Grant Send Permission for Mailbox to Security Group

Posted on 2015-02-02
Medium Priority
Last Modified: 2015-02-06
Good Afternoon,

I have been trying to wrap my head around how to accomplish this in Exchange 2010. I have multiple mailboxes that I am using security groups to give user permissions to, unfortunately I would like to use a Security Group to be able to be used to grant send permission on specific mailboxes to elevate the administrative overhead and offload this to my tier 1 support for Add, Changes and Deletes.

I do not see a way of doing this from the EMC, I have tried to do it through Powershell with no success. Has anyone accomplished this and can you help me out?

Thank you
Question by:Tim Edwards
LVL 17

Expert Comment

ID: 40584928

if you are talking about AD right assignment, then you could delegate permissions for OU/groups or so, to tier 1 support, and tell them how to modify user/group permissions and assigned required permissions.

If we are talking about Exchange, I haven't done this, but I know there is RBAC model for it.
Here is a link, so take a look at it. https://technet.microsoft.com/en-us/library/dd298183(v=exchg.150).aspx

LVL 24

Accepted Solution

VB ITS earned 2000 total points
ID: 40585270
Hi Tim, are you referring to Send As permissions or Send on behalf permissions?

The easiest way to grant a Security Group Send As access to a mailbox is to do it through the Active Directory Users and Computers console (yes, this is still possible with Exchange 2010).

You'll firstly need to make sure that your Security Group is a Universal Security Group (not Global or Domain local). Convert it to a Universal Security Group or create a new one if necessary, then follow the below steps to grant the group Send As access to a mailbox:

- Open the Active Directory Users and Computers console on one of your Domain Controllers
- Click on View in the top menu bar and click on Advanced Features. If it's already ticked then skip this step
- Locate the mailbox you want to grant the Security Group Send As access to and open up the Properties of the account
- Click on the Security tab
- Advanced button towards the bottom
- Click Add
- Enter the name of your Security Group or browse for it
- Tick Send as in the Allow column
- OK your way out when done

You will now need to wait roughly 2 hours due to the caching in Exchange for these new permissions to take effect. Let me know how you go.
LVL 11

Author Closing Comment

by:Tim Edwards
ID: 40594288
Thank you,

I did what you suggested original but no success.. Since this was a mailbox that multiple users would be utilizing with no primary, I actually needed to log into the mailbox via outlook or web access.. Once I did that users had the rights to send as and the ability to expand the mailbox.

I accepted this as it is the right method.

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes Top 9 Exchange troubleshooting utilities that every Exchange Administrator should know. Most of the utilities are available free of cost. List of tools that I am going to explain in this article are:   Microsoft Remote Con…
This article will help to fix the below errors for MS Exchange Server 2016 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
This video tutorial shows you the steps to go through to set up what I believe to be the best email app on the android platform to read Exchange mail.  Get the app on your phone: The first step is to make sure you have the Samsung Email app on your …
Suggested Courses

616 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question