Send As Permissions for Second Mailbox

We have a second mailbox set up which is our "Support" mailbox.
The problem is when we reply to an email in this mailbox it automatically populates the 'From' field with the 'Support' address and we have to manually change it to our own address.
I've tried setting deny Send As permissions on the support mailbox but for some reason we're still able to send? I thought an explicit deny overrules any other permissions set?
I don't want any of my users to be able to Send As, or Send on Behalf of the support mailbox.
We're operating off an Exchange 2007 server with a 2008 DC.
Anyone have any ideas?
Thank you,

First, of all if you dont want them to, remove those permission which seems like you have done.
Create a new OLK profile or repair and test again
Test with an online profile.
Download the OAB if being used via OLK.
Sukh

Similar Messages

Exchange 2010: Send As Permission for group mailbox...

Our helpdesk has a shared mailbox used for users to submit issues. Up until a week ago, all of the helpdesk techs could send-as the shared mailbox.
Now when they attempt to send as the shared mailbox via Outlook they get the error "You do not have the permission to send the message on behalf of the specified user.". When I attempt to manage send as permission via EMC (using an account
with Domain Admin privileges) I've found that the list of users who can send as is blank. When I attempt to add send as permissions via EMC I get the error below:
domain\username
Failed
Error:
Active Directory operation failed on DC1.xxxxxx.local. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-031521E1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.140).aspx?v=14.3.195.1&t=exchgf1&e=ms.exch.err.Ex6AE46B
Exchange Management Shell command attempted:
Add-ADPermission -Identity 'CN=account,DC=xxxxxx,DC=local'
-User 'domain\username' -ExtendedRights 'Send-as'
Elapsed Time: 00:00:00
Anyone have any advice to fix this issue?
Thanks in advance for your help.

I got this sorted. Here's the fix:
On the problem account: Open up active directory > Select the target user account > properties > Security Tab > advanced button. If
you cannot see the Security tab you have to go to view > advanced features
On the Permissions tab put a check mark in Allow inheritable permissions from
the parent and click ok

User permissions for shared mailbox

In a big organization, we've multiple shared mailboxes. Each mailbox is being looked at by different employees. We want to provide folder level restrictions to the employees and have primarily 3 type of access at a folder and root level:
1) Owner access (Read, Create, Respond and Delete)
2) Employee access (Read, Create and Respond)
3) Read and View-only access
Idea is to have a controlled access environment in the company where we don't want any employee to delete any e-mails and they're held accountable for their work.
Million dollar question is - How do we achieve this in an Exchange Service 2010 Enterprise SP3 environment? Is it recommended to have such access levels? Can we've profile groups created to add users in future too with similar access restrictions?
Please provide step by step.
If this is not possible or advised, please suggest a better alternative with which we can track who deletes the e-mails and then change their behavior. May be some e-mail logs that help us determine this information? What is your suggestion?

Hi,
You can try Exfolders tool:
http://gallery.technet.microsoft.com/office/Exchange-2010-SP1-ExFolders-e6bfd405
How to use Exfolders:
http://mouzzamh.wordpress.com/2012/04/01/how-to-use-exfolder-tool-for-exchange-2010/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Thanks,
Simon Wu
TechNet Community Support

Permissions for second HDD

How can i set permissions so that an other User cannot see entrys (Files) on an second HDD

You as owner with R&W, everyone with no access.

Correct syntax to set "send as" permissions through Powershell

Hello,
A colleague of mine gave me a Powershell command to set "send as" permissions on a mailbox. His syntax is the following:
Add-ADPermission -Identity UserBeingGrantedPermission -User UserWhoseMailboxIsBeingConfigured -ExtendedRights 'Send-As'
In that example the user mentioned after "-User" is the one who's mailbox is being configured. Easy enough. Earlier Technet articles also use this syntax.
However, I stumbled across the
following article. Which clearly says:
This example grants Send As permissions for Aaron Painter to Terry Adams's mailbox.
Add-ADPermission -Identity "Terry Adams" -User AaronPainter -AccessRights ExtendedRight -ExtendedRights "Send As"
In this example "-User" is not the one mailbox that is being configured but the person that gets the rights.
So who is right? Technet or Technet?

