If you are working with BES (BlackBerry Enterprise Server) you can get a problem, when users cannot send emails from their Blackberry. And, I guess you already familiar with a “Send As Permission” problem :).
So, I created a script, that allows set all neccesasry right to the BESADMIN account. When you run script, you should provide an OU, where the particular user exist and user’s email address.
NOTE: In my script I used linex.exe and dsacls.exe. Just use Google to download those very POWERFUL tools
DSQUERY OU domainroot > %TEMP%\ou.txt
%Tools%\linex -n < %TEMP%\ou.txt
SET /p SOU=”Please type # of OU where the user located: ”
SET /p BES=”Please type user’s email address: ”
FOR /F “TOKENS=* delims==,OU” %%a in (‘%Tools%\LINEX -l %SOU% ^<%TEMP%\OU.txt’) do set ou4user=%%~a
FOR /F “TOKENS=2 delims==,” %%a in (‘dsquery * “%ou4user%” -attr mail distinguishedName^|find /i “%BES%”‘) do set BES-USER=%%~a
dsacls “CN=%BES-USER%,%ou4user%” /G “%USERDOMAIN%\BESADMIN:GR”
dsacls “CN=%BES-USER%,%ou4user%” /G “%USERDOMAIN%\BESADMIN:CA;Send As”