Grant Send Permission for Mailbox to Security Group

Posted on 2015-02-02
Medium Priority
Last Modified: 2015-02-06
Good Afternoon,

I have been trying to wrap my head around how to accomplish this in Exchange 2010. I have multiple mailboxes that I am using security groups to give user permissions to, unfortunately I would like to use a Security Group to be able to be used to grant send permission on specific mailboxes to elevate the administrative overhead and offload this to my tier 1 support for Add, Changes and Deletes.

I do not see a way of doing this from the EMC, I have tried to do it through Powershell with no success. Has anyone accomplished this and can you help me out?

Thank you
Question by:Tim Edwards
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 17

Expert Comment

ID: 40584928

if you are talking about AD right assignment, then you could delegate permissions for OU/groups or so, to tier 1 support, and tell them how to modify user/group permissions and assigned required permissions.

If we are talking about Exchange, I haven't done this, but I know there is RBAC model for it.
Here is a link, so take a look at it. https://technet.microsoft.com/en-us/library/dd298183(v=exchg.150).aspx

LVL 24

Accepted Solution

VB ITS earned 2000 total points
ID: 40585270
Hi Tim, are you referring to Send As permissions or Send on behalf permissions?

The easiest way to grant a Security Group Send As access to a mailbox is to do it through the Active Directory Users and Computers console (yes, this is still possible with Exchange 2010).

You'll firstly need to make sure that your Security Group is a Universal Security Group (not Global or Domain local). Convert it to a Universal Security Group or create a new one if necessary, then follow the below steps to grant the group Send As access to a mailbox:

- Open the Active Directory Users and Computers console on one of your Domain Controllers
- Click on View in the top menu bar and click on Advanced Features. If it's already ticked then skip this step
- Locate the mailbox you want to grant the Security Group Send As access to and open up the Properties of the account
- Click on the Security tab
- Advanced button towards the bottom
- Click Add
- Enter the name of your Security Group or browse for it
- Tick Send as in the Allow column
- OK your way out when done

You will now need to wait roughly 2 hours due to the caching in Exchange for these new permissions to take effect. Let me know how you go.
LVL 10

Author Closing Comment

by:Tim Edwards
ID: 40594288
Thank you,

I did what you suggested original but no success.. Since this was a mailbox that multiple users would be utilizing with no primary, I actually needed to log into the mailbox via outlook or web access.. Once I did that users had the rights to send as and the ability to expand the mailbox.

I accepted this as it is the right method.

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question