Hoping for a little help here as frankly I'm struggling. I need to be able to do "Send As" for a user to be able to send as some accounts that are in protected groups (the actual application is Blackberry but the behaviour is the same in a normal Outlook profile). I seem to be running into the Protected Groups issue. So, I followed Method 2 here: http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB04707 Yet it still doesn't seem to work (I've not restarted the Store but we're well beyond 2 hours now). We're running a Windows 2003 R2 domain with Exchange 2003 SP2. Thanks in advance.

Did you verify that the AdminSDHolder process is apply the SendAs permission to protect group members/[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "

Did you verify that the AdminSDHolder process is apply the SendAs permission to protect group members/ [string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " " Thanks for the reply. After doing "method 2" if I look at the security on my account (one of the affected ones) the besadmin account now shows as having explicit (not inherited) "Send As" permissions. I'm hoping bouncing the store may fix it as others have posted comments about the refresh interval just not working.

If the permission is there, then either Exchange has not recognzed the change yet, or there is some other problem.[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "

If the permission is there, then either Exchange has not recognzed the change yet, or there is some other problem. [string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " " Hmm restarted the Exchange server/services and still can't do a "Send As" from the BES account for anyone in Protected Groups from within Outlook.

You sure it's the right account? (get-mailbox <BES account>).distinguishedname |% {(get-user $_).sid.value} Does that match what's in your AdminSDHolder for having SendAs permission?[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "

Hi Paul, Any update on your issue? Best regards, Serena