• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 399
  • Last Modified:

"send as" fails after permissions verified correct

We're running exchange2k3 and one of our ceo's assistants can't "send as" the ceo even though i have quadruple checked permissions. I gave her send as in the security tab of my account and the security tab of the ceo's account ... she can send as me but gets this error when trying as him ...

Your message did not reach some or all of the intended recipients.

      Subject:      test
      Sent:      5/15/2006 2:53 PM

The following recipient(s) could not be reached:

      John Smith on 5/15/2006 2:53 PM
            You do not have permission to send to this recipient.  For assistance, contact your system administrator.

I've been around exchange a long time and never seen this before. My hunch is that there is something wrong with his domain account. I'm tempted to just delete his account, recreate it and remap his mailbox. anyone ever seen this?
1 Solution
Make sure that there are no Explicit Deny permissions set on CEO's mailbox for a security group that CEO's assistant is a member of. You or some other Exchange Administrator might have secured CEO's mailbox by setting explicit deny permissions on "Everyone" group or some other group which is taking precedence.

You can use DSACLs.exe to dump the permissions on CEO's mailbox to see if there are explicity deny's set.

How to Use Dsacls.exe in Windows Server 2003 and Windows 2000.

You can do this test aslo:-
Create a new test user account with mailbox. Dont add this user to any group other than "Domain Users" (by default)
Grant "Send As" permisions to this new test user account on CEO's mailbox
and see, if this new test user can send as CEO. if yes, then check all the groups, CEO's assistant is a member of

Amit Aggarwal.
Check the Kb

Behaviour of "Send As" permission in exchange 2003 server.



thomyeAuthor Commented:
thanks for your comments .. i checked explicitely deny rules but didn't find any ... was new the dsacls.exe (thanks for that).

and i did come across that KB article before posting, but thank you for that --

i actually didn't change any permissions on any user, rebooted my dc, then rebooted exchange .... and everything works exactly as i had set permissions to. i don't like doing this, but i'm going to chalk it up one of those "unknown microsoft" issues. i just can't stand the fact that right before i rebooted, the email failed, right after i reboote, the email succeeded.

how do i award points? thanks for both posting
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Amazon Web Services - Basic

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now