[Last Call] Learn how to a build a cloud-first strategyRegister Now


You do not have sufficient permission to perform this operation on this object.  --  Adding access to another users mailbox

Posted on 2006-04-04
Medium Priority
Last Modified: 2012-06-27
Server Configuration is win2k3 SP1 with Exchange 2003 SP1.  User is using Outlook 2003.

I have two users created in active directory.  One user is tsmith and the other user is members.  I created members so that multiple people could view the email that comes into that account.  

First I went into active directory and opened 'members.'  I then granted mailbox rights to user 'tsmith.'  (delete, read, change, take ownership and full mailbox access)

I setup outlook for tsmith by adding 'members' to tsmith's profile.  (control panel, mail, email accounts, view or change email accounts, change, more settings, advanced tab, add)

The mail box is added to the profile.  I can view the email within the members email account.  I can open the email.  I cannot reply to the email or send.  I recieve the following error if I try:

You do not have sufficient permission to perform this operation on this object. See the folder contact or your system administrator.

The odd thing is I added the members email to another users account with the same rights as tsmith.  The user was able to reply to mail in the members inbox.  

I logged in as tsmith on 3 different machines and checked all of the setting son each machine to make sure that it was not the user workstation or outlook.  I have basically narrowed it down to ad or exchange.

If it is unclear what exactly I am trying to do I can post some screenshots if it would help.  

Thank you for your time.
Question by:CBIA
  • 4
  • 3
LVL 104

Accepted Solution

Sembee earned 2000 total points
ID: 16374221
You should have only granted "Full mailbox" rights to the folder. Nothing else. Full Mailbox should be used exclusively on its own - as it gives the rights required.

Therefore I would remove the account from the list and put it back in again, granting JUST full mailbox.
Once you have done that, on the Security tab, grant the user "Send As" permissions as well.

To summarise:

Two permissions only need to be granted.

Full Mailbox
Send As.

Nothing else.


Author Comment

ID: 16374289
The user is re-added to the list, and has only full mailbox checked.

I however cannot find the 'security' tab to specify the 'send as' permission.  where exactly is that located?
LVL 104

Expert Comment

ID: 16374419
The Security tab isn't enabled by default. In ADUC, choose View, the Advanced features. Then go back in to the properties of the user and you should see the Security tab.
Again, enable JUST the Send As option - nothing else.

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.


Author Comment

ID: 16375266
I found the security tab, and enabled 'Send As' only.

At this point only those two options are enabled.

I logged the user out and back in.  Unfortunately the same problem persists.  The user can view mail, read mail but cannot reply to a message.  I also tested it on my workstation as well and the same symptoms are occurring.

Any more information you might need to come to another resolution?
LVL 104

Expert Comment

ID: 16375364
You will need to wait.
Exchange caches permissions and these are only flushed and refreshed every two hours. The only way to get them to flush more frequently is to reboot the server.


Author Comment

ID: 16375440
I will post back here at 4:00PM PST and let you know if it worked.  Thanks for your help thus far.

Author Comment

ID: 16375647
It now works!  Sembee if I lived in england I would gladly buy you a beer!  cheers!

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have come across a situation where you need to find some EDB mailbox recovery techniques, then here you will find the same. In this article, we will take you through three techniques using which you will be able to perform EDB recovery. You …
Steps to fix error: “Couldn’t mount the database that you specified. Specified database: HU-DB; Error code: An Active Manager operation fail”
This video discusses moving either the default database or any database to a new volume.
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question