Currently we are having issues adding send-as permission on Exchange 2007 EMC and Exchange management shell. Tried a couple of things via GUI and Exchange management shell: Set-mailbox -Grantsendonbehalf Add-ADPermission -extendrights send-as -user It would initially show on EMC, but after 10-15 minutes when being refresh, the user that was given rights to send-as would disappear on EMC. Domain Controller with all FSMO roles is on - Windows 2003 R2 SP2 Exchange 2007 Server CCR is on - Update rollup 3, SP1 Any ideas on this? Have went through other forums and no suggestions did the fix. Is this a bug on Exchange 2007?

Hello, Is it happening for all users in your environment? If you have other server/workstation where Exchange 2007 Management Tools installed then you can verify there. As you said it disappeared from EMC, Check if you can see the Send-As permission from EMS with Get-ADPermission cmdlet. Reference: How to Grant the Send As Permission for a Mailbox http://technet.microsoft.com/en-us/library/aa998291(EXCHG.80).aspx

Hi, it happen for my environment as well. and yes, it occurs for all users regardless setting via GUI or cmdlet any ideas what could have cause this issue ?

Hello Potzkie & Kelvin, Is your user member of any admin groups? If so then adminSDHolder might be preventing from the unauthorized permissions and setting standard ACLs back on them. Reference: adminCount, adminSDHolder, SDProp and you! http://theessentialexchange.com/blogs/michael/archive/2008/10/22/admincount-adminsdholder-sdprop-and-you.aspx

Hi, the users are normal domain users, and not within the critical object groups. any other possibility we had re-run exchange /domain prep and reset the legacy permission but to no avail. problem still persist. thanks

Kelvin,1) Open AD Users and computers. go to the Properties of "Users" + Security tab & click Advanced and make sure "allow inheritable from parents...." checked and do the same thing with user account.2) Open AD Users and computers / Built-in folder --> Users --> follow same step as above. -john

p.MsoNormal, li.MsoNormal, div.MsoNormal {margin-top:0pt;margin-right:0pt;margin-bottom:10.0pt;margin-left:0pt;line-height:115%;font-size:11.0pt;font-family:'Calibri','sans-serif';} .MsoChpDefault {;} .MsoPapDefault {margin-bottom:10.0pt;line-height:115%;} @page Section1 {size:612.0pt 792.0pt;margin:72.0pt 72.0pt 72.0pt 72.0pt;} div.Section1 {page:Section1;} I am having the exact same issue. Our users are stored in a separate OU than the default "Users" ou.Not all but many users I have looked at have the adminSDHolder attribute set (admincount = 1) when I view them with ANSI edit.For one user I am working with:He are not currently part of any protected group although it is possible that at one time his account or the account it was copied from was part of a protected group.When I change the admincount attribute to 0 in ANSI edit it changes back within an hour. This is also true if I make any other changes like the allow inheritable .. check box or try to set send as permissions. Thank you for the help, Sean<!--[if !supportLineBreakNewLine]--><!--[endif]-->

HI Experts, Apparently have checked on the recomendations provided earlier, but problem still persist. it is clear that although it affects most of the users in the domain, but some user accounts are not displaying this symptom. not certain what else did we miss out here. any advise?

Hi Guys, We have managed to some how figure out what was the cause of the problem. There's something wrong about the the account's permissionon AD that is conflicting. We are still on it. and we'll be providing feedback once resolved. Thanks!