Send As issue in Exchange Server 2007 SP1
Exchange 2007 SP1, Outlook 2003 sp3Hi,We have a mailbox enabled user with the name USRMB1 with a security group called USERMB1 ACCESS granted full access & send as permissions in the mailbox properties. I and some other users are member of this security group.When i try to send a mails as USRMB1, i get the following messages:+++++Delivery has failed to these recipients or distribution lists:Sh, ManojYou are not allowed to send this message because you are trying to send on behalf of another sender without permission to do so. Please verify that you are sending on behalf of the correct sender, or ask your system administrator to help you get the required permission.Diagnostic information for administrators:Generating server:+++++++ /O=XYZ/OU=Corporate/cn=Recipients/cn=Manoj.sh #MSEXCH:MSExchangeIS:/DC=org/DC=xyz:EXCH7[578:0x000004DC :0x0000001D] #EX#+++++++ Other users are able to send as USRMB1. Sometimes I am also able to send emails but other times i got the above message. I checked the permissions and they are fine. Please advise what can be done to resolve this issue. Thanks Manoj Sh.
April 14th, 2010 8:35pm

Have you looked at the properties of the USRMB1 account in ADSIedit? I'd look for a deny on your account in there. Is your account part of Domain Admins or Enterprise Admins? Those groups have explicit denys for SendAs on mailboxes. See http://technet.microsoft.com/en-us/library/bb310770(EXCHG.80).aspx. Missy
Free Windows Admin Tool Kit Click here and download it now
April 14th, 2010 8:46pm

Thanks for your reply. I have checked the USRMB1 in ADSIedit and found the security group "USERMB1 ACCESS" has Send As permission ALLOW box Checked. My account is not a part of Domain Admins or Enterprise Admins. Also, sometime it "works" and sometime it does not. Please advise what else can be checked. Thanks Manoj Sh.
April 14th, 2010 9:18pm

Hi, May be an AD replication issue. How many DCs/GCs do u have in your network, and how dispersed are they geographically? Also if you add yourself to "USERMB1 ACCESS" and immediately want to send as USRMB1 then you wont succeed bcoz permission application takes some time, normally upto 2 hrs, or immediately if u restart info store service on the mailbox server, where USRMB1 exists. Hope this help. Regards,Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com
Free Windows Admin Tool Kit Click here and download it now
April 14th, 2010 9:55pm

Sorry for the delay. I believe it is not an replication issue as when the issue occurs, we remove the send as permission and again grant the send as permission to the group from EMC and it work for the me for some time but after a couple of days or weeks the issue start again. It occurs intermittently. "Other user who are member of the group, are not facing this issue". It is only me who faces this issue every time. Is there any thing else that I can check to rectify this issue. Thanks
April 21st, 2010 7:20am

Please try to use get-adpermission -identity <group> |fl user,extendedrights to check the permission and then post here. Regards, Xiu
Free Windows Admin Tool Kit Click here and download it now
April 21st, 2010 12:41pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics