Solved

Send as permission

Posted on 2007-11-21
13
1,942 Views
Last Modified: 2013-12-17
Hello, I'm using SBS 2003.
I created a new functional mailbox called "support".
I added this mailbox in the outlook profile of some users as "additional mailbox".
the users have the full mailbox access in the mailbox rights
the users have been added in the delivery options.
Problem : when i send an email to the support mailbox, the user is able to reply (the from field is support).
When the user try to send a new email using the from field with support, he receives a message saying that he's not authorized to send this message...
I tried to add the user in the security tab with the send as permission but without success...
Do you have any ideas ? thanks !!!
0
Comment
Question by:mmarchant
13 Comments
 
LVL 7

Expert Comment

by:mcse2007
ID: 20326690
i assume you have done the below already:

from 'support' account properties in exchange, you give this user a permission to "send as".

try getting that user to log off and login in again to get the security changed kicks in
0
 

Author Comment

by:mmarchant
ID: 20326741
hi, yes i already did it. no success :-(
0
 
LVL 104

Expert Comment

by:Sembee
ID: 20327206
The Send As permission is what you need. However if you have made the permission change and then tried it immediately, I would not expect it to work. Exchange caches permissions and that cache is only flushed every couple of hours.

You should also be aware that additional permissions on certain protected accounts may be removed by Exchange automatically - if the account is a member of Domain Admins for example.

Simon.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 19

Expert Comment

by:MrLonandB
ID: 20327259
I would try and delete the account being used with the mailbox, create another account and make sure it is not inheriting any permissions that would deny the send as ability, then reconnect the mailbox to the new NT account.
0
 

Author Comment

by:mmarchant
ID: 20327315
let me clarify the permissions i gave just to be sure there is no misunderstanding :
in the AD, in the "support" account properties :
1)in the "exchange advanced" tab, in "mailbox rights" : full mailbox access to the user
2)in the "exchange general" tab, in "delivery options" : I add the user
3)in the "security tab" : "send as" permissions for the user.
is that right ?

thanks
0
 
LVL 104

Expert Comment

by:Sembee
ID: 20327343
Why are you adding the user in the delivery options? If you are doing that then having mailbox permissions as well is pointless, as they will already have a copy of the message in their own mailbox.

Otherwise the rest of the settings are correct, you may simply have permissions cache issues.

Simon.
0
 

Author Comment

by:mmarchant
ID: 20327508
well, it's still not working and i made the changes 3 hours ago...
How can I force to have these case permissions flushed manually ?
0
 
LVL 104

Expert Comment

by:Sembee
ID: 20327551
The only way to force the cache to be flushed is to restart the information store. That will kick all of the users out though.

Simon.
0
 

Author Comment

by:mmarchant
ID: 20328084
i made the test on my 'test environment" which is exactly the same as my "prod environment" and it works with the following permissions :
1)in the "exchange advanced" tab, in "mailbox rights" : full mailbox access to the user
2)in the "exchange general" tab, in "delivery options" : I add the user in the "send on behalf"
I did not add the "send as" permission in the security tab.
I'll restart the prod SBS server this evening and see if it is working after the reboot but I doubt...
0
 

Author Comment

by:mmarchant
ID: 20328139
when i compare the permissions between the 2 environments, the only difference is the following :
in the exchange advanced permissions of my prod environment (where it is not working), in "mailbox rights", "advanced tab", i have "deny - exchange domain servers - full mailbox access - parent object"...
0
 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 20328880
In that case one of the servers is not fully up to date on patches.
Until Jan 06, Full Mailbox Access also granted you Send As permissions. That behaviour was changed by an update to Exchange.
It is discussed in this article: http://support.microsoft.com/default.aspx?kbid=895949

"Send on Behalf of" is different to Send As, and will result in email messages going out as User 1 on behalf of User 2.

The permissions that you are seeing for Full Mailbox Access is not what I would expect to see. A deny should not be present for that group.

Simon.
0
 

Expert Comment

by:Pepe102598
ID: 20940065
Do anybody knows how to you give a user a permission to "send as" using vb script? I need it to use in a web application
0
 
LVL 104

Expert Comment

by:Sembee
ID: 20943169
Pepe - this is an old question. Unlike a forum it is not possible to "bump" questions back up the list. The only people who will see your post are those that have already participated. Instead you should post your question as a new question in the Exchange Server Zone which will allow other experts the chance to see the question and respond.

Simon
Exchange Server Zone Advisor.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now