Re: "Send as" works incorrectly

From: Boris Lokhvitsky (msexpert_at_community.nospam)
Date: 02/07/05 

Date: Mon, 7 Feb 2005 11:32:28 -0800

"Rocks" <rocks12@hotmail.com> wrote in message
news:BYCdnTpvu665uJnfRVn-tg@adelphia.com...
> Boris Lokhvitsky wrote:
>
> > This may seem a silly question, but Internet is surprisingly full of
> > descriptions of problems that people have when tryinmg to use the "send
> > as" feature. I am troubleshooting my own case for the fair two days
> > already, still getting some weird results. So, if somebody can help...
> > here goes.
> >
> > Exchange 2003 SP1 on Windows 2003. Client - Outlook 2003 (connected as
RPC
> > over HTTPS though I think it doesn't matter).
> > Two users - UserA and UserB. Both are just ordinary users, members of
> > "Domain Users" group only. UserB account is disabled.
> > UserA needs to be able to send e-mails as if they are coming from
UserB -
> > specifying the UserB in the "From" field when composing an e-mail.
> >
> > Theer are multiple solutions described in MS KB articles. All different,
> > and articles Q327000, 327174, and 281208 even contradict each other
> > describing where security permission "Send as" should be applied - all
> > saying different things.
> >
> > In my case, I did the following:
> > 1. In UserB properties, Security tab, click Advanced and grant the "Send
> > As" permission to UserA, select "Apply onto" - "User objects".
> > 2. In UserB properties, Exchange Advanced, Mailbox rights, grant full
> > mailbox access rights to UserA. This doesn't seem to be necessary but
> > shouldn't hurt anyway.
> >
> > It works fine if UserA is member of Exchange administrators group
> > (Exchange View Only Admin role). However, it doesn't work when he is
> > removed from this group. I get error message "You don't have permissions
> > to perform this operation on that object" when clicking the "Send"
button.
> >
> > Can anybody help? Not only to make it work, finally, but to bring
clarity
> > what is the necessary and sufficient set of rights/privileges for the
user
> > to be able to "send as" other user within the same Exchange
organization?
> >
> > Thanks a lot in advance,
> > Boris
>
> After you added the permissions how long did you wait before trying to
> Send-As? I have run into this before and can't explain why but if we let
> this sit for about 2hrs it works.
>
> Pat

Nah, I have replication working fine in my AD. Don't have to wait that long.

Actually, I finally managed this to work. To remind you, described procedure
worked for users with administrative privileges, but it failed when these
were revoked. Apparently, something with permissions disappearing. So, the
trick that worked for me was:

1. In UserB properties, Security tab, click Advanced and grant the "Send As"
permission to UserA, select "Apply onto" - "User objects".
2. Now click Apply, wait for a few seconds then click edit again and
_change_ the scope of "Apply onto" to "This object and all child objects".

This sounds stupid to me, but it worked... and, actually, it just fiollows
the _exact_ steps of Q327174. I should have trusted this KB article more. :)

Regards,
Boris