EX 2007 Send As problem

I have a user Joe, and I want to give user Mary Send As rights.  In 2007 EMC, I go to Joe, Manager Send As Permissions, Add Mary, and Manage.  The command goes through, with Success.

Mary can't Send As.  

When I go Back to Joe, and Manage Send As Permissions again, Mary is not listed.  If I go to the EMC, and issue:

Add-ADPermission -Identity Joe -User Mary -AccessRights extendedright -ExtendedRights "send as"

It tells me:

WARNING: Appropriate ACE is already present on object "CN=Joe,CN=Users,DC=ep,DC=local" for account "domain\Mary".

Mary can't Send As.


Everything looks fine in ADUC, as well.

BTW, restarting the IS is not an option, so I waited over night.

Some more info:  OS=2003 r2, BlackBerry's are in the picture too, but neither user has one.
JeffPetersonAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
JeffPetersonConnect With a Mentor Author Commented:
Finally, I removed Mary's permisions from Joe's account completely, Restarted the IS, and when it came back up, I was able to add Mary to Joe's Send As list.
0
 
amaexchangeCommented:
Are you sure that the given right is synced to all participants? I our environment we have to wait for some time that some settings are synced out.
0
 
JeffPetersonAuthor Commented:
As I said, "BTW, restarting the IS is not an option, so I waited over night."
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
JeffPetersonAuthor Commented:
Another clue:  I randomly assigned Send As to another user, and it worked.  The user showed up when I went back into Joe's Send As.
0
 
JeffPetersonAuthor Commented:
I finally figured it out.  In Jope's AD account, under security, his effective permissions excluded 'Send As'.  Under SELF, the right was there, but set to "Thisobject only'.  I changed it to 'This object and all child objects', and Mary showed up in his 'Send As' list.
0
 
JeffPetersonAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for JeffPeterson's comment #a39269904

for the following reason:

It worked.
0
 
JeffPetersonAuthor Commented:
Well kiss my grits!  

After a few minutes, Mary is no longer in Joe's Send As list.  I'm back to where I was.
0
 
JeffPetersonAuthor Commented:
Checked the admincount property.  Both are set to null.  Neither one has been a member of a protected group.
0
 
JeffPetersonAuthor Commented:
It stayed put, even after I restarted IS again.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.