Change a Distribution Group to a Security group in order to use Send-As
Hi,
We recently acquired a new company to which I created a whole bunch of distribution groups (50) in total.
I have now realised that the new staff want the ability to send on behalf of these distribution groups.
Is there anyway to convert a Mail-Enabled Universal Distribution Group to another group which allows me to manage Send-As permissions for them?
Regards,
TerryTerry
http://www.sucked-in.com
March 29th, 2010 5:42am
I don’t think you need to convert universal distribution group into universal security group in order giving mailbox users the “Send As” permission on the group
As I know, it only needs to convert when you want to give a group the permission on the public folder/mailbox folder
Please test it by creating the testing group:
Add-ADPermission -Identity "DG1" -User User1 -AccessRights ExtendedRight -ExtendedRights "send as"
Resources:
Stop Automatic Conversion of Universal Distribution Groups to Universal Security GroupsJames Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com
Free Windows Admin Tool Kit Click here and download it now
March 30th, 2010 5:32am
James-Luo,
I have tried doing this and get the following error:
Terry Sposato You are not allowed to send this message because you are trying to send on behalf of another sender without permission to do so. Please verify that you are sending on behalf of the correct sender, or ask your system administrator to help you get the required permission.
Is there anything else I need to do?
Regards,
Terry
Terry
http://www.sucked-in.com
March 31st, 2010 4:40am
“The Send As permission is not granted until after replication has occurred. Replication times depend on your Microsoft Exchange and network configuration. To grant the permission immediately, stop and then restart the Microsoft Exchange Information Store service”
---------Refer to <How to Grant the Send As Permission for a Mailbox>
How many times have you waited before sending the testing message?James Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com
Free Windows Admin Tool Kit Click here and download it now
March 31st, 2010 5:55am
I looked at the default interval for the replication to occur and it was 2 hours. I definitely waited longer than this.
When I add the Send As permissions on a mail-enabled public folder it works fine.Terry
http://www.sucked-in.com
April 1st, 2010 2:16am
Have you verified the permissions in the “Properties” of DG via ADUC?
That user you have granted the permission to, which groups does he/she belong to? I suspect there’s some inherited deny permission on the one of the groups that the user belongs to. Please use a test user to check the issue again with no membership on James Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com
Free Windows Admin Tool Kit Click here and download it now
April 1st, 2010 4:49am