I am trying to grant send-as permission to mail enabled security group with below command but it is failing with mentioned error. Add-ADPermission mygroup1 -User John -AccessRights ExtendedRight -ExtendedRights "Send as" Active Directory operation failed on dc1. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 + CategoryInfo : WriteError: (0:Int32) [Add-ADPermission], ADOperationException + FullyQualifiedErrorId : F21FD540,Microsoft.Exchange.Management.RecipientTasks.AddADPermission I gone through below article but it didn't help. I also tried giving the sendas perms through ADUC but no luck. I am able to set the permissions in ADUC but outlook is still saying John is unauthorized to send emails as mygroup1. http://social.technet.microsoft.com/Forums/en-US/exchangesvrgeneral/thread/0960b944-82b2-42f1-b438-a7d57b7ab783 Any help is appreciated. Thanks, Sitaram Pamarthi Blog : http://techibee.com Follow on Twitter This posting is provided AS IS with no warranties or gurentees,and confers no rights

Hello, 1. Go to properties of the user John on the AD , go to security tab and add the permission full control for self user 2. Go to EMC and add the NT_Autority\Self user with Send As permission, also add user John and see whether we can successfully solve the problem. Thanks, Simon