Mange send as permission

Hi there
Mailbox123 My own
Mailbox2 my second mailbox
It works fine to send Emails, but when I send an Email from Mailbox2,
It goes to sendmails in mailbox123
It is supposed to go in sendmail in mailbox2
How do I fix this?

Hi Lenette,
Thank you for your question.
Did Mailbox123 and Mailbox2 belong to same organization?
Was Mailbox123 and Mailbox2 configured in outlook on the same client?
If that, we could rebuild the profile and restart the service of “Microsoft Exchange Information Store” on Exchange to check if the issue persist.
Which mailbox was granted “send as” permission?
Did the issue occur by OWA?
If there are any questions regarding this issue, please be free to let me know.
Best Regard,
Jim
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Jim Xu
TechNet Community Support

Similar Messages

Exchange 2007 - Send As Permission

Hello, I have Exchange Server 2007 installed on my Windows Server 2008 system and am using an ASP.NET web application to send an e-mail message when certain events occur. My problem is that I have everything set up and functioning properly, the e-mail message is sent with the designated e-mail address and I receive the e-mail message with no problems. In order to do this, I have a generic e-mail address that I created for my domain and granted that generic e-mail address "Send As" permission for a different domain e-mail address and use the generic e-mail address in my ASP.NET web application for security purposes.
My problem is the "Send As" permission seems to disappear very frequently. It seems that I need to go into the Exchange Management Console and grant this Send As permission every time my server is rebooted, or even after going into Exchange Management Console to "Look around" and see what I have set up. Does anybody know if there is a way to make the grant of Send As permission permanent so I don't have to constantly re-grant it? I have applied SP1 to Exchange Server 2007 and am always sure to apply the most recent patches, etc. as soon as they are released.
Thanks in advance!
Tim

Dear customer:
Thanks for Bala’s reply. He is right.
Active Directory uses a protection mechanism to make sure that ACLs are set correctly for members of sensitive groups. The mechanism runs one time an hour on the PDC operations master. The operations master compares the ACL on the user accounts that are members of protected groups against the ACL on the following object:
CN=adminSDHolder,CN=System,DC=<MyDomain>,DC=<Com>
Note "DC=<MyDomain>,DC=<Com>" represents the distinguished name (DN) of your domain.
If the ACL is different, the ACL on the user object is overwritten to reflect the security settings of the adminSDHolder object (and ACL inheritance is disabled). This process protects these accounts from being modified by unauthorized users if the accounts are moved to a container or organizational unit where a malicious user has been delegated administrative credentials to modify user accounts. Be aware that when a user is removed from the administrative group, the process is not reversed and must be manually changed.
The following list describes the protected groups in Windows Server 2003 and in Windows 2000 after you apply the 327825 hotfix or you install Windows 2000 Service Pack 4:
• Administrators
• Account Operators
• Server Operators
• Print Operators
• Backup Operators
• Domain Admins
• Schema Admins
• Enterprise Admins
• Cert Publishers
Additionally the following users are also considered protected:
• Administrator
• Krbtgt
So first, please check whether the user that you grant “sends as” permission for it belongs to the above group. If so, open ADSIEDIT.msc, Check"Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here" option on the adminSDHolder. And replicates all the DC, and grant “send as” permission for the user again via EMC, check whether the “send as” work fine.
For more information about adminSDHolder, please refer to “MORE INFORMATION” section in the following article:
Delegated permissions are not available and inheritance is automatically disabled
http://support.microsoft.com/kb/817433/en-us
Additionally, for more information about Exchange 2007 Permissions, please refer to the following documents:
Exchange 2007 Permissions: Frequently Asked Questions
http://technet.microsoft.com/en-us/library/bb310792.aspx
Hope it helps. If you have any question, please feel free to let me know.
Rock Wang - MSFT

Exchange 2010: Send As Permission for group mailbox...

Our helpdesk has a shared mailbox used for users to submit issues. Up until a week ago, all of the helpdesk techs could send-as the shared mailbox.
Now when they attempt to send as the shared mailbox via Outlook they get the error "You do not have the permission to send the message on behalf of the specified user.". When I attempt to manage send as permission via EMC (using an account
with Domain Admin privileges) I've found that the list of users who can send as is blank. When I attempt to add send as permissions via EMC I get the error below:
domain\username
Failed
Error:
Active Directory operation failed on DC1.xxxxxx.local. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521E1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.140).aspx?v=14.3.195.1&t=exchgf1&e=ms.exch.err.Ex6AE46B
Exchange Management Shell command attempted:
Add-ADPermission -Identity 'CN=account,DC=xxxxxx,DC=local'
-User 'domain\username' -ExtendedRights 'Send-as'
Elapsed Time: 00:00:00
Anyone have any advice to fix this issue?
Thanks in advance for your help.