Hi Fr0ns,
Your colleague mistook it a little bit, (and I don't think he can compete with the Technet library :)
-User <is always someone who is given permissions to>. In the Technet example - AaronPainter gets the permission to
Send As Terry Adams.
You can check it yourself pretty easily - enable command logging and attempt to assign the permissions with GUI where you clearly know who gets what.
▲ Vote if Helpful / Mark if Answer
MCSE: Messaging 2013 Charter / Private Cloud / Server Infrastructure
MaximumExchange.ru

Set Send to permissions on distribution groups through powershell

We have an Exchange 2013 environment on which we have created distribution groups with powershell.
However I can't figure out how we can configure the "send to" permissions for these distribution groups.
What we want is for Exchange to look at CustomAttribute3 in a user account, and if that attribute meets the set requirements the user will have permission to send mail to this distribution group.
Can anyone help me with this issue? Is there a powershell command I can use to configure this?
kind regards,
kevin

Hi kevin,
You can use the following cmdlet to configure the distribution group to accept messages only from the specific users.
Set-DistributionGroup -Identity "DGName" -AcceptMessagesOnlyFrom "xxx","xxx"
What's more, I am afraid that the -AcceptMessagesOnlyFrom parameter does not accept the custom attribute. Your understanding will be appreciated.
For your reference:
https://technet.microsoft.com/en-us/library/bb124955(v=exchg.150).aspx
Hope this can be helpful to you.
Best regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Amy Wang
TechNet Community Support

Unable to manage SendAs permissions on shared mailbox

This morning when we came in all of the sendas permissions for our helpdesk mailbox were missing. When I try to add them with the Exchange console I get a message that says the user does not have sufficient permissions.
We are Exchange 2010 running on 2008R2, Active Directory is 2008 native.
I added the sendas permission for the users from Powershell and they now show up in the console but they still cannot sendas the user. I read another post that says we need to wait for replication and I will wait.
My question is what is causing the permissions error? We also get it when we try to remove an error.

Hi,
From your description, I recommend you follow the steps below to ensure that this send as permission is granted successfully.
Open ADUC -> View -> Advanced Features -> right click user1 -> Properties -> Security -> make sure user2 is listed in the "Group or user names" and allow "Send as" permission.
If no, please add user2 to it and select "Send as" Allow to check the result.
Note: Please change user1 and user2 to the users you need.
Hope this can be helpful.
Best regards,
Amy Wang
TechNet Community Support

Remote Desktop Service Manager - configure permissions for Remote Desktop Users to Send Message, Disconnect, Logoff

Hello, dear colleagues.
We are using Windows Server 2012 R2 as Remote Desktop Server. Also use Windows Server 2008 R2 with Remote Desktop Service Manager to control RDS user sessions (Send Message, Disconnect, Logoff, Query Info).
Send Message, Disconnect, Logoff options works only for users in Administrators group.
I can't to configure permissions for Remote Desktop Users, specific user or AD group.
To set permissions I'm running RDS Host Configuration on Windows Server 2008 R2 and connect to Windows Server 2012 R2. Then double-click
RDP-Tcp, Security tab, add specific user account , AD group or configure
advanced permissions
for Remote Desktop Users.
But, as I sad above, these options works only for users in Administrators group. How to make it work for Remote Desktop Users or specific user, AD group?
Thanks.
P.S. If move specific user from Remote Desktop Users group to Administrators group on
Windows Server 2012 R2 - it works.

Hi,
You can prevent administrators from changing the permissions for a connection by applying the
Do not allow local administrators to customize permissions Group Policy setting.
This Group Policy setting is located in Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Apart there is one command with which you can set the permission for that check the related
article. Additionally checkthis
thread for more detail.
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

For about 3 month I receive on my iPhone 3GS iOS6 and my iPad iOS5 empty messages without sender and subject in the mailbox BAL but not in the direct mailbox addresses. I cannot get rid of this messages. Can someone help me. Thanks

For about 3 month I receive on my iPhone 3GS iOS6 and my iPad iOS5 empty messages without sender and subject in the mailbox BAL but not in the direct mailbox addresses. I cannot get rid of this messages. Can someone help me. Thanks !

Disable Yahoo Messenger (with the arrow on the right of your account name) in Yahoo mail.

Speeding up the Get-MailboxStatistics cmdlet for ~19K mailboxes.

Greetings,
While this is partially a PowerShell scripting question, I am posting it in the Exchange 2010 forum because the issues I believe center around the Get-MailboxStatistics itself, and the speed of my scripts in Exchange 2010 (possibly
due to the additional overhead in remote PowerShelling).
In my Exchange 2010 system we have ~19,000 mailboxes spread accross multiple DAG nodes, and ever since we upgraded from Exchange 2007 to Exchange 2010, gathering all of the mailboxes and then gathering their statistics takes almost
twice as long. For example a script that used to take ~45 minutes in Exchange 2007, takes about an hour and a ½.
The issue I am running into when clocking core aspects of a mailbox data gathering scripts is that the Get-MailboxStatistics seems to be taking an excessively long period of time, and I am hoping someone can help me figure out a
way to speed up the process.
For example this is a boiled down script I created, where I ripped out a ton of other things and just focused on the Get-Mailbox and Get-MailboxStatistics commands:
$BaseOU
=
"Customers"
# Capture the date and time in a variable using the "Fri 11/01/2010 6:00 AM" format.
$DateTime
=
Get-Date
-Format
"ddd MM/dd/yyyy h:mm tt"
# Select a single domain controller to use for all the queries (to avoid mid AD replication inconsistencies)
from the environment variable LOGONSERVER - this ensures the variable will always be dynamically updated.
$DomainController
= ($Env:LogonServer).Substring(2)
# Set the loop count to 0 so it can be used to track the percentage of completion.
$LoopCount
= 0
# Start tracking the time this script takes to run.
$StopWatch1
=
New-Object
System.Diagnostics.Stopwatch
$StopWatch1.Start()
# Get the mailbox info for all IHS customer mailboxes.the storage limit is Prohibit send or mailbox disabled
Write-Host
-ForegroundColor
Green
"Beginning mailbox gathering. In a short while a progress bar will appear."
$GatheredMailboxes
=
Get-Mailbox
-ResultSize:Unlimited
-OrganizationalUnit
"ADDomain.com/$BaseOU"
-DomainController
$DomainController |
Select Identity,DisplayName,ProhibitSendQuota
Write-Host
-ForegroundColor
Green
"Mailbox data gathering is complete."
$StopWatch1.Stop()
$StopWatch2
=
New-Object
System.Diagnostics.Stopwatch
$StopWatch2.Start()
Foreach ($Mailbox
in
$GatheredMailboxes) {
# Show a status bar for progress while the mailbox data is collected.
$PercentComplete
= [Math]::Round(($LoopCount++
$GatheredMailboxes.Count
* 100),1)
$CurrentMBDisplay
=
$Mailbox.DisplayName
Write-Progress
-Activity
"Mailbox Data Gathering in Progress"
-PercentComplete
$PercentComplete
`
-Status
"$PercentComplete% Complete"
-CurrentOperation
"Current Mailbox: $CurrentMBDisplay"
#Get the mailbox statistics for each mailbox gathered above.
$MailboxStats
=
Get-MailboxStatistics
$Mailbox.Identity |
Select StorageLimitStatus,TotalItemSize
# Proceed only if the the mailbox statistics show the storage limit is Prohibit Send or Mailbox Disabled.
# Write-Host "Stats for"$Mailbox.DisplayName"are Limit ="$MailboxStats.StorageLimitStatus"and Size ="$MailboxStats.TotalItemSize.Value.ToMB()"MB."
# Calculate the amount of time the script took to run and write the information to the screen.
$StopWatch2.Stop()
$ElapsedTime
=
$StopWatch1.Elapsed
Write-Host
"he mailbox gathering took"
$ElapsedTime.Hours
"hours,"
$ElapsedTime.Minutes
"minutes, and"
$ElapsedTime.Seconds
`
"seconds to run."
$ElapsedTime
=
$StopWatch2.Elapsed
Write-Host
"The foreach loop took"
$ElapsedTime.Hours
"hours,"
$ElapsedTime.Minutes
"minutes, and"
$ElapsedTime.Seconds
`
"seconds to run."
Using the two stop clocks, I was able to see that the Get-Mailbox of all mailboxes took ~9 minutes. That isn’t lightning fast, but it isn’t unreasonable.
The issue comes in where the Foreach loop with the Get-MailboxStatistics took ~53 minutes, and I am sure some of the mailbox data was cached on the servers from my various tests so it would probably take even longer with a cold
run.
I did some digging around and I really couldn’t find anything on how to speed up the Get-MailboxStatistics, and the only thing I found was this link:
http://social.technet.microsoft.com/Forums/en-US/winserverpowershell/thread/9ceefddd-7a59-44ec-8fc0-8de244acb58b
However I am not clear on how moving the Get-MailboxStatistics into the Get-Mailbox syntax (which is odd to me in general) would speed things up if I still have to have a foreach loop to process the data a little bit and add the
users to a datatable. That discussion also made think the foreach loop itself is slowing things down but unclear as to how/why if that is true.
Can someone help share some ideas on how to speed up this process? I think there are some other things I could try but I can’t think of them.
Thank you in advance.

I think it's impossible to speed up the Get-MailboxStatistics when it is being called for each and every mailbox individually.
I read somewhere in other posts people were having better performance by calling the cmdlet against an entire database or server so I gave it a shot with this code:
$DAGS = "EXCHDAG1"
# Start tracking the time this script takes to run.
$StopWatch = New-Object System.Diagnostics.Stopwatch
$StopWatch.Start()
$MailboxStatistics = New-Object System.Data.DataTable “MailboxStatistics”
$MailboxStatistics.Columns.Add("TotalitemSize",[String]) | Out-Null
$MailboxStatistics.Columns.Add("ItemCount",[String]) | Out-Null
$MailboxStatistics.Columns.Add("LastLogonTime",[String]) | Out-Null
$MailboxStatistics.Columns.Add("LastLogoffTime",[String]) | Out-Null
$MailboxStatistics.Columns.Add("MailboxGUID",[String]) | Out-Null
$MailboxStatistics.PrimaryKey = $MailboxStatistics.Columns["MailboxGUID"]
ForEach ($DAGServer in (Get-DatabaseAvailabilityGroup $DAGS).Servers) {
ForEach ($MailboxStats in (Get-MailboxStatistics -Server $DAGServer.Name | Where {$_.DisconnectDate -eq $Null})) {
$NewMBXStatsDTRow = $MailboxStatistics.NewRow()
$NewMBXStatsDTRow.TotalitemSize = $MailboxStats.TotalItemSize
$NewMBXStatsDTRow.ItemCount = $MailboxStats.ItemCount
$NewMBXStatsDTRow.LastLogonTime = $MailboxStats.LastLogonTime
$NewMBXStatsDTRow.LastLogoffTime = $MailboxStats.LastLogoffTime
$NewMBXStatsDTRow.MailboxGUID = $MailboxStats.MailboxGuid.ToString()
$MailboxStatistics.Rows.Add($NewMBXStatsDTRow)
$StopWatch.Stop()
$ElapsedTime = $StopWatch.Elapsed
Write-Host "The script took" $ElapsedTime.Hours "hours," $ElapsedTime.Minutes "minutes, and" $ElapsedTime.Seconds `
"seconds to run."
Here are the results in speed:
The script took 0 hours, 3 minutes, and 13 seconds to run.
So yeah... ~3 minutes versus ~1 hour, I would say that's an improvement.
Now I will go back to my script and as I process each mailbox I will pull it's statistics information out of the DataTable using its GUID with:
If ($MailboxStats = $MailboxStatistics.Rows.Find($Mailbox.MailboxGUID)) {
# Insert mailbox statistics processing here using the $MailboxStats variable with "." extensions.
} Else {
# Mailbox statistics weren't found so go grab them individually as a backup mechanism for scenarios when a user's mailbox got moved out of the DAG to a non-DAG database for whatever reason.
It's a little silly that I have to extract the information out of each DAG server and put it in an in-memory table just to speed this process up, but clearly there is overhead with the Get-MailboxStatistics cmdlet and grabbing more mailboxes at once helps
negate this issue.
I'm going to mark my own response as an answer because I don't think anyone else is going to come up with something better than what I put together.

