Solved

Most users in new domain missing Send As permission

Posted on 2013-01-28
8
2,070 Views
Last Modified: 2013-05-04
Long story short, company migrated into new AD enviorment and mailboxes were imported into new AD/exchange structure. Most users get send as permissions errors when they send email. When I look at their account the Nt auth\self is missing. Is there a way to give all users the send as permission through the shell rather than manually changing everyone?
0
Comment
Question by:MXadmin
  • 4
  • 3
8 Comments
 
LVL 16

Accepted Solution

by:
choward16980 earned 500 total points
ID: 38828977
http://bsmith9999.blogspot.com/2009/02/adding-nt-authorityself-back-for.html

Get-mailbox | Add-Mailboxpermission -user "NT AUTHORITY\SELF" -Accessrights FullAccess
0
 

Author Comment

by:MXadmin
ID: 38829008
Thats full access that not send as permissions
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38829048
Get-mailbox | Add-ADPermission "John Simpson" -User "Domain\User" -Extendedrights "Send As"
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38829049
0
 

Author Comment

by:MXadmin
ID: 38829063
Ok. Im looking for a way to pipe that to all users not a single user at a time. At that rate doing it one by one through the emc would be faster. Hopefully that is clear now. Thank you.
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38829078
The provided cmdlet will be applied on all the mailboxes.

just test the cmdlet on one users mailbox as follow:
Add-ADPermission "John Simpson" -User "Domain\User" -Extendedrights "Send As"

If that worked, apply it on all mailboxes:
Get-mailbox | Add-ADPermission "John Simpson" -User "Domain\User" -Extendedrights "Send As"
0
 

Author Comment

by:MXadmin
ID: 38829149
that command fails "the input object cannot be bound to any parameters for the command either becuase the command does not take pipeline input or the input and its properties do not match any of the parameters that take a pipeline imput"
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38829181
Sorry it should be:

Get-mailbox | Add-ADPermission  -User "NT AUTHORITY\SELF" -Extendedrights "Send As"
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question