Grant Send Permission for Mailbox to Security Group

Posted on 2015-02-02
Last Modified: 2015-02-06
Good Afternoon,

I have been trying to wrap my head around how to accomplish this in Exchange 2010. I have multiple mailboxes that I am using security groups to give user permissions to, unfortunately I would like to use a Security Group to be able to be used to grant send permission on specific mailboxes to elevate the administrative overhead and offload this to my tier 1 support for Add, Changes and Deletes.

I do not see a way of doing this from the EMC, I have tried to do it through Powershell with no success. Has anyone accomplished this and can you help me out?

Thank you
Question by:Tim Edwards
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 17

Expert Comment

ID: 40584928

if you are talking about AD right assignment, then you could delegate permissions for OU/groups or so, to tier 1 support, and tell them how to modify user/group permissions and assigned required permissions.

If we are talking about Exchange, I haven't done this, but I know there is RBAC model for it.
Here is a link, so take a look at it.

LVL 24

Accepted Solution

VB ITS earned 500 total points
ID: 40585270
Hi Tim, are you referring to Send As permissions or Send on behalf permissions?

The easiest way to grant a Security Group Send As access to a mailbox is to do it through the Active Directory Users and Computers console (yes, this is still possible with Exchange 2010).

You'll firstly need to make sure that your Security Group is a Universal Security Group (not Global or Domain local). Convert it to a Universal Security Group or create a new one if necessary, then follow the below steps to grant the group Send As access to a mailbox:

- Open the Active Directory Users and Computers console on one of your Domain Controllers
- Click on View in the top menu bar and click on Advanced Features. If it's already ticked then skip this step
- Locate the mailbox you want to grant the Security Group Send As access to and open up the Properties of the account
- Click on the Security tab
- Advanced button towards the bottom
- Click Add
- Enter the name of your Security Group or browse for it
- Tick Send as in the Allow column
- OK your way out when done

You will now need to wait roughly 2 hours due to the caching in Exchange for these new permissions to take effect. Let me know how you go.
LVL 10

Author Closing Comment

by:Tim Edwards
ID: 40594288
Thank you,

I did what you suggested original but no success.. Since this was a mailbox that multiple users would be utilizing with no primary, I actually needed to log into the mailbox via outlook or web access.. Once I did that users had the rights to send as and the ability to expand the mailbox.

I accepted this as it is the right method.

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question