Send As, Send on Behalf and Full Access for Exchange server 2010/2013

[This FAQ contains 2 parts]
Testing and watching the behavior of Send As, Send On Behalf and Full Access permission.
Common issue and Troubleshooting on the three permission.
[Testing and Watching]
Based on following blog, I decide to test on my lab:
Full Mailbox Access Rights + Send On Behalf = Send As ?
http://blogs.technet.com/b/ehlro/archive/2012/04/06/full-mailbox-access-rights-send-on-behalf-send-as.aspx
Description on my lab and test:
Exchange 2010 + Outlook 2010
Exchange 2013 + Outlook 2013
Senders: A01, A02, … , A07, A08
Recipient: A09
A01 grand permission to other senders.
Two methods:
a. Use A0x’s credential configure A01’s profile, then send From both A01 and A0x via Outlook. Watching result in A09’s Inbox and Sent Items which has message copy left.
b. Use A0x’s credential configure A0x’s profile, then send From both A01 and A0x via Outlook. Watching result in A09’s Inbox and Sent Items which has message copy left.
Result as following forms:
1. Exchange 2010 + Outlook 2010 / Exchange 2013 + Outlook 2013
Using A0x’s credential configure A01’s mailbox, then send From both A01 and A0x
To A09.
2. Exchange 2010 + Outlook 2010 / Exchange 2013 + Outlook 2013
Using A0x’s credential configure A0x’s mailbox, then send From both A01 and A0x
To A09.
[Common Issue]
1. [Issue]
Exchange 2010 + Outlook 2010. A01 grand A03 Send As permission. However A03 can’t send as A01 to A09 and get NDR:
You can’t send a message on behalf of this user unless you have permission to do so. Please make sure you’re sending on behalf of the correct sender, or request the necessary permission. If the problem continues, please contact your helpdesk.
Details as following pic:
[Troubleshooting]
1) Based on the NDR, it seems a permission issue. Check Send As permission, however the Send As permission configured correctly. Pic as below:
2) ince the Send As permission configured correctly, it seems the permission hasn’t been replicated. Try to restart Microsoft Exchange Information Store service. It works.
Note: The Send As permission isn’t granted until after replication has occurred. Replication times depend on your Exchange and network configuration. To grant the permission immediately, stop and then restart the Microsoft Exchange Information
Store service.
2. [Issue]
Exchange 2013 + Outlook 2013. A01 grand A03 Send As permission. However A03 can’t send as A01 to A09 and get NDR:
Your message did not reach some or all of the intended recipients.
Subject: xxx
Sent: xx/xx/2014 8:20 AM
The following recipient(s) cannot be reached: A09
This message could not be sent. Try sending the message again later, or contact your network administrator. Error is [0x80070005-00000000-00000000].
Details as below:
[Troubleshooting]
1) Also check the Send As permission configuration first.
2) Then try to use A03 send as A01 to A09 via OWA. If OWA works well, it seems and issue on the Outlook client side.
3) This behavior may occur if the OAB in Outlook isn’t updated. Try to download OAB manually.
4) If doesn’t work, please close Outlook and try to delete all the OAB folder on your computer. The path of OAB folder in Win7, Win8 as below:
\Users\<UserName>\AppData\Local\Microsoft\Outlook\Offline Address Books
5) Restart Outlook.
Note: Be aware that you cannot send e-mail messages on behalf of a mailbox if the mailbox is hidden from address list. When sending a message, Exchange requires that e-mail address is resolved in the
From field.
3. [Issue]
Exchange 2010. A01 grant A0x “Send As” or “Send on Behalf” permission. A0x send as/ send on behalf of A01. The message is only copied to the Sent Items folder in A0x’s mailbox (same as the result of my test). Also cannot configure Exchange 2010 so that the
message is copied to the Sent Items folder of both A01 and A0x.
[Troubleshooting]
This issue occurs because Exchange server 2010 was designed to copy message to the Sent Items folder of the sender only. This issue can be solved by installing Exchange 2010 SP2 UR4. More details in the following KB:
Messages that are sent by using the "Send As" and "Send on behalf" permissions are copied only to the Sent Items folder of the sender in an Exchange Server 2010 environment
http://support.microsoft.com/kb/2632409/en-us
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Nice guide Mavis, I recently explored the same topic. Few things you might want to add is the type of connectivity (Cached vs Online will produce different results) and to expand further on the methods of adding the other mailbox in Outlook (additional mailbox
vs additional account defaults to different methods). Check the screenshot:
And please post this somewhere more visible, like blog/wiki page.

Similar Messages

Allocating and delegating permissions in Exchange Server 2010 between two AD security group.

People,
Can anyone please assist me in where and how to assign the following two AD security group in Exchange Server 2010?
IT Admin group (Full access and permission for all AD and Exchange related).
IT Helpdesk group (can only create mailbox and modify the mailbox properties including AD distribution group and contacts).
Because in Exchange Server 2007, everything can be managed easily through the AD security group that is created during the installation such as
Exchange Organization Administrators group for full access for IT Admin team and Exchange Recipient Administrators group for managing the mailbox user for Help Desk team.
/* Server Support Specialist */

Hi,
Based on my knowledge, Exchange 2010 has an Organization Management group instead of the Exchange Organization Administrators group. Use the Recipient Management group instead of the Exchange Recipient Administrators group. In your case, you can add the
IT Admin group to the Organization Management group, add the IT Helpdesk group to the Recipient Management group.
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support
Thanks, Amy,
But for some reason I cannot see those built in AD security group in my ADUC?
So should I recreate it manually by right clicking on the AD user and Console ?
/* Server Support Specialist */

I need send and receive emails for edge server 2010

i have exchnage 2010 in our orgnization now working fine , i can send and receive emails for hub and also we have tmg and fortigate firewall(200B) , already install and configuration edge server(configure edge subscribtion file and edge sync) but still message
sent form hub and also receive form hub , what to do to receive from edge ? please help me i have 3 month search to fix his problem.

Hello,
I recommend you use the Test-EdgeSynchronization cmdlet to check if the subscribed Edge Transport servers have a current and accurate synchronization status. If you have configured EdgeSynchronization successfully, please delete send connector
on Hub transport server.
Please uncheck "anonymous users" on receive connector for Hub server.
Please follow the ExchangeITPro's suggestion to check DNS MX record.
Cara Chen
TechNet Community Support

HA and Load Balancing in Exchange Server 2010

Hi
My office just have 2 servers Exchange Standard 2010 (Licensed). I installed 3 roles on 2 servers (called Ex1 & Ex2). I configured Windows NLB for Hub Transport and Client Access. That 's fine.
But the maibox is seperated each server. Ex1 is main mailbox, so when Ex1 down, mailbox database will down too.
I 've read DAG solution but I just have 2 servers and it 's running WNLB. My office not enough cost to buy Hardware Load Balancer.
Does anyone have a solution for my problem ?
Thank you

Hi,
If you want to use DNS round robin, it is recommended to lower the TTL values of DNS records to 5 minutes.
DNS Round Robin has no automatic server failure detection. If a host goes down, Administrator will need to realize it, remove the DNS Record for the server that went down, and then clients will have to wait for the TTL value on the old DNS record to
expire.
Here is an article about DNS round robin for your reference.
http://www.shudnow.net/2010/03/17/exchange-2010-rtm-high-availability-load-balancing-options/
Best regards,
Belinda Ma
TechNet Community Support

Redundant Hub and CAS roles for exchange server

Hello ,
currently we have 2 mailbox servers , 1 DAG server and 1 HUB,CAS server ( hub and cas roles in same server )
i am looking to have a backup server incase the hub CAS server goes down .. or to have a redundant server for HUBCAS incase if it goes down the other one will go up and the users will use the second one automatically
how can i achieve that ?
appreciated your help

Hello,
If you use exchange 2010 server, I recommend you deploy multiple CAS servers as member of CAS array.
As your requirement, you need to deploy CAS NLB, the failover will occurs automatically.
Here is an article for your reference.
http://technet.microsoft.com/en-us/library/ff625247(v=exchg.141).aspx
Cara Chen
TechNet Community Support

Outlook 2010 and OWA (Hosted on Exchange Server 2010 Standard) only show 1 weeks worth of email

Checked to see if any Filters were applied, reset to default, same result.
Checked to see if there were any rules, there were none.
Checked to see if there were any "Quick Steps", there were none.
Rebuilt the user profile in Outlook, same results.
OWA shows the same thing so I am thinking it might be a setting/problem with Exchange. Outlook and OWA are in perfect sync, they just don't show email older than a week.

Hi,
Based on the description, you could only see those messages whose age was less than one week in Outlook and OWA.
First, I recommend you check if there is any retention policy applied to this user mailbox.
Besides, please use the get-mailboxstatistics command to get the number of items present in the mailbox, and then compare it with what you can see in Outlook.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Exchange Server 2010 - Problem configuring my server 2008 so my clients can use Outlook to send/receive e-mails

Hi,
I am new to the servers and domains stuff. Therefore i have setup succesfully a Server 2008 R2 server with AD, DHCP, DNS roles installed. I configured the roles as i wanted and then i installed Exchange Server 2010 so the clients can use Outlook to send
receive mails in and out of the domain.
I can send/receive mails inside the domain (disalfa.com) but i cannot send/receive mails outside the domain. I configured the Exchange properly, i am sure of that. I am 99,9% i did something wrong with the DNS (A records, MX records, etc.).
Also is there something i must do from the control panel of the site i purchased the domain name and the mails?
Can someone guide me so i can manage to work this out?
Server 2008 - 192.168.1.250
Registered Domain - disalfa.com
Thank you in advance

Hi ,
I recommend you refer to the following article to configure your external mail flow:
Configure Internet Mail Flow Directly Through a Hub Transport Server
Prerequisites
Register MX resource records for all accepted domains in a public domain name system (DNS) server. Consult the documentation of your DNS provider for information about how to register MX records for your domain. Detailed procedures about how to complete
this step are outside the scope of this topic.
Configure network gateways to allow SMTP traffic to and from the Hub Transport server. Consult the documentation for your network routers and firewalls for information about how to route SMTP traffic to and from the Hub Transport server. Detailed procedures
about how to complete this step are outside the scope of this topic.
Best regards,
Niko Cheng
TechNet Community Support

Move Exchange Server 2010 SP1 databases and log files to another partition

My company has been running Exchange Server 2010 SP1 on virtual machine for almost three years. My colleague created this virtual machine (Windows Server 2008 R2 SP1) before Exchange Server installation with following partitions:
C partition - for Windows Server 2008 R2 SP1 OS (size 40 GB)
E partition - for Exchange Server 2010 SP1 databases and logs (size 410 GB)
Those two partitions are on the same virtual hard disk "next to one another" so I can not extend C partition which gets filled up with IIS logs (when C partition free space is under 10 GB I am backing up these logs with backup software and afterwards
deleting them thus freeing up space on C partition). I have 2 databases (along with Public Folders) and size of these databases and their logs is around 235 GB.
Is it safe to move these databases and their logs to another partition which I would create on separate virtual hard disk for this purpose only and how much time this process might take since during this process databases
would be dismounted and inaccessible to all users? He made big blunder in my opinion but I have to solve this.

Yes, its safe to move the DB/Logs. You can follow the procedure mentioned in this article to do it via EMC or Shell... http://exchangeserverpro.com/move-exchange-2010-database-folder/
But it depends on various factors on how long it is going take, like size of the database/logs, server performance, storage performance etc...
Besides this, upgrade Exchange 2010 SP1 to SP3, SP1/SP2 aren't supported anymore! http://blogs.technet.com/b/rmilne/archive/2014/04/09/end-of-exchange-2010-sp2-support.aspx
Blog |
Get Your Exchange Powershell Tip of the Day from here

Change public share access to read only for public and full access to selected users

Hi, new to the community just purchased a recertified WDMyCloud 2TB after my 2 years old MyBookLive 2TB HD died due to accidental power cable unplugging. I've got everything setup including MiniDLNA by following instructions on this forum and everything is working exactly as I want it to except public share. I want public share to be set to read only access for public and full access to certain users (just myself at the moment) and having a "upload" folder within this share with full public access to everything in this folder would be a bonus. I tried login in to ftp with root user and removing write permission for public but that blocks me out as well. I'm sure it's possible by doing some majic on SSH but I wouldn't have a clue so hoping someone here would be able to help me out.

Mr_Khan wrote:
What i want is public to have read only access to file server. Public as in users who do not have a user account on mycloud. E.g someone who connects to to my home network for the first time and is able to browse and download content from public share. I'm aware of being able to set indivual access to shares for users like full access, read only and no access but public users won't have a user account.Through the My Cloud UI interface what you seek to do is not possible. The public share like all other share folders are an all or nothing affair when using the adminstration UI. When using the administration UI you do not have granular control on shared folders to limit non users to read only access or set permission levels for subfolders. The workaround to do what you seek and have the public folder set for read only is to change the folder settings via SSH. It may take some work to set the folder security so that users can read/write to the public folder while the guests only have read access. However, if you reboot the WD My Cloud or update the WD My Cloud firmware those settings may be reset back to the default settings where the entire public folder is read/write for all. There are way to prevent this but again it will take a bit of coding to do so via SSH. See this link (even though its for the WD My Book Live) for a starting point on how to use SSH to change the permission levels on the public folder. Another option if one doesn't go the SSH route is to turn off public sharing for the public folder then create a "guest" user account and give that "guest" account read only access to the public folder while all other user accounts have full read/write access.

When sending e-mail messages to a mail-enabled public folder that have been replicated from old Exchange Server 2000/2003/2007, Exchange Server 2010 environment mails are rejected with NDR.

Hi, I would like to share with you issue that I’ve solved regarding mail-enabled PF that migrated from Exchange 2000/2003/2007 to 2010, I’ve searched & contacted my MVP leader – there’s no official KB regarding this issue right
now, so I’m posting here in order to share this among others.
Note: There’s article(s) that talked about PF replication from Exch2000/2003/2007 to 2010 – this is the same issue as well.
Symptoms
E-mail messages that been sent to mail-enabled public folder in Exchange Server 2010 environment rejected with the following NDR:
“#< #5.2.0 smtp;554 5.2.0 STOREDRV.Deliver.Exception:ObjectNotFoundException; Failed to process message due to a permanent exception with message The Active Directory user wasn’t found. ObjectNotFoundException: The Active Directory
user wasn’t found.> #SMTP#”
Sometimes Exchange Server 2010 is documented as well Event ID 1020 on the Event Viewer with this information:
“Log Name: Application
Source: MSExchange Store Driver
Event ID: 1020
Level: Error
Description:
The store driver couldn’t deliver the public folder replication message "Hierarchy ([email protected])" because the following error occurred: The Active Directory user wasn't found.”
Cause
In an environment where Microsoft Exchange Server 2000 or Microsoft Exchange Server 2003 previously existed, and all those servers have been removed, there is a chance that an Administrative Group (First Administrative Group or another custom Administrative
Group) remains with a Servers container, but no servers inside it.
During replication, when the Exchange 2010 Store Driver sees the empty Servers container in Active Directory, it's expecting a System Attendant object inside the container and when it is not found the error occurs.
Resolution
To work around the issue, delete the empty Servers container. This can't be done through Exchange System Manager. Use the ADSI Edit tool to remove it using the following steps:
Warning If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows
2003 Server, Microsoft Windows Server 2008, Microsoft Exchange 2010 Server or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes
at your own risk.
1.
Start the ADSI Edit MMC Snap-in. Click Start, then
Run, and type adsiedit.msc, and then click OK.
2.
Connect & Expand the Configuration Container [YourServer.DNSDomainName.com], and then expand
CN=Configuration,DC=DNSDomainName,DC=com.
3.
Expand CN=Services, and then CN=Microsoft Exchange, and then expand
CN=YourOrganizationName.
4.
You will see an empty Administrative Group. Expand the
CN=YourAdministrativeGroupName.
5.
Expand CN=Servers.
6.
Verify there are no server objects listed under the
CN=Servers container.
7.
Right click on the empty CN=Servers container and choose
Delete.
8.
Verify the modification, and try to send again the E-mail to the mail-enabled public folder.
Applies to
Exchange Server 2010, Standard Edition
Exchange Server 2010, Enterprise Edition
Netanel Ben-Shushan, MCSA/E, MCTS, MCITP, Windows Expert-IT Pro MVP. IT Consultant & Trainer | Website (Hebrew): http://www.ben-shushan.net | IT Services: http://www.ben-shushan.net/services | Weblog (Hebrew): http://blogs.microsoft.co.il/blogs/netanelb
| E-mail: [email protected]

Sounds like you are looking in the wrong Administrative Group container which is why you are seeing your Exchange 2010 servers in there.
When you install Exchange 2003 only you will see a container named by default as "CN=First Administrative Group" container. But this could be named anything if you changed the Organization Name on the installation when you installed the first
Exchange 2003 server into the domain/forest.
You will notice that when you install Exchange 2010 part of the AD setup is to create a new configuration container and is named by default "CN=First Administrative Group (FYDIBOHF23SPDLT)".
So it sounds like you are not looking in the right location within ADSIEdit.
You may find the following article also helpful for this issue which is the same resolution:
http://blogs.technet.com/b/sbs/archive/2012/05/17/empty-cn-servers-container-causing-issues-with-public-folders-on-small-business-server-2011.aspx
I recommend though that you ensure your Exchange 2003 servers are fully uninstalled or no longer present in your environment before you go deleting the Servers container though.. The following Microsoft article will help with this:
http://technet.microsoft.com/en-gb/library/gg576862(v=exchg.141).aspx

