We have a few shared mailboxes that users add into their outlook profile. We need these users to be able to send as, not send on behalf of. The issue is that when they try to send the message from the shared mailbox, the message bounces stating that they do not have send on behalf of. They do have send as, not send on behalf of.

Hello,I would like you to check the following KB'sFor Exchange 2007 Servers:- Get-ADPermissionhttp://technet.microsoft.com/en-us/library/bb125183.aspxIf the above list matches all the users you want to remove the permission for, you can simply pipe it to Remove-ADPermission:get-adpermission "mailbox database" | where {$_.ExtendedRights -like- Alternatively, you can do it for each user:Remove-ADPermission "mailbox database" -User "foo" -ExtendedRights receive-asRemove-ADPermissionhttp://technet.microsoft.com/en-us/library/aa996048.aspx For Exchange 2000/2003 ServersGrant Full Mailbox Rights to an Administrator on Exchange 2000/2003http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htmHow to Allow Mailbox Accesshttp://technet.microsoft.com/en-us/library/aa996343.aspxArun Kumar | MCSE - 2K3 + Messaging | ITIL-F V3

Please verify if the Send As has been granted based on this article (For exchange 2003) If thats an exchange 2007 environment, please see this article Resources: Assigning "Send As" Permissions to a user If issue still occurs after referred the guides above, please check the permissions as Arun suggested for more info, and please also provide the exact error info about the message bounces stating that they do not have send on behalf of Also, please give the procedure or related KB you used for this task, so I can simulate it on my lab, which would help to find the root cause and resolution

Thanks for the info, i do understand how to grant send as and send on behalf of. The issue is user1 has full and sendas access to user2 user1 has added user2's mailbox into his user1 profile. When user1 tries to sendas user2 exchage denies the message saying user1 doesn't have send on behalf of rights.

Is user1 member of Enterprise Admin or Domain Admin groups? If so, these domain groups have send-as block for all users by default.Amit Tank | MVP - Exchange Server | MCITP:EMA MCSA:M | http://ExchangeShare.WordPress.com

No, they are standard users.

I guess the question is can you do a sendas from your own mailbox, or can you only send on behalf of?

I guess the question is can you do a sendas from your own mailbox, or can you only send on behalf of? Can you pleaseelaboratethis more? Possibally with an example...Amit Tank | MVP - Exchange Server | MCITP:EMA MCSA:M | http://ExchangeShare.WordPress.com

I lkeneston have sendas rights to jdoe's mailbox. In outlook i open a new message, show the from field, and in the from field type jdoe. When i click send it returns stating that i do not have send on behalf of rights. I do not want the have the send on behalf of, just send as.

Ok, I tested in the lab (Exchange 2007): Regular user: Jack B, Renee W Jack has Renees Full Access and Send As permission. Send as Renee from Jacks mailbox, I can reproduce the issue just like yours Error: You are not allowed to send this message because you are trying to send on behalf of another sender without permission to do so. Please verify that you are sending on behalf of the correct sender, or ask your system administrator to help you get the required permission Troubleshooting: 1. Run Get-MailboxPermission Renee W | Fl > c:\rperm.txt, it shows right permission =========== AccessRights : {FullAccess} Deny : False InheritanceType : All User : Contoso\jack Identity : Contoso.com/Users/renee W IsInherited : False IsValid : True ObjectState : Unchanged 2. Run Get-AdPermission Renee W | Fl > c:\radperm.txt, it shows right permission as well =========== User : Contoso\jack Identity : Contoso.com/Users/renee W Deny : False AccessRights : {ExtendedRight} ExtendedRight : {Send-As} IsInherited : False Properties : ChildObjectTypes : InheritedObjectTypes : InheritanceType : All 3. Launch ADSI Editor, check the permissions of Renee in the AD a. Launch ADSI Editor b. Go to the Properties of Renee, in the Security tab, confirm theres only one Jack B in there Notes: If theres duplicated entry for Jack in the Security tab, same symptom will occur 4. Restart Information Store service, which solves the problem. Jack can send as Renee successfully Notes: The changes to the permission on the mailboxes doesnt take effect immediately since Mailbox Cache configuration information gets refreshed on period bases(by default 2 hours), to immediately refresh the Store Cache we can restart Information Store service If the troubleshooting steps above didnt help, please try the following: 1. Please try the suggestions below on problematic users outlook, and reproduce the issue a. Set the outlook profile to Online and the delivery of the emails set to Mailbox (not PST) b. Reset the nickname cache (KB 287623) 2. If you didnt try to reproduce the issue to the new created test mailboxes, please do it, see if the issue were only appeared on existing users

James-Luo, Thank you, but this doen't sem to be the issue, i followed these steps to the T except the .pst files as we do not allow them.

Do you receive the same error message as in my last post when issue occurs? Does the Jdoes mailbox output the right permissions as in my last post? You have checked LKeneston's permission on Jdoe's mailbox and AD user object just like my step 1 to 3, right? Please create two test mailboxes, and see if we can reproduce this issue on fresh new mailboxes

HelloThe users must have the correctsecurity permissions on this mailbox to send as that user , these users should be a member of a group and that group should be added with full security permissions on that shared mailboxnote : giving this group send on behalf of permissions from within the delivery option tab in AD is not sufficentWithin the outlook clientyou can thenclick options and add the from fieldHope this helps