Exchange 2007 - how to recieve reports from WSUS
HiI have a strange problem with WSUS reporting, I cannot send reports through Exchange. WSUS verison 3.1.6001.65, chekbox "my SMTP server requires authentication" is not set I try to send test messages to group (checkbox "require that all senders are authenticated" is not set) with error: Code SnippetSystem.Net.Mail.SmtpException: Mailbox unavailable. The server response was: 5.7.1 Client does not have permissions to send as this sender at Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException) at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.SendTestEmail(String emailLanguage, String smtpUserName, String senderEmailAddress, String smtpHostName, Int32 smtpPort, String recipients) at Microsoft.UpdateServices.Internal.BaseApi.EmailNotificationConfiguration.SendTestEmail() at Microsoft.UpdateServices.UI.SnapIn.Dialogs.EmailNotificationSettingsDialog.backgroundWorker_DoWork(Object sender, DoWorkEventArgs e) I try to send report to himself with same result My server uses special receive connector for anonymous in servers subnet and I can see that I use it when try to send reports. My receive connector settings: Code Snippet Get-ReceiveConnector "Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*)" AuthMechanism : Tls, Integrated, BasicAuthBanner : BinaryMimeEnabled : TrueBindings : {0.0.0.0:25}ChunkingEnabled : TrueDefaultDomain : DeliveryStatusNotificationEnabled : TrueEightBitMimeEnabled : TrueDomainSecureEnabled : FalseEnhancedStatusCodesEnabled : TrueLongAddressesEnabled : FalseOrarEnabled : FalseFqdn : exchange.mydomain.comComment : Enabled : TrueConnectionTimeout : 00:10:00ConnectionInactivityTimeout : 00:05:00MessageRateLimit : unlimitedMaxInboundConnection : 5000MaxInboundConnectionPerSource : 20MaxInboundConnectionPercentagePerSource : 2MaxHeaderSize : 64KBMaxHopCount : 30MaxLocalHopCount : 8MaxLogonFailures : 3MaxMessageSize : 10MBMaxProtocolErrors : 5MaxRecipientsPerMessage : 200PermissionGroups : AnonymousUsers, ExchangeUsersPipeliningEnabled : TrueProtocolLoggingLevel : VerboseRemoteIPRanges : {10.100.20.0/24, 10.97.18.0/24, 10.100.18.0(255.255.255.0)}RequireEHLODomain : FalseRequireTLS : FalseEnableAuthGSSAPI : FalseServer : EXCHANGESizeEnabled : EnabledTarpitInterval : 00:00:05AdminDisplayName : ExchangeVersion : 0.1 (8.0.535.0)Name : Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*)DistinguishedName : CN=Anonymous SMTP from Servers subnet (10.100.18(20).*\; 10.97.18.*),CN=SMTP Receive Connectors,CN=Protocols,CN=EXCHANGE,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Aministrative Groups,CN=CMS,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mydomain,DC=comIdentity : EXCHANGE\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*)Guid : f1e6efa7-d4f6-45bf-8a5f-23e44d627b18ObjectCategory : gorodskoi.ru/Configuration/Schema/ms-Exch-Smtp-Receive-ConnectorObjectClass : {top, msExchSmtpReceiveConnector}WhenChanged : 13.10.2008 9:58:47WhenCreated : 09.09.2008 16:35:12OriginatingServer : dc1.mydomain.comIsValid : True I try to send message from that server via VBS and compare Exchange SMTP Log. Scriptsends mail via SMTP fine without authentication Script: Code Snippet 2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,0,10.100.20.14:25,10.97.18.250:4842,+,,2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,1,10.100.20.14:25,10.97.18.250:4842,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,2,10.100.20.14:25,10.97.18.250:4842,>,"220 Exchange.gorodskoi.ru Microsoft ESMTP MAIL Service ready at Tue, 14 Oct 2008 15:36:41 +0400",2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,3,10.100.20.14:25,10.97.18.250:4842,<,HELO nmswin01,2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,4,10.100.20.14:25,10.97.18.250:4842,>,250 Exchange.gorodskoi.ru Hello [10.97.18.250],2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,5,10.100.20.14:25,10.97.18.250:4842,<,MAIL FROM: <wsus@mydomain.com>,2008-10-14T11:36:41.965Z,Exchange\Anonymous'>mailto:wsus@mydomain.com">wsus@mydomain.com>,2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,6,10.100.20.14:25,10.97.18.250:4842,*,08CAFB0FF92E9D86;2008-10-14T11:36:41.965Z;1,receiving message2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,7,10.100.20.14:25,10.97.18.250:4842,>,250 2.1.0 Sender OK,2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,8,10.100.20.14:25,10.97.18.250:4842,<,RCPT TO: <admin@mydomain.com>,2008-10-14T11:36:41.965Z,Exchange\Anonymous'>mailto:admin@mydomain.com">admin@mydomain.com>,2008-10-14T11:36:41.965Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,9,10.100.20.14:25,10.97.18.250:4842,>,250 2.1.5 Recipient OK,2008-10-14T11:36:41.980Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,10,10.100.20.14:25,10.97.18.250:4842,<,DATA,2008-10-14T11:36:41.980Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,11,10.100.20.14:25,10.97.18.250:4842,>,354 Start mail input; end with .,2008-10-14T11:36:42.168Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,12,10.100.20.14:25,10.97.18.250:4842,>,250 2.6.0 <3A2C74FC31D14DCCB8047EC606D2D04A@gorodskoi.ru>'>mailto:3A2C74FC31D14DCCB8047EC606D2D04A@gorodskoi.ru">3A2C74FC31D14DCCB8047EC606D2D04A@gorodskoi.ru>; Queued mail for delivery,2008-10-14T11:36:42.168Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,13,10.100.20.14:25,10.97.18.250:4842,<,QUIT,2008-10-14T11:36:42.168Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,14,10.100.20.14:25,10.97.18.250:4842,>,221 2.0.0 Service closing transmission channel,2008-10-14T11:36:42.168Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E9D86,15,10.100.20.14:25,10.97.18.250:4842,-,,Local WSUS: Code Snippet 2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,0,10.100.20.14:25,10.97.18.250:4790,+,,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,1,10.100.20.14:25,10.97.18.250:4790,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,2,10.100.20.14:25,10.97.18.250:4790,>,"220 Exchange.gorodskoi.ru Microsoft ESMTP MAIL Service ready at Tue, 14 Oct 2008 15:33:28 +0400",2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,3,10.100.20.14:25,10.97.18.250:4790,<,EHLO wsussrv,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,4,10.100.20.14:25,10.97.18.250:4790,>,250-Exchange.gorodskoi.ru Hello [10.97.18.250],2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,5,10.100.20.14:25,10.97.18.250:4790,>,250-SIZE 10485760,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,6,10.100.20.14:25,10.97.18.250:4790,>,250-PIPELINING,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,7,10.100.20.14:25,10.97.18.250:4790,>,250-DSN,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,8,10.100.20.14:25,10.97.18.250:4790,>,250-ENHANCEDSTATUSCODES,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,9,10.100.20.14:25,10.97.18.250:4790,>,250-STARTTLS,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,10,10.100.20.14:25,10.97.18.250:4790,>,250-AUTH NTLM LOGIN,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,11,10.100.20.14:25,10.97.18.250:4790,>,250-8BITMIME,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,12,10.100.20.14:25,10.97.18.250:4790,>,250-BINARYMIME,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,13,10.100.20.14:25,10.97.18.250:4790,>,250 CHUNKING,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,14,10.100.20.14:25,10.97.18.250:4790,<,AUTH ntlm,2008-10-14T11:33:28.979Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,15,10.100.20.14:25,10.97.18.250:4790,>,334 <authentication response>,2008-10-14T11:33:28.995Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,16,10.100.20.14:25,10.97.18.250:4790,*,SMTPSubmit SMTPAcceptAnyRecipient BypassAntiSpam AcceptRoutingHeaders,Set Session Permissions2008-10-14T11:33:28.995Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,17,10.100.20.14:25,10.97.18.250:4790,*,GORODSKOI\WSUSSRV$,authenticated2008-10-14T11:33:28.995Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,18,10.100.20.14:25,10.97.18.250:4790,>,235 2.7.0 Authentication successful,2008-10-14T11:33:28.995Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,19,10.100.20.14:25,10.97.18.250:4790,<,MAIL FROM:<wsus@mydomain.com>,2008-10-14T11:33:28.995Z,Exchange\Anonymous'>mailto:wsus@mydomain.com">wsus@mydomain.com>,2008-10-14T11:33:28.995Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,20,10.100.20.14:25,10.97.18.250:4790,*,08CAFB0FF92E97D0;2008-10-14T11:33:28.979Z;1,receiving message2008-10-14T11:33:28.995Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,21,10.100.20.14:25,10.97.18.250:4790,>,550 5.7.1 Client does not have permissions to send as this sender,2008-10-14T11:33:29.010Z,Exchange\Anonymous SMTP from Servers subnet (10.100.18(20).*; 10.97.18.*),08CAFB0FF92E97D0,22,10.100.20.14:25,10.97.18.250:4790,-,,Remote2008-10-14T11:33:56.729Z,Exchange\Default Exchange,08CAFB0FF92E98D1,0,10.100.20.10:25,10.78.101.12:11591,+,, WSUS istrying to authenticate as itself but it cannot.... And, as I have said, I don't use authenticate option in WSUS
October 14th, 2008 8:46am

