Hi,

We have SP2013 farm. Access request emails are not getting triggered. I am getting following error:

Failed attempt 3 sending mail to recipients: shundal@contractor-mcdermott.com. Mail Subject: Shidnal, Vinayak S. wants to access 'TestSecurity'. Error: SmtpException while sending email: System.Net.Mail.SmtpException: Mailbox unavailable. The server response was: 5.7.1 Client does not have permissions to send as this sender     at System.Net.Mail.DataStopCommand.CheckResponse(SmtpStatusCode statusCode, String serverResponse)     at System.Net.Mail.DataStopCommand.Send(SmtpConnection conn)     at System.Net.Mail.SmtpClient.Send(MailMessage message)     at Microsoft.SharePoint.Email.SPSmtpClient.Send(MailMessage msg)     at Microsoft.SharePoint.Email.SPSmtpClient.TrySend(MailMessage msg)

Some blogs suggest that there might be a problem with Exchange server. i have few questions:

1. Under which service account does email is sent, is the the app pool account or timer service is responsible to send it?

2. What are the steps to resolve this issue.

Your help will be highly appreciated

Hi,

Error 5.7.1 -> relaying prohibited

You need to allow relaying for authenticated users, or from a range of IPs from your SMTP server. Please check this link - http://support.microsoft.com/kb/304897

Hope this helps. Thanks

Thank you Anuja.

All other emails like, access approved/rejected etc emails are working perfectly fine. its just access request email which is not working.

it would be very helpful if you could provide more information on why relaying prohibited will be the reason for this?

Regards,

Satbir

Hi Satbir,

Per my knowledge, the access request emails is sent as outgoing emails and the email received is controlled by the Exchange Receiver connector.

I recommend to add anonymous permission to the Exchange receiver connector.

https://technet.microsoft.com/en-us/library/Bb232021(v=EXCHG.141).aspx

Thanks,

Victoria

Giving additional rights to the app pool account on the external relay receive connector worked.

Executed following commands:

Get-ReceiveConnector <spconector> | Add-ADPermission -User CONTOSO\AppPoolAccount -ExtendedRights ms-Exch-SMTP-Accept-Authoritative-Domain-Sender
Get-ReceiveConnector <spconector> | Add-ADPermission -User CONTOSO\AppPoolAccount -ExtendedRights ms-Exch-SMTP-Accept-Any-Sender