BUG - Outlook 2010 'send as' permissions - Workaround within

issue : when a user attempts to 'send as' another mailbox, the email fails with Undeliverable message:
"You can't send a message on behalf of this user unless you have permission to do so. Please make sure you're sending on behalf of the correct sender, or request the necessary
permission. If the problem continues, please contact your helpdesk ".
This error only occurs once the email address has been cached (ie: 2nd attempt to 'send as' a user). Permissions are correct as 'send as' worked fine when using outlook 2007. upgrading
a client to outlook 2010 results in the above error.
scope : outlook 2010 clients with exchange 2007/2010 (appears to be client related, not exchange server). windows updates as of 22-dec-2010 have not resolved this.
workaround : Cached Exchange Mode is ENABLED. Disabling this and restarting outlook resolves this issue. (Outlook 2010 > File > Account settings > Account settings... > double click the default account on the 'EMAIL' tab > untick
'used cached exchange mode'.)
i hope this helps other people; i've been googling for a resolution to this issue since beta/RC. now i've got office 2010 RTM the issue was still present. no forums/blogs could
shed light on this issue.
Is this the correct way to report bugs, or is there another way? i've tried connect.microsoft.com, but theres no "accepting bugs" for the outlook/office suite.

Nothing particularly useful in that thread either:
by: busbarPosted on 2010-06-07 at 08:12:05ID: 32933664
1) looks like you have an issue with the DC plesae check it
2) restart the information store and system attendant to speed it.
3) send as is managed using send as permissions in the EMC
http://technet.microsoft.com/en-us/library/bb676368.aspx
by: totallytontoPosted on 2010-06-07 at 08:45:34ID: 32934043
dont amend the settings in active directory for exchange 2010 servers. use the exchange management console> recipient config>mailbox and use 'manage send as permission' in the right pane.
by: SatyaPathakPosted on 2010-06-07 at 11:55:55ID: 32935929
Its looks like permission issue.
Go through .
http://blog.nick.mackechnie.co.nz/post/2009/11/20/Exchange-2010-Active-Sync-Issue.aspx
http://social.technet.microsoft.com/Forums/en/exchange2010/thread/b28ea96a-8458-4ec8-87a8-66f64cbb7600
by: coderccPosted on 2010-06-07 at 19:00:23ID: 32938614
Or bypass it all with a 3rd party app: http;//www.servolutions.com/changesender.htm
by: ExchisaPosted on 2010-06-08 at 01:20:07ID: 32940097
SatyaPathak: :
I already tick the checkbox to inherit all the permissions from the parent , now for those who
are members of any protected group , this check box keep un-ticked again every 15 min ,
active directory keep synchronize these permissions with adminsdholder .
anyway my problem are still open , hope it solved .
wait something
by: totallytontoPosted on 2010-06-08 at 04:28:40ID: 32940992
Hi Exchisa,
Many, many apologies, as I mis-read your query and missed the vital bit of info (serves me right for reading it on my mobile...)
I'm afraid you are a bit stuck. Members of the protected groups are automatically reset to the approved permissions at regular intervals as a security measure.
I'm afraid you are not going to be able to use the 'send as' facility on any member of such a group.
Either move the user to another group or change the e-mail address to suit your needs.
EG:
Lets say you want to 'send as' administrator:-
a) change the administrator's email from {[email protected]}to {[email protected]} and disable automatic recipient policy updates for the user.
b) Create a distribution group for {[email protected]}and set administrator as a member so they receive messages as they would have before.
c) set the send as permissions on the distribution group {[email protected]}to allow users to send as, including the administrator user.
This is technically a workaround, not a solution.
by: ExchisaPosted on 2010-06-21 at 08:07:03ID: 33037008
Dear All .
I still stuck to have this feature working perfectly .
Now I don't want to use this feature to enable users to send as by each other , i only want the users on any given group to send by the name of this group , i did not configure any thing in the ADUC snap in , i only configure this feature from the EMC .
i recieve this error from outlook 2010 :
You can't send a message on behalf of this user unless you have permission to do so. Please make sure you're sending on behalf of the correct sender, or request the necessary permission. If the problem continues, please contact your helpdesk.
I surprised that this feature are working sometimes and sometimes not (this is the truth).
does this feature need a CAL like archiving ??
Wait a reply
by: totallytontoPosted on 2010-06-21 at 08:39:56ID: 33037354
No you do not need a CAL for this.
Is the mailbox that you are sending as still a member of a protected group in AD?
If yes, send as permissions will be reset at random intervals and cannot be changed as long as the user is a member of the protected group.
by: ExchisaPosted on 2010-06-22 at 01:43:00ID: 33043673
totallytonto:
No It's NOT .
Thanks
by: ExchisaPosted on 2010-07-25 at 15:37:57ID: 33285888
totallytonto : I leave configure this from the EMC , instead , i use the ACL for that group in AD , in order to enable SEND AS , just tick the send as permission