Hi Alex, Create a new SMTP receive connector as per below guide to relay mails from Exchange 2007 with authentication Allowing application servers to relay off Exchange Server 2007 http://msexchangeteam.com/archive/2006/12/28/432013.aspx
Free Windows Admin Tool Kit Click here and download it now
October 14th, 2008 9:31am

HiFirst, I didn't use smtp relay, I used mail contacts instead. So I could send messages from WSUS server as anonymous in the organisation and I couldn't send its outside directly (error "550 5.7.1 Unable to relay", not my "5.7.1 Client does not have permissions to send as this sender")And second, I didn't want to create any new accounts to authenticate WSUS or use any exists. I wanted to send reports anonymously
October 15th, 2008 4:28am

This is still an active issue in WSUS 3.2.7600.226 and Exchange 2010 SP1. So for those struggling but finding this thread: Instead of building another connector specifically for WSUS, one can also try setting the 'Send on Behalf" rights correctly. Unfortunately the Exchange management shell does not have the required rights to set these kind of permissions on computer accounts. Hence one has to manually set them in active directory. To do so follow these instructions: -Go to Active Directory Users and Computers, -Enable "Advanced Features", -Open the properties of the account that you want to send on behalf from, -Go to Advanced Security, -Add the WSUS$ server computer account, -Set "Apply onto" to "This object only", -Allow the "Send As" permission, And voila, the WSUS website running under the WSUS$ computer account in IIS now has the appropiate rights to send on behalve of your account using integrated authentication. Jori Huisman
Free Windows Admin Tool Kit Click here and download it now
December 16th, 2011 7:00pm

The "Send as" version works. Yet I hope that the bug will be fixed in the near future.
October 16th, 2012 3:01am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics