Solved

Send As permissions - Exchange 2010

Posted on 2013-06-06
8
492 Views
Last Modified: 2013-06-16
We have a strange issue that has popped up for us.

We had a few users request a certain email address that they could send from. For example AR@company.com or AP@company.com

We created those emails in exchange 2010 and gave send as permissions to the users that wanted it. However, when they try to send as one of those email addresses, they get an immediate bounce back saying they do not have permissions to send as. However, it works fine in OWA, and if you create a new outlook profile, it works fine, till the next morning. I'm assuming maybe it's a OAB issue since the OAB gets downloaded nightly.

I don't see any errors / issues in the event logs. Not really sure where to go from here.

Anyone have any insight?

Little background: We migrated from exchange 2003 to 2010 about a year ago.
Users are using outlook 2007 or outlook 2010.
Exchange 2010 is installed on a server 2008 standard VM.
0
Comment
Question by:themightydude
  • 5
  • 2
8 Comments
 
LVL 41

Expert Comment

by:Amit
Comment Utility
Make sure these users are not part of any protected group in AD. Also check admin count value for these users via using adsiedit tool. If it is 1, that means they are part of protected group and permission will be revoked automatically by AD.
0
 
LVL 4

Author Comment

by:themightydude
Comment Utility
But they can send from OWA just fine..if they were part of a protected group then it shouldn't work in OWA either correct?
0
 
LVL 41

Expert Comment

by:Amit
Comment Utility
Ya that is correct. But can you check admin count value for one user.
0
 
LVL 4

Author Comment

by:themightydude
Comment Utility
Checked for one of the users having this issue and admin count is not set.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 4

Author Comment

by:themightydude
Comment Utility
I should mention as well that I can do a send as from one of the accounts, but not from the other.
0
 
LVL 11

Expert Comment

by:James Hodge
Comment Utility
Hi Mightydude,

I've had this before.

1) Outdated Cached Contact Information (*.Nk2)
You could right click and delete the problem addresses or delete the whole list.
Here is some info: http://windowsitpro.com/outlook/outlook-2010-autocomplete-cache-and-suggested-contacts

OR

2) OAB Problem
Delete the offline address book folder under “C:\Users\username\AppData\Local\Microsoft\Outlook\Offline Address Books”  (if Windows 7?). Then open Outlook and force a download of the new OAB.

James
0
 
LVL 4

Accepted Solution

by:
themightydude earned 0 total points
Comment Utility
I figured it out.

Was thinking it was an OAB problem initially as well, but it worked fine if we deleted the OAB, then when the OAB re-downloaded later, it would stop working.

The issue actually ended up being that a while back someone had decomissioned our pimary DC, and installed a new one, but when they did, they forgot to change the primary DNS on the exchange server to point to the new one, and it was still pointing to the old as primary and then pointing to our secondary DNS, but our secondary DNS just pointed back to it'self, so it was kind of broken in that aspect lol.

I fixed DNS on the secondary DNS and the exchange server and it's working fine now.
0
 
LVL 4

Author Closing Comment

by:themightydude
Comment Utility
fixed
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now