Email stuck in outbox if sending mail from a shared mailbox

Hi,
Some user mailboxes have recently been migrated from Exchange 2003 to Exchange 2010. Shared mailboxes are located on Exchange 2003 still for the time being.
Some users have send as permissions to a shared mailbox. In Outlook the users are logged in as themselves and using the from field send an email from the shared mailbox.
The email is sent and delivered to its recipient.
The email is however stuck in the outbox of the users mailbox.
I have tried recreating the Outlook profile, windows profile and using a different PC, but the mails still get stuck in the outbox.
If outlook is changed to use cached mode then the emails are delivered. We don't want customers using cached mode though.
If I migrate the shared mailbox to Exchange 2003 I still have the problem.
If I migrate the users mailbox to Exchange 2003 then the problem goes away.
On the Laptop I am testing this on it is Windows 7, Office 2003. I have also tested on another computer with Windows 7 and Outlook 2007. Outlook safe mode doesn;t help or turning off windows firewall.
Has anyone experienced a similar issue?
Regards
Matt

Hi,
Based on your description, I found this kb below:
http://support.microsoft.com/kb/2703723/en-us
This problem occurs when all the following conditions are true:
Your Outlook profile is configured in online mode (not cached Exchange mode).
You have the DelegateSentItemsStyle registry value set to 1.
There is no resolution to this problem other than to either switch your profile to cached Exchange mode or set the DelegateSentItemsStyle registry value to zero (0).
Note If you set DelegateSentItemsStyle=0 in the registry, email messages that you send from a shared mailbox will be copied to
your Sent Items folder and not the Sent Items folder of the shared mailbox.
Important
This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the
registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry,
http://windows.microsoft.com/en-US/windows7/Back-up-the-registry
1.Exit Outlook.
2.Start Registry Editor.
Click Start, type regedit in the Start Search
box, and then press Enter. If you are prompted for an administrator password or for confirmation, type the password, or click
Allow.
3.Locate and then select the following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Office\x.0\Outlook\Preferences
（Note In this key path, the placeholder x.0represents 15.0 for Outlook 2013, 14.0 for Outlook 2010, 12.0 for Outlook 2007, and
11.0 for Outlook 2003.）
4.Select the DelegateSentItemsStyle value.
5.On the Edit menu, click Modify.
6.Type 0, and then click OK.
7.Exit Registry Editor.
8.Start Outlook.
Regards,
Melon Chen
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

Send As from a shared mailbox stopped working

I have created a Shared Mailbox a few months ago and gave one use full access rights and send as permissions. This worked perfectly since it was created. On Friday, the user started getting:
Delivery has failed to these recipients or groups:
You can't send a message on behalf of this user unless you have permission to do so. Please make sure you're sending on behalf of the correct sender, or request the necessary permission.
If the problem continues, please contact your helpdesk.
There have been no changes made to any of the rights or permissions anywhere. The shared mailbox properties still show this user in the full access and send as list. The shared accounts address is available in the GAL so that is not an issue.
Any ideas would be appreciated. I could probably recreate this mailbox, but would rather fix the issue or at least know what happened in case it does it again.
Nick Laurino

Hi,
Have you tried removing and then re-adding the permission for the user? Worth a try when such issue occurs.
As the administrator, you may want to verify that the user actually does have "Send-As" permission on the shared mailbox. To do that,
Open the Exchange Management Console on the Server
Navigate to Recipient Configuration > Mailbox and right click the Shared Malibox
Select "Manage Send As Permission"
Check that the user is listed in the permissions
To solve the issue on the client side, delete the offline address book and allow Outlook to recreate it.
Close Outlook
Delete the Offline Address Book folder
It can be found under "C:\users\{username}\AppData\Local\Microsoft\Outlook\Offline Address Books"
Open Outlook and it will download a fresh copy of the Offline Address Book
I hope this can be helpful.
Thanks,
Melon Chen
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

Send-As Permissions Randomly Failing.

