Hi, I wanted to provide send as Permission to service account for all the users in the Exchange Server. I tried below comand to provide the access and i was able to provide the permission on the server level Get-MailboxServer <Server> | Set-ADPermission -User "ServiceAccount" -extendedRights Send-As I was expecting that this AD Property should inherit to all the users in that server and the service account should have permission to sendas security permission on all the mailbox in that server. I dont see this settings applied on any of the mailbox in that server, any idea on this would be really great Regards, Krishna

Try this command instead: Get-mailboxDatabase -Server <Server> | Set-ADPermission -User "ServiceAccount" -ExtendedRights Send-As Thank you, Ibrahim Benna MCSA+Messaging, MCSE+Messaging, MCT, MVP "Did you backup your Information Store Today?!"

Hi, I think you mean to Add-Adpermission right ? Get-mailboxDatabase -Server <servername> | Add-ADPermission -User "user" -extendedRights Send-As It also did not work Regards, Krishna

Hi, I think you mean to Add-Adpermission right ? Get-mailboxDatabase -Server <servername> | Add-ADPermission -User "user" -extendedRights Send-As It also did not work Regards, Krishna Plz try this Get-mailboxDatabase -Server <servername> | Add-ADPermission -User "user" -extendedRights Send-As -InheritanceType All Regards, Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

It was able to add adpermission on the Database. I did not see this permission reflecting on the user AD security properties It should inherit this permission from the Database to the users right ? Regards, Krishna

Hi, permission applied, but it did not inherit to the Mailbox AD Properties Regards, Krishna

Hi, permission applied, but it did not inherit to the Mailbox AD Properties Regards, Krishna Hi, These are the steps which I often used to install bes 4.1.6 to give send as permission to BESAdmin user on exchange mailboxes: add-exchangeadministrator “BESAdmin” –role ViewOnlyAdmin Get-mailboxserver | add-adpermission –user BESAdmin -accessrights GenericRead,GenericWrite -extendedrights Send-As,Receive-As,ms-Exch-Store-Admin Set Send As permission to enable BlackBerry user (besadmin) to send messages 1. On the taskbar, click Start > Administrative Tools > Active Directory Users and Computers. 2. On the View menu, click Advanced Features. 3. Right-click the root of the domain. 4. Click Properties. 5. On the Security tab, click Advanced. 6. Click Add. 7. Type BESAdmin. 8. Click Check Name. 9. Click OK. 10. In the Apply Onto drop-down list, click User Objects. 11. In the Allow column, select the Send As check box. 12. Click Apply. 13. Click OK. Regards, Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

Hi, Thank for the update Does this mean that we will not able to Inherit the permission from the Exchange server or Database to the mailboxes Providing permission from Active directory users and computer on to the root domain wil Inherit this security permission to all the object in Domain To avoid applying to all the objects in the Ad , do you think below command is the only solution to apply the properties on the mailbox get-mailbox -resultsize unlimited | add-adpermission –user "user" –accessrights –extendedrights Send-As Regards, Krishna

Hi Krishna.Kumar, Sure, you are right, the command is correct! Regards! Gavin

To avoid applying to all the objects in the Ad , do you think below command is the only solution to apply the properties on the mailbox get-mailbox -resultsize unlimited | add-adpermission –user "user" –accessrights –extendedrights Send-As Regards, Krishna Hi Krishna, Warning: When u use this command get-mailbox -resultsize unlimited | add-adpermission –user "user" –accessrights –extendedrights Send-As It will only add permission to existing mailboxes, not to the upcoming mailboxes. Manual method, which I told u above, adds the permssion to AD Domain object, but only for user objects, not for all objects. So manual method is correct one, where any new mailbox will automatically recieve the permission bcoz of inhertance from root domain object. That's what is also mentioned in BES installation doc. Hope this help u. Regards, Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com