Unable to send as and open secondary mailbox ?


Can anyone please assist me with the problem happening today which occurs on multiple users in single AD domain:

Central office mailbox user has access to site office mailbox and sendas permission, suddenly it lost access to site office mailbox.
I checked and make sure:
1.     All accounts are not locked.
2.     All access permissions are in place.

I'm using Exchange 2010 SP3 and Outlook 2010 on all clients.

AD forest and domain level is Windows 2008R2.

LVL 11
Senior IT System EngineerIT ProfessionalAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Restart exchange and all related services. Ask the users to restart Outlook.
Senior IT System EngineerIT ProfessionalAuthor Commented:
Not all of the users are affected only a few users in some site office.

If I restart the whole exchange server services in all role, it would affect the users globally with unwanted outage ?
David Paris VicenteSystems and Comunications  Administrator Commented:
Hi ITSystemEngineer,

Did you tried to use OWA to test the issues you mentioned?

You said
Not all of the users are affected only a few users in some site office.
How are these users defined to the mailbox permissions, individually or they belong to a group?

You can also check what permissions an Active Directory user account has on a specific mailbox, simply use the following cmdlet which will enumerate all the permissions the user has on that mailbox:

Get-Mailbox <Mailbox> | Get-MailboxPermission -User <AD User>

Just a quick note, how did you add this mailbox to the Outlook?
You added to your profile or through the account settings?

Please give us all the details so we can have an overview.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Senior IT System EngineerIT ProfessionalAuthor Commented:
@David Paris Vicente:

This mailbox has been created and worked few months before I joined this company, so I'm not sure how my predecessor did it. All in a sudden it stopped working.

Isthere any difference between adding the permission through Outlook profile or through the account settings ?
David Paris VicenteSystems and Comunications  Administrator Commented:
The only supported way by Microsoft when adding delegated mailboxes is through the Account settings and not through and not to the same outlook profile.

You can take a look here about the differences and issues that can occur.

Senior IT System EngineerIT ProfessionalAuthor Commented:
ok, somehow another helpdesk team member found out that by adding NT AUTHORITY\SELF permission back (Read) into the AD account of "site office mailbox" in the AD domain controller resolves this issue.

I'm confused why it happens in a sudden a SELF Read permission lost itself.
David Paris VicenteSystems and Comunications  Administrator Commented:
Hi IT,

If someone was messing around with the AD objects permissions and the objects are inheriting permissions from other objects that can happen.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.