I got this sorted. Here's the fix:
On the problem account: Open up active directory > Select the target user account > properties > Security Tab > advanced button. If
you cannot see the Security tab you have to go to view > advanced features
On the Permissions tab put a check mark in Allow inheritable permissions from
the parent and click ok

Send as permission - how to tell who really sent it

When you give a user permission to send as another mailbox, is there a way to tell who really sent a given message? Is there a header? Is a record stored somewhere on the server(s)?
[email protected]

Hi,
As Vasil L suggested, you can enable mailbox audit logging to get the detailed information that who send a message as one user.
If I grant administrator send as permission to amy01, then administrator send a message as amy01, here is the result when running Search-MailboxAuditLog:
What's more, here is an article for your reference:
Mailbox audit logging
https://technet.microsoft.com/en-us/library/ff459237%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396
Hope this can be helpful to you.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Send As Permission | Works For One Email

I'm trying to grant a few users Send As permission on a mailbox.
In the EMC: I have granted the users Manage Full Access Permission
In ADUC: I have Enabled Advanced Features, added the users to the account and Granted them Send As in the Security properties pages
On the Client side; the users can add the account to the From menu by searching the GAL. They are then able to Send As for one email and any other emails after bounce with the following message:
Delivery has failed to these recipients or groups:
You can't send a message on behalf of this user unless you have permission to do so. Please make sure you're sending on behalf of the correct
sender, or request the necessary permission. If the problem continues, please contact your helpdesk.
Diagnostic information for administrators:
Generating server:
/O=XXXXXXX/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=Xxxx Xxxxxxxxdb #MSEXCH:MSExchangeIS:/DC=local/DC=XXXXXXXXXX:MB01[578:0x000004DC:0x0000001D]
#EX#
If the user then Deletes the cached address in the From menu, then re-adds it, they can use the Send As for one email again.

Hi,
The Send As permission isn't granted until after replication has occurred. Replication times depend on your Exchange and network configuration. To grant the permission immediately, stop and then restart the Microsoft Exchange Information
Store service.
Since the send as permission can work well in OWA and Outlook online mode, it indicates that the permission has been configured properly in Exchange side. Please recreate a new Outlook profile to have a try. About how to create it, please
refer to:
http://support.microsoft.com/kb/829918b
About manage Send As permission in Exchange, please refer to:
http://technet.microsoft.com/en-us/library/bb676368(v=exchg.141).aspx
Best Regards,
Winnie Liang
TechNet Community Support

Send As permission not working - Exchange 2010

Trying to allow a user to send as from a distribution list on Exchange 2010. I ran the following command:
Add-ADPermission -identity "Algentis - HR" -user mwong -AccessRights ExtendedRight -ExtendedRights "Send as"
The users gets an access denied NDR error message in Outlook (both cached and non-cached mode) as well as OWA. Here is the exact NDR:
Delivery has failed to these recipients or groups:
[email protected]
You can't send a message on behalf of this user unless you have permission to do
so. Please make sure you're sending on behalf of the correct sender, or request
the necessary permission. If the problem continues, please contact your
helpdesk.
Please help!

Try to send mail through OWA, it may work. If it is, then it's Outlook issue.
Solution: Have user update the offline address book (click Send/Receive tab, click Send/Receive groups and select Download Address Book). Better yet,
1) Close Outlook
2) Delete the offline address book folder under “C:\Users\username\AppData\Local\Microsoft\Outlook\Offline Address Books” (I assume it’s Windows 7 computer, look under C:\documents and settings\username\…. for XP computers).
3) Open Outlook and let it download new OAB.
Other Possibilities are,
1) You just gave “Send-As” permission for the user. Then, you have to wait for few hours. (you may restart Information Store to take effect the permission right away, who wants to do it?
2) User’s Outlook got bad/outdated cached contact information. Search for *.NK* files under user’s profile and delete it. Obviously Close the Outlook first before you delete the *.NK* files.
Please check this from your end & if you face any issue or have any query please let me know.
Check the below mentioned link for your reference.
http://anandthearchitect.wordpress.com/2011/07/17/exchange-2010-you-cant-send-a-message-on-behalf-of-this-user-unless-you-have-permission-to-do-so/

'Send as' permission across forest not working

I want to grant 'send-as' permission to an user on a distribution group (security group) of different forest.
I tried granting this via Active Directory but whenever we try to send mail as this distribution group, Outlook complaints "You can't send a message on behalf of this user unless you have permission
to do so. Please make sure you're sending on behalf of the correct sender, or request the necessary permission. If the problem continues, please contact your helpdesk."

Hi,
Please make sure two forests are trusted each other. And both the user and the distribution group are not hidden from address list and have mailbox enabled. Please run the following command to check whether the user is assigned to send as permission:
Get-ADPermission DistributionGroup| where {($_.ExtendedRights -like “*Send-As*”)}
If all configuration are correct, please restart the Microsoft Exchange Information Store service in Exchange server and create a new profile in Outlook to have a try.
Thanks,
Winnie Liang
TechNet Community Support

Send As permission

Hi,
I created a generic user (senior manager) in active directory, and created an exchange mailbox for the user. Therefore the email address is---- [email protected]
The exchange server is exchange 2003.
I need to grant full mailbox and send as permission to this mailbox for a particular user. I go to Active Directory User and Computer, then right click senior manager and click properties.
I
I then click on exchange advance tab and then mailbox rights. I added the user that needs access to the mailbox and ticked allowed for full mailbox access. Then clicked ok.
Then clicked on the security tab and added the same user again and ticked allowed for Send as.
However when the user tries to send an email using the "from field" a message pops up saying "you do not have permission to send the message on behalf of the specified user".
What am I doing wrong? The user needs send as access not send on behalf of.
Assistance would be greatly appreciated.

Start Active Directory Users and Computers; click Start, point to
Programs, point to Administrative Tools, and then click
Active Directory Users and Computers.
2. On the View menu, make sure that
Advanced Features is selected.
3. Double-click the user that you want to grant send as rights for, and then click the
Security tab.
4. Click Add, click the user that you want to give send as rights to, and then check
send as under allow in the Permissions area.
4.5 Remove all other permissions granted by default so only the
send as permission is granted.
5. Click OK to close the dialog box.

Send As permission doesn't work

Hello,
I am facing a strange issue at a customer network.
The network infrastructure is: Windows AD 2003 level, Exchange Server 2007 SP3 Rollup 15, Outlook 2010 as mail client connected to Exchange Server. The customer has a few common departmental mailbox that employees use with send as permission. But for
one of that mailboxes people are receiving error saying that they don't are authorized to send on behalf of the user, still they have send as and full authorization on the mailbox.
How to troubleshoot this issue?
Nicola
Nicola Papapicco

Hi Nicola,
From your description, I would like to clarify the following things:
1. "Send as" and "send on behalf" are two different things.
2. To grant Send On Behalf permission, you need to add the user as a delegate for your mailbox in Outlook. Click File -> Info -> Account Settings -> Delegate Access -> click Add -> choose the mailbox from the Address Book. If you need the
user to have partial access to your mailbox, you can specify the access level on the next screen. If you only need to give Send On Behalf permissions to the user, choose None for each folder.
Hope this can be helpful to you.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Exchange 2013 send as permission not allowed

We have a Exchange 2013 server and Outlook 2010 clients. I have set full permission on other mailboxes with Powershell and in the ECP I set Send As permission for this user. But when I start Outlook 2010, go to the mailbox of one of the users and try to
send an email as this user, the Outlook gives the error that send as is not allowed. What could the problem be?

Hi,
Please log in the Exchange Admin Center in Exchange 2013 to check whether the permissions are configured properly:
1. Access ECP URL in IE to logon EAC as an administrator.
2. Click recipients > Mailbox.
3. Double-click the userA which is set full access permission and send as permission.
4. In the User Mailbox window, click mailbox delegation to check whether the userB is listed under Send As and Full Access permission.
If the permission is configured correctly, please try removing the permission and re-add it to check whether the issue persists.
Thanks,
Winnie Liang
TechNet Community Support

2010 Send As permission error

Hi - I'm getting the following error when trying to add send as permission in Exchange 2010 - can anyone advise why this error is occurring? It is advising of insufficient rights but I can't see how this mailbox is different from others that allow the permission
Thanks Jus
Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:00
DOMAIN\user
Failed
Error:
Active Directory operation failed on (server) This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.
Click here for help...
Exchange Management Shell command attempted:
Add-ADPermission -Identity 'CN=Recruitment Perth Festival,OU=Resource Accounts,OU=PIAF Users,DC=piaf,DC=network' -User 'PIAF\jblackwell' -ExtendedRights 'Send-as'
Elapsed Time: 00:00:00

Hi,
From the error description, the account you use don't have sufficient permission. I recommend you follow the steps below for troubleshooting:
Open ADUC -> double click the problematic user account -> click Security -> click Advanced, check if "Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined
here." is checked. If no, please check it. I see some people have the same issue, they check it and then the issue is resolved.
Also, you can use the following cmdlet to grant a user send as permission.
Add-ADPermission "xxx" -User "xxx.xxx\xxx" -Extendedrights "Send As"
Hope it helps.
If you need further assistance, please feel free to let me know.
Best regards,
Amy
Amy Wang
TechNet Community Support

Manage full access and send as permission in Exchange 2007

Hi,
I try to delegeate helpdesk the permission in ECM to manage Full Access and Send As permission.
I ran the PS command
Add-ADPermission -Identity "CN=Exchange Org,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local" -User "domain\ADGroupDelegation" -ExtendedRights ms-Exch-Store-Admin -InheritanceType
All
Now the helpdesk tech are can manage Full Access permission in EMC, but still not have access to manage Send As permission.
Thanks for your help !
MA
M.A.

Hi,
The issue maybe related to the Active Directory Replication Latency. The Send As permission is not granted until after replication has occurred. Replication times depend on your Microsoft Exchange and network configuration. To grant the permission immediately,
stop and then restart the Microsoft Exchange Information Store service. You can restart the Microsoft Exchange Information Store service to check the result.
Here is a relate article for your reference.
How to: Send As permissions and how long it takes for them to apply
http://blogs.technet.com/b/pakaloge/archive/2009/08/21/send-as-permissions-are-not-enforced-immediately.aspx
Best regards,
Belinda
Belinda Ma
TechNet Community Support

"Send As" permission fails with users in second domain on same server

I have several users setup on an Exchange 2010 SP3 server with domain "domain1.com". "Send As" and full Permission access works fine and flawless between those users who need it.
Now I have added a second authorative Domain (domain2.com) on that server and set up a few users. Those domain2 users can send/receive email in domain2.com without problems.
I wanted to give certain users in domain1 "Send As" and Full Access permissions on a domain2 user mailbox. Full Access works, but sending a message won't work. The error that comes back is the same as if "Send As" permissions was not
assigned to that user. But I explicitly assign this permission.
Is this a known issue and there is a fix for it? Or is this simply not possible?
Thanks
Dan

First, you should not use both Send As and
“Send on behalf of” pick one or other. Another thing, if you are using
Send As, find the user in
Active Directory Users and
Computers right click the user and select properties, Click
Security
Tab then presses the
Advance button.
In there you should see the User listed under there with Send As permissions. If you do not see this that’s the main reason why you cannot “Send As”. Send As is an AD
ACL not Exchange. If you have set this in the EMC and it has not replicated or updated the ACL’s in Active Directory then you might have a delay/latency or a replication issue with Active Directory.
Hi Swetha,
Thanks for your reply.
I am only using "Send As" and not "Send on behalf".
The Send-as permissions are visible in the AD for that user.
Dan

Make process manger send additional http header when querying WSDL ?

Hello,
is there a possibility to send an additional, custom http header when
process manager reads WSDL from a webserver.
Backgrund info: all our WSDLs are hosted on a special webserver which
needs this field. Changing to another kind of repository is not an option.
It would be nice if we could add some parameter to the appserver or domain
configuration to add this field as a default for each request.
Note that we don´t need the http field if we call partnerLinks. It´s only required for
WSDL-query (= the URLs given in bpel.xml / </partnerLinkBinding> )
Thanks in advance
Bernd

Hi,
It is a memory or buffer related problem. Contact your BASIS.
Looks like there is a shortage of space. Analyse the dump in ST22 and look for its proposals.
OSS note 965351 might be applicable (if you are on 640/ unix).
regards,
NR

You can't send a message on behalf of this user unless you have permission to do so

Hi,
We are on Exchange 2010 SP2 with multiple domain name. All works ok. We need to be able to use other domains while sending email. For example, i have a default reply address set for [email protected] along with other addresses i.e [email protected] etc on
policy. I am receiving emails and can reply only using [email protected] I get the following error if i try to send email from [email protected]
[email protected]
You can't send a message on behalf of this user unless you have permission to do so. Please make sure you're sending on behalf of the correct sender, or request the necessary permission. If the
problem continues, please contact your helpdesk.
Users should have the ability to choose an address as they need rather that fixing to a single 'set as reply address'. I am sure it is possible. Can some provide some help/direction?
Thanks in advance.

Hi Byron,
Looked like a workable solution but could not get it to work. I am getting NDR with permission issue. I have created the distribution group with email address. Added the user in it. Given the user Full access and SEND AS permission.
Hi, I'm not sure what issue you are running into, but you can definitely give a user Send As permission for a group and then send as the group. I just verified in my test environment.
To assign the Send As permission, the easy way it in AD User and Computers.
Enable Advanced Features from the View menu first. This allows you to see the
Security tab.
In ADUC, find the group and open the Properties.
On the Security tab, Add the user.
With the user selected in the list, Allow the Send as
permission.
There may be a bit of lag time before that begins to work as Exchange may have cached some AD permissions, but it definitely works.
Byron Wright (http://byronwright.blogspot.com)

Mange send as permission

Similar Messages

Maybe you are looking for