Hi there,Very peculiar issues. We have a user accessing her Exchange 2007 maibox via OWA light (Firefox) and she claims she cannot send to external recipients using this or any other clients. She gets the "You do not have the required permissions to send messages from this mailbox. For assistance, contact technical support for your organization" message.The Exchange "Full" and "Send as" permissions are exaccly the same as mine for instance (("NT Authority\Self perms visible)) and I can send fine via OWA Light.I am stumped as to what is going wrong. She claims she can send fine to users within out organisation but when she tries to send to a non-Exchange Org user it automatically gives the message above as she tries to send. I get the impression she is sending to multiple BCC users but would that have an impact and give the message it is giving. I've asked her for more details but in the meantime does anyone have any thoughts?Tom

Hi there,Honestly remote admin to her machine and actually see it for yourself. She could have permissions to view someone elses mailbox (top right hand corner for OWA in Exchange 2007) and inadvertently done that and is now trying to send as that for example (although that wouldn't explain the supposed internal sending).Oliver

Please logon problematic users mailbox via OWA on your machine, try to send a text test mail to any external recipient, e.g. yahoo or Hotmail.

Hi guysThanks for the suggestions but I certainly am not entiteled to share the logon credentials of any of our users as this is one of the fundamentals of our environment, privacy is sacrosant. All I can potentially do is have the user demonstrate what is happening so I will see if I can use a remote managment tool to connect to the PC in question.

That's best policy really.Let us know how you get on, this is more than likely user error.Oliver

Temporarily reset/change the users password for yourtroubleshooting purposes.I agree with NEVER sharing credentials because so many people use the same password everywhere, and once a password is given,its notsecret anymore. But this does not mean that you cannot use a temporary one for a little while. That being said, its always a good idea to use remoting tools so the user can see whats going on as well.Now onto the question at hand. The issue initially appears to be a permissions one. I recommend that you use the Exchange CmdShell to audit the security permissions on the mailbox."Get-MailboxPermission <Mailbox Identity> | FL"This will give you a full listing of each security principal and its permissions. The one you should be most interested in is the "NT AUTHORITY\SELF"Default permissions are.AccessRights : {FullAccess, SendAs, ReadPermission}Deny : FalseInheritanceType : AllUser : NT AUTHORITY\SELFIdentity : <ojects AD container>IsInherited : FalseIsValid : TrueObjectState: UnchangedThe users actual account name should not appear in this list. If it is I would recommend that you remove it.Additionally you may wish to verify the security associated with the AD account itself using ADUC.Make sure that the account in question is inheriting from its parent as well.Hope some of this helps!jwDeaton

I shall once again try to contact this person and run through some checks. Then I'll let you all know the score and award some much deserved points.

Hey,If she isn't hounding you still then it is most likely user error. You'd be getting phone calls saying 'I need my email!!' everyone 30 minutes otherwise.;-)OliverOliver Moazzezi | Exchange MVP, MCSA:M, BA (Hons) Anim | http://www.exchange2007.com | http://www.exchange2010.com | http://www.cobweb.com |