Exchange 2010 SP3 RU5
I have a group mailbox may users have Send-As permissions to. Sending messages as the mailbox is failing randomly for many of the users. For example, UserA sends 3 messages within 10min, one of the 3 messages bounces with the NDR shown below. UserA can send
more 10 messages the reset of the day without any issues. Then a few days later one of the messages he sends that day will bounce with the same type of NDR.
On average there are 100+ messages sent from this mailbox each day, and probably 2 will fail.
Any ideas on how to troubleshoot this would be appreciated.
Delivery has failed to these recipients or groups:
'[email protected]' <mailto:[email protected]>
You can't send a message on behalf of this user unless you have permission to do so. Please make sure you're sending on behalf of the correct sender, or request the necessary
permission. If the problem continues, please contact your helpdesk.
Diagnostic information for administrators:
Generating server:
[email protected]
#MSEXCH:MSExchangeIS:/DC=com/DC=Domain/DC=DSRoot:MBX01[578:0x000004DC:0x0000001D] #SMTP

Hi,
According to your description, I understand that the issue occurs randomly. Please double confirm the send as permission has been given for the users who have problems for sending from this mailbox.
How many users have been given send as permission? Please send a test email again from this mailbox to check whether the issue can be reproduced for the problematic user. If the issue doesn’t occur when resending a message from this mailbox
for the problematic user, please remove the send as permission for this user then add it back and
restart the Microsoft Exchange Information Store service to have a try.
Regards,
Winnie Liang
TechNet Community Support

Send As Permissions - Exchange 2010 - Outlook 2013

I am currently having an issue with an account. 2 people share an Admin Account inbox, while having their own inbox, Although the Admin mailbox only works in Online
mode or the folders will not update and emails will not come through.
This is not the problem though.
Before today both people were working fine for the last few months. Now User 1 (only user to send as Admin mailbox) can not send as the mailbox, while
in online mode. In cached mode it works fine, however the folders do not work.
When in online mode, i can remove the address from the From: drop down and re-add, however this only works for that email. Sending another email reaches
the same error "you do not have the permission to send as blah blah blah". This is a popup error.
Removing the address and re-adding works every time, however as you can imagine, this is not ideal for the user. In testing I have removed permissions
for send as in EMC but removing the address from the from field and re-adding is still allowing it to send. It seems outlook/exchange is not recognizing the permissions. Does anyone have any ideas on what could be causing this?
Exchange version is 2011
Outlook version is 2013

In testing I have removed permissions for send as in EMC but removing the address from the from field and re-adding is still allowing it to send. It seems outlook/exchange is not recognizing the
permissions. Does anyone have any ideas on what could be causing this?
Hi,
After removing the permissions in EMC, I suspect it still takes some time to take effect. We can verify this by sending as the Admin mailbox on OWA to check the result. Then wait for some time, send the test email in Outlook again.
This issue is actually opposite to these issues I've seen before: Most other issues are that the user is not able to send as another user in Cached mode, but able to send in Online Mode. Your description kind of implies there's something interfering
with the connection between Outlook and Exchange when Outlook is in Online Mode, please disable all suspicious add-ins in Outlook, especially the anti-spam add-ins provided by the anti-virus program. Then disable the anti-virus program and the firewall temporarily
to check the result.
As mentioned in your post, this issue is also related to the Auto-Complete List in Outlook, the list may have been corrupted. We can try clearing the list to check if the problem persists:
In Outlook 2013, click FILE -> Options -> Mail -> Send messages -> Click "Empty Auto-Complete List" button -> Yes -> OK.
Regards,
Melon Chen
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs. Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Send As Permissions for Second Mailbox

Similar Messages

Maybe you are looking for