I have Exchange 2007 SP2 and need to set "Send As" permissions on Distributuion Group(Mail-Enabled Universal Security Group). I've alread set up following: Get-DistributionGroup "Group_Name" | Add-ADPermission -ExtendedRights Send-As -User "User_Name" AccessRights ExtendedRight But each time i try to send mail As "Group_Name" i get following error: Delivery has failed to these recipients or distribution lists: You are not allowed to send this message because you are trying to send on behalf of another sender without permission to do so. Please verify that you are sending on behalf of the correct sender, or ask your system administrator to help you get the required permission.

What about if you assign permission from ADUC ? 1. Went to the mail enabled security group in AD Users and Computers and brought up the properties of the group 2. Click on the security tab and added the security group and provided Send As permissionsAnil MCC 2011,ITIL V3,MCSA 2003,MCTS 2010, My Blog : http://messagingschool.wordpress.com

I did it too - same error.

Hi Any updates? Perhaps you can try SEND on Behalf Permissions, it might get the same as you want Set-DistributionGroup -Identity "Group_Name" -GrantSendOnBehalfTo "User_Name" And notice the time you wait to test after setting the SEND AS permissions? It will take a few time to be completed. Cheers Zi Feng

On Sun, 11 Dec 2011 19:11:09 +0000, pavlenych wrote: >What i've done it's next thing: i've changed this group from "Mail-Enable Universal Security Group" to "Mail-Enable Universal Destribution Group" and it started to work. > >What it's so? Can't i grant Send-As permissions to "Mail-Enable Universal Security Group" too? Only "Mail-Enable Universal Destriution Group"? That would depend on whether the security group was a member of some other privileged group. If it was then that old adminsdholder thread will undo the send-as permission. I believe that adminsdholder is only concerned with security principals, so changing the group from a security group to a distribution group should have thaken adminsdholder out of the picture. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Use the following cmdlet from Exchange Management Shell: Add-ADPermission UniversalDistributionGroup -ExtendedRights Send-As -user UserWhoSends Use GUI: 1. Went to the mail enabled security group in AD Users and Computers and brought up the properties of the group 2. Click on the security tab and added the security group and provided Send As permissions Please find below link for your referance http://exchangepedia.com/blog/2007/03/how-to-assign-sendas-right-using.html Girishp

Hello all! What i've done it's next thing: i've changed this group from "Mail-Enable Universal Security Group" to "Mail-Enable Universal Destribution Group" and it started to work. What it's so? Can't i grant Send-As permissions to "Mail-Enable Universal Security Group" too? Only "Mail-Enable Universal Destriution Group"? Thanks!

On Sun, 11 Dec 2011 19:11:09 +0000, pavlenych wrote: >What i've done it's next thing: i've changed this group from "Mail-Enable Universal Security Group" to "Mail-Enable Universal Destribution Group" and it started to work. > >What it's so? Can't i grant Send-As permissions to "Mail-Enable Universal Security Group" too? Only "Mail-Enable Universal Destriution Group"? That would depend on whether the security group was a member of some other privileged group. If it was then that old adminsdholder thread will undo the send-as permission. I believe that adminsdholder is only concerned with security principals, so changing the group from a security group to a distribution group should have thaken adminsdholder out of the picture. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Both of the above should work. Maybe Exch cache needs to be refereshed, wither wait a few hours or restart the IS service if possible and test again.Sukh

Hi According to the error message you posted, maybe you can try the command to set SEND on Behalf Permissions: Set-DistributionGroup -Identity "Group_Name" -GrantSendOnBehalfTo "User_Name" And notice the time you wait to test after setting the SEND AS permissions? It will take a few time to be completed. Cheers Zi Feng

Rich Matheisen [MVP] I sorry for a delay. I just didn't understand what did you mean?

On Tue, 20 Dec 2011 09:08:40 +0000, pavlenych wrote: >And...What to do afterward? >Thanks. i read about AdminSDHolder. As i understand my security group was protected(priveleged) group Maybe. I don't know that. You might, though. Is the adminCount property present on the group? Is its value greater than zero? >and by default all protected(priveleged) groups are updated by AdminSDHolder or something. > >Is it right? Yes. Or something. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

On Mon, 19 Dec 2011 13:32:18 +0000, pavlenych wrote: >Rich Matheisen [MVP] > >I sorry for a delay. I just didn't understand what did you mean? Use a search engine and look for "adminsdholder". --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

On Wed, 21 Dec 2011 08:06:53 +0000, pavlenych wrote: >I still don't understand why i can use "Send As" with some Distribution Group, but when i set this group as Security i can't use "Send As"?:-) Is "this group" a member (even if it's a transitive member) of a group that's protected by the AdminSDHolder thread? Does the group have an adminCount property? If it does, is the value of the adminCount property greater than zero? Protected security principals will have their permission reset by the AdminSDHolder thread. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

I still don't understand why i can use "Send As" with some Distribution Group, but when i set this group as Security i can't use "Send As"?:-)

And...What to do afterward? Thanks. i read about AdminSDHolder. As i understand my security group was protected(priveleged) group and by default all protected(priveleged) groups are updated by AdminSDHolder or something. Is it right?

1. Is "this group" a member (even if it's a transitive member) of a group that's protected by the AdminSDHolder thread? NO 2. Does the group have an adminCount property? NO

On Sun, 25 Dec 2011 12:50:35 +0000, pavlenych wrote: >1. Is "this group" a member (even if it's a transitive member) of a group that's protected by the AdminSDHolder thread? NO > >2. Does the group have an adminCount property? NO Are the Security Group and the Distribtion Group both in the same OU? Is permission inheritence enabled on both of the groups? --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP