"send as" fails after permissions verified correct

Posted on 2006-05-15
Last Modified: 2012-08-13
We're running exchange2k3 and one of our ceo's assistants can't "send as" the ceo even though i have quadruple checked permissions. I gave her send as in the security tab of my account and the security tab of the ceo's account ... she can send as me but gets this error when trying as him ...

Your message did not reach some or all of the intended recipients.

      Subject:      test
      Sent:      5/15/2006 2:53 PM

The following recipient(s) could not be reached:

      John Smith on 5/15/2006 2:53 PM
            You do not have permission to send to this recipient.  For assistance, contact your system administrator.

I've been around exchange a long time and never seen this before. My hunch is that there is something wrong with his domain account. I'm tempted to just delete his account, recreate it and remap his mailbox. anyone ever seen this?
Question by:thomye
    LVL 12

    Accepted Solution

    Make sure that there are no Explicit Deny permissions set on CEO's mailbox for a security group that CEO's assistant is a member of. You or some other Exchange Administrator might have secured CEO's mailbox by setting explicit deny permissions on "Everyone" group or some other group which is taking precedence.

    You can use DSACLs.exe to dump the permissions on CEO's mailbox to see if there are explicity deny's set.

    How to Use Dsacls.exe in Windows Server 2003 and Windows 2000.

    You can do this test aslo:-
    Create a new test user account with mailbox. Dont add this user to any group other than "Domain Users" (by default)
    Grant "Send As" permisions to this new test user account on CEO's mailbox
    and see, if this new test user can send as CEO. if yes, then check all the groups, CEO's assistant is a member of

    Amit Aggarwal.
    LVL 7

    Expert Comment

    Check the Kb

    Behaviour of "Send As" permission in exchange 2003 server.


    LVL 1

    Author Comment

    thanks for your comments .. i checked explicitely deny rules but didn't find any ... was new the dsacls.exe (thanks for that).

    and i did come across that KB article before posting, but thank you for that --

    i actually didn't change any permissions on any user, rebooted my dc, then rebooted exchange .... and everything works exactly as i had set permissions to. i don't like doing this, but i'm going to chalk it up one of those "unknown microsoft" issues. i just can't stand the fact that right before i rebooted, the email failed, right after i reboote, the email succeeded.

    how do i award points? thanks for both posting

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
    To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
    The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now