Exchange server 2010 can send email but can't receive email

Hi, I currently built up the exchange server 2010 within Windows 2008 server R2..I followed the youtube exchange server guide and now I am able to receive and send email within the account I created .. I can send email to hotmail or gmail account that I
have. But I can't receive the emails from those. And I have a free domain service from twbbs.org My FQDN is: al7283.twbbs.org . and I 've setup the MX records on this even though I don't know if they are correct configuration. I've open up
the ports that needed. I also created the MX records and A records within DNS server .. can anyone guide me and tell me what should I configure for this troublesome problem??

ON your receive connector check the security.
in console
1) server config
2) hub transport
3) receive connectors (Default <server name>) this should be listning on port 25
4) right click and properties
5) select permission group tab
6) Anonymous needs to be checked otherwise you will only receive email from servers that have a username/password on your email server.
7) Restart transport service and try again.
Your DNS config looks over complicated create a MX record 10 called Mail.al7283.twbbs.org
point to al7283.twbbs.org
You don't need mail.al7283.twbbs.org "A record" or a MX pointing to 122.116.90.148, it's the same as the other MX record if one is down they both will be.

Exchange server 2010 unable to send internet mails to some domains but receives mail

Hi all, I have exchange server 2010 deployed and can receive mail with no issues but cant send mails to some external domains. I can send mails to gmail some others. Yahoo! is among the domains that rejects mails originating from my exchange server. Is
there anyone to assist please?

You can start here.
http://www.dummies.com/how-to/content/how-to-get-removed-from-an-email-blacklist.html
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

How to configure canon ir 2250 to send scans to emails via exchange server 2010

Hello
I have one question:
How to configure canon ir 2250 to send scans to emails via exchange server 2010?

Hi,
Based on my research, the member limit of a distribution list depends on the scalability and performance of your environment:
http://blogs.technet.com/b/exchange/archive/2009/02/19/3407003.aspx
Thanks,
Angela Shi
TechNet Community Support

Mail on iMac not accessing MS Exchange server but both iPhone and iPad access the same account with no problems.

I have been using an iPhone and iPad to access my work emails via our MS Exchange server for a number of years now with no problems at all. I recently replaced my home PC with an iMac (first Mac I have owned) but cannot get it to communicate with the exchange server. I've checked and re-checked the information on the iMac and my iPad - I even deleted the mail account on the iPad and input the details concurrently with setting up on the iMac - but the Mac will not access the exchange server.
I receive the message "The Exchange server "---------------" rejected the password for user "------" Enter you password again or cancel." I am using the correct password. iPad and iPhone are logging on using that password fine. iMac just ends up repeating this message.
Our IT support at work assure me that there is no reason from their end for it not to work, and reasonably point to it working using the iPhone etc.
I'd be extremely grateful if anyone can provide a solution to this basic, but extremely frustrating, little problem.

iPhone and iPad use a different way of accessing the server.
I don't know the exact details, but we are using Zarafa instead of Exchange and have the same problem:
iPhone and the likes can connect to Zarafas z-push interface, which is some identical interface to the native Exchange interface, while the desktop e-mail application tries to interface with the web front end (via http) of the server.
These are completely different setups and it depends on the actual installation of the server to get this going.
So, you will most likely need different access parameters for the desktop - and the web mail feature has to be enabled on the Exchange server.
In my opinion using the web mail interface is just silly. On the other hand, the native protocol has less features comparedto the web front end, so you are somehow stuck with sins of the past.
Good luck!

While trying to access my local network I get the message..."The page could not be opened because server cannot be found." This, after updating to Yosemite and paying (again) for the server app.

while trying to access my local network I get the message..."The page could not be opened because server cannot be found." This, after updating to Yosemite and paying (again) for the server app.

It's absolutley scandalous that a company with Apple's resources can let this happen. They should have staggered the release by region rather than opening the flood gates. The upgrade itself took me about 10 attempts to download it, and then I thought I was home free. That was until it rebooted and won't activate. It's over 2 hours now.
Scandalous!

Send As, Send on Behalf and Full Access for Exchange server 2010/2013

Similar Messages

Maybe you are looking for