A constraint violation occurred: 8007202f
The infrastructure is as follows. I have 2 active directorys, AD1 and AD2, each with an Exchange server EX1 and Ex2, both of 2003. I need that several users can send emails AD2 as if the user's AD1. When I go to grant permissions to send, I get the following error: A constraint violation occurred.Facility: LDAP providerID no: 8007202fMicrosoft Active Directory Exchnage extension
What can I do? Thank you
November 3rd, 2008 10:43pm
Hello Francisco,
Did you try to point Active Directory Users and Computers MMC to a different DC (or do you have single DC for domain)?
Did you try to set something other than send as or full mailbox access (since this is extended right)?
Best regards,
Saso Erdeljanov
http://exchange.si
Free Windows Admin Tool Kit Click here and download it now
November 4th, 2008 1:32am
Hi,
I'd like to know if the two domains are in different forests or in the same forests.
If these domain are not in two forest, then please try to understand that "send on behalf of" permission is email-related security permission. Exchange organization use forests as its boundary. Thus one user in one forest cannot send emails "on behalf of" another user in another forest as they are in two different Exchange organizations. They do not share the Global Address List.
If they are in one forest, then please follow the steps below to grant explicit "send as" permission.
1) Please ensure that you have full domain administrator privilege.
2) On the AD1, open Active Directory Users and Computers (ADUC), click View\Advanced features.
3) Please double-click a mailbox to open the Properties dialog box.
4) After that, please click Security tab.
5) Grant the user in AD2 full control permission, including the "send as" and "receive as" permission;
6) Please wait for a few minutes and restart the Microsoft Exchange Information store service from the service manager and then check the issue.
Note: You can run services.msc from a command prompt to open Services Manager.
If the problem still persists, then we need more information for further troubleshooting.
What is the relationship between these two domains?
Whether user in AD1 can access AD2 or not?
More related KB articles share with you:
Assigning "Send As" Permissions to a user
http://msexchangeteam.com/archive/2005/01/07/348596.aspx
Send As permission behavior change in Exchange 2003http://support.microsoft.com/kb/895949/
Problems accessing the ntSecurityDescriptor property by using the ADSI LDAP provider
http://support.microsoft.com/kb/323749/en-us
Hope it helps.
Xiu
November 5th, 2008 11:34am
Hi, 1 .- They are two different domains in the forest. 2 .- There is trust relationship between the two domains. 3 .- The user can access the AD1 of AD2. As I do then?., Had already tested the "Send As" does not get worse. Thank you
Free Windows Admin Tool Kit Click here and download it now
November 5th, 2008 10:48pm
Any idea please? Thanks for everything.
November 6th, 2008 11:46pm
Hi,
did you try anything I suggested above?
Best regards
Free Windows Admin Tool Kit Click here and download it now
November 7th, 2008 1:24pm
I was getting the same error code, even after trying the above suggestion, but not reading all of the KB's at the bottom - and i think my situation was very similar.
This is just a quick work around if you are having the same problem.
I got forwarding to work by setting up contacts on the old email server which I could then forward to the email address I had on the new email server. Both Domains were Exchange 2007 on 2003 and in a 2003 domain and were in the same building
on the same subnet and the domains were trusted. This short article shows how to create an email contact.
http://technet.microsoft.com/en-us/library/aa997220(EXCHG.80).aspx
I had to do this for each user. There were only 10 so it was not that much trouble but I assume if you have to do this to a lot of users there has to be a different soultion probably along the lines of the one presented above.
June 3rd, 2010 4:51pm
Hi,
I am also facing the same issue when forward the mail.
My scenerio is
Have two Exchange 2003 server on different forest. The Users have two e-mail ID's on both server. I can create ID 2 as a contact in server 1 and forward the mails from ID 1 to
contact ( ID2).
But I can't forward the mails dirctly to ID 2.
Can anyone help me.
Regards,
Mani S Thanks & Regards, Mani S
Free Windows Admin Tool Kit Click here and download it now
May 10th, 2011 10:34pm