Solved

Most users in new domain missing Send As permission

Posted on 2013-01-28
8
2,113 Views
Last Modified: 2013-05-04
Long story short, company migrated into new AD enviorment and mailboxes were imported into new AD/exchange structure. Most users get send as permissions errors when they send email. When I look at their account the Nt auth\self is missing. Is there a way to give all users the send as permission through the shell rather than manually changing everyone?
0
Comment
Question by:MXadmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
8 Comments
 
LVL 16

Accepted Solution

by:
choward16980 earned 500 total points
ID: 38828977
http://bsmith9999.blogspot.com/2009/02/adding-nt-authorityself-back-for.html

Get-mailbox | Add-Mailboxpermission -user "NT AUTHORITY\SELF" -Accessrights FullAccess
0
 

Author Comment

by:MXadmin
ID: 38829008
Thats full access that not send as permissions
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38829048
Get-mailbox | Add-ADPermission "John Simpson" -User "Domain\User" -Extendedrights "Send As"
0
Office 365 Advanced Training for Admins

Special Offer:  Buy 1 course, get 2nd free!  Buy the 'Managing Office 365 Identities & Requirements' course w/ Accelerated TestPrep, and automatically receive the 'Enabling Office 365 Services' course FREE!

 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38829049
0
 

Author Comment

by:MXadmin
ID: 38829063
Ok. Im looking for a way to pipe that to all users not a single user at a time. At that rate doing it one by one through the emc would be faster. Hopefully that is clear now. Thank you.
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38829078
The provided cmdlet will be applied on all the mailboxes.

just test the cmdlet on one users mailbox as follow:
Add-ADPermission "John Simpson" -User "Domain\User" -Extendedrights "Send As"

If that worked, apply it on all mailboxes:
Get-mailbox | Add-ADPermission "John Simpson" -User "Domain\User" -Extendedrights "Send As"
0
 

Author Comment

by:MXadmin
ID: 38829149
that command fails "the input object cannot be bound to any parameters for the command either becuase the command does not take pipeline input or the input and its properties do not match any of the parameters that take a pipeline imput"
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 38829181
Sorry it should be:

Get-mailbox | Add-ADPermission  -User "NT AUTHORITY\SELF" -Extendedrights "Send As"
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question