Add Send As permissions to Distribution Group in Exchange 2007

mcathcart
mcathcart used Ask the Experts™
on
I am running Exchange 2007 08.01.0291.001 and I need to add Send As permissions to a distribution group. I have tried using:

Add-ADPermission <distribution group> -AccessRights ExtendedRight -ExtendedRights Send-As -user <user>

When I do this, I get the following:

Identity             User                 Deny  Inherited Rights
--------             ----                 ----  --------- ------
cstone.ad/Users/i... CSTONE\rpaxton       False False     Send-As


This seems to tell me that the permissions were accepted. I still am unable to send a message as this group. The message I get is:

Delivery has failed to these recipients or distribution lists:

You are not allowed to send this message because you are trying to send on behalf of another sender without permission to do so. Please verify that you are sending on behalf of the correct sender, or ask your system administrator to help you get the required permission.


Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Expert of the Quarter 2009
Expert of the Year 2009

Commented:
How long did you wait after making the change?
Exchange caches settings like this and the cache is only flushed every couple of hours. Therefore if you made the change and then tried to use it immediately, it will almost certainly fail.

Simon.

Commented:
How many time you waited? DSAccess must update cache.

Author

Commented:
I waited over the entire weekend.
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Expert of the Quarter 2009
Expert of the Year 2009

Commented:
You can set the Send As permission through ADUC.

Have you verified that the permission is still there?
If the user is a member of a protected group (Domain Admins for example) then the permission will be removed.

Simon.

Author

Commented:
According to ADUC, I do have Send As permission.

The distribution group is not in any groups at all.
Expert of the Quarter 2009
Expert of the Year 2009

Commented:
I was referring to the users who you have granted the Send As permission to.

Simon.

Author

Commented:
I am one of those users, Simon. All of the other users who need Send As also show send as in the ADUC. However, neither myself, nor any of the others, can send as yet.
Expert of the Quarter 2009
Expert of the Year 2009

Commented:
The only thing I can suggest is to restart the system attendant and information store which will force Exchange to update the permissions.

Simon.

Author

Commented:
We had to reboot the server this weekend, so that has been done as well.
Expert of the Quarter 2009
Expert of the Year 2009
Commented:
The error means you don't have permissions, but if ADUC says you have then something is out of sync. Do you multiple domain controllers? Check on each of them that the permissions are set, as Exchange will only use one DC. Otherwise I can only suggest the permissions are removed and redone.

If that doesn't work, recreate the group.

Simon.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial