?
Solved

Lost send as permissions to mailboxes after moving mailboxes to a new Exchange 2000 server

Posted on 2003-03-21
13
Medium Priority
?
569 Views
Last Modified: 2008-02-01
Here is my scenario...  I have a single Exchange 2000 Enterprise Server in my Active Directory.  The database was getting too big, so I added another server and moved a large portion of the users to this newer, faster server.  I used the Exchange Tasks Wizard to move the mailboxes.  All of this went extremely well, with one exception.  People lost their abililty to "send as" in mailboxes that they used to be able to do this.  For example, the facilities people had their own personal mailbox and a facilities mailbox in their Outlook client and used to be able to reply as "facilities" to emails received in that box.  This no longer works after these mailboxes were moved.

Additional info:  Server 1 is running Win2k Advanced Server with SP2 and Exchange 2000 Enterprise with SP2.   Server 2 is running Win2k Advanced Server with SP3 and Exchange 2000 Enterprise with SP3.  Anyone with Domain Admin rights still can "send as" but regular users lost the ability after the move.
0
Comment
Question by:maddog63
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 6
13 Comments
 
LVL 24

Expert Comment

by:David Wilhoit
ID: 8182427
Is either server a DC?
Second, why did you change SP levels between the 2 servers? I don't think it caused this, but now, you need to go over and upgrade the other server to SP3 for both OS and Exchange. MS doesn't recommend running mixed SP levels in production.

Third, they can still login to their mailboxes, and can send mail, or no? Are you saying that they lost delegated perms?

D
0
 

Author Comment

by:maddog63
ID: 8182586
First, let me thank you for your rapid response!  I greatly appreciate it!

Neither server is a DC.  The reason for the SP disparity between servers is the first server has been in production for a very long time and we haven't had the opportunity to update it.  The new server is current because we just built it.  The users can still send and receive mail just fine if they are using their own mailbox.  For example, our Registrar, we'll call her Mary can send and receive from her personal email box with no problems.  She also has the Registrar's mailbox in her Outlook.  On the Active Directory, she has full mailbox rights for the Registrar's mailbox. When her email box and the Registrar's box were on the First server, she could send mail as the "registrar".  Once I moved both mailboxes to the new server, her's works fine and she can send and receive.  She gets Registrar email and can move it and delete it, but she can't send mails as Registrar.  She gets an error stating she doesn't have permission to send as Registrar. (paraphrased)
0
 
LVL 24

Expert Comment

by:David Wilhoit
ID: 8182710
Interesting. did you ever grant delegate perms on the registrar mailbox, that gave her the send as rights? Or did you just give her "send as" on that object?

If you look at the Outlook options, on the registrar mailbox, does she still show in the delegates? Just trying to figure out what actually got "lost"

D
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 24

Expert Comment

by:David Wilhoit
ID: 8182719
"On the Active Directory, she has full mailbox rights for the Registrar's mailbox."

Does she still have this, when you look at the AD object?

D
0
 

Author Comment

by:maddog63
ID: 8183107
First, let me thank you for your rapid response!  I greatly appreciate it!

Neither server is a DC.  The reason for the SP disparity between servers is the first server has been in production for a very long time and we haven't had the opportunity to update it.  The new server is current because we just built it.  The users can still send and receive mail just fine if they are using their own mailbox.  For example, our Registrar, we'll call her Mary can send and receive from her personal email box with no problems.  She also has the Registrar's mailbox in her Outlook.  On the Active Directory, she has full mailbox rights for the Registrar's mailbox. When her email box and the Registrar's box were on the First server, she could send mail as the "registrar".  Once I moved both mailboxes to the new server, her's works fine and she can send and receive.  She gets Registrar email and can move it and delete it, but she can't send mails as Registrar.  She gets an error stating she doesn't have permission to send as Registrar. (paraphrased)
0
 

Author Comment

by:maddog63
ID: 8183157
Interestingly enough, we never did enable "Send on Behalf" under delivery options, we simply went into the Exchange ADvanced tab and under mailbox rights gave the person full mailbox access and read permissions.  This has always worked until we moved the mailboxes.  Incidently, she still has those rights.  I have tried removing them and re-enabling them to see if it fixes it, as well as removing it from her Outlook and re-adding it and it still doesn't work. Very odd problem.  My understanding is that all rights are set on the Active Directory and those are all correct and haven't changed.  Only the mailbox location has changed and the Active Directory object is pointing to the proper private store that has the mailboxes.
0
 
LVL 24

Accepted Solution

by:
David Wilhoit earned 200 total points
ID: 8183656
Do you know how to perform an LDP dump on a user object? If so, you should compare a user object from the old server with a userobject from the new server, and see if there are subtle differences. You'd need to install the Windows support tools to run ldp.exe.

D
0
 

Author Comment

by:maddog63
ID: 8183827
I will give it a try and see what happens.  Thanks for the info!  I will let you know what we find.
0
 

Author Comment

by:maddog63
ID: 8184374
I will give it a try and see what happens.  Thanks for the info!  I will let you know what we find.
0
 

Author Comment

by:maddog63
ID: 8189610
Here is a possible problem point, if someone could clear this up...  We are running Exchange 2000 Enterprise on both of the servers.  Do we need to have ADC installed?  We don't as far as I know.  Do you need ADC if you only have 1 Exchange 2000 server?
0
 
LVL 24

Expert Comment

by:David Wilhoit
ID: 8199132
you only need the ADC when you're connecting a 5.5 site to Active Directory, not necessary in your situation.

D
0
 

Author Comment

by:maddog63
ID: 8199196
Great thanks!  I appreciate all of your help.  You have been great!
0
 
LVL 24

Expert Comment

by:David Wilhoit
ID: 8199282
you're welcome!
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question