailboxes on the server by BES software. Just make sure that it is not a member of any domain admin groups and go ahead for enabling the inheritance. http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB02276&sliceId=SAL_Public&dialogID=34096724&stateId=1%200%2034094489

@Amit Tank, we have a standalone bberry server with a bbes account in AD that is ONLY part of the Domain Users group. We also use this account to log into our bberry server and use the bberry manager. So if i understand you correctly, enabling the inheritance will not affect this bbes account as long as my bbes stays as only a member ofthe Domain Users group. Thank you for your help, Ceez

Yep Ceez, itshould not affected in that case...

Alright, I enabled it and so far no disasters..... internal and external emails are flowing as well as bberry. Maybe this will fix weird tiny issues that occured with outlook and some child domains. Thanks, ceez

@Amit Tank: I placed a tick on the "inherit..." on the root of my ESM and my email is flowing fine but now I am having problems with new user accounts not getting their email addresses stamped. This was working before with the errors generated by the exchange tool. I now get this new error: I checked out the link that it recommends to read. I looked up the Exchange Domain Servers group for my forest and 3 child domains, I went to security - advanced - and checked the "inherit..." box. If I run the exch tool immediately afterwards I do not get any errors, great! BUT when I create a new account it does not stamp the email address. I checked the groups again and the checkmark was gone...I tried this 3 times and the check mark just unchecks itself....if I run the exch tool I get the the errors again. I am also seeing these 2 errors on my backend whenever I run RUS: Event Type:ErrorEvent Source:MSExchangeSAEvent Category:General Event ID:2030Date:10/22/2008Time:10:32:14 PMUser:N/AComputer:SRVXBE01Description:Unable to find the e-mail address 'smtp:ittest3@domain1.net SMTP:ittest3@domain2.com X400:c=US;a= ;p=DOMAIN;o=Exchange;s=test3;g=it; ' in the directory. Error 'c0070005'. Event Type:ErrorEvent Source:MSExchangeALEvent Category:Service Control Event ID:8231Date:10/22/2008Time:10:32:14 PMUser:N/AComputer:SRVXBE01Description:Permanent failure reported by policy group provider for 'CN=Recipient Policies,CN=DOMAIN,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=DOMAIN,DC=NET':'MAD.EXE', error=8000ffff. Taking provider offline. DC=BAFTL,DC=DOMAIN,DC=NET *note that we use 2 smtp addressess* can I uncheck what I originally did without causing havoc in exchange? I rather have that unchecked, get errors in the exch tool but at least have my new accounts stamped with their emmail addresses. Thanks again for your help with this matter. ceez