Re: Accounts keep disappearing from Security Tab



Meinolf,
I thought it was working, but it just took longer than usual for the
account to be removed from the Access Control Settings dialog.



In article <ff16fb66a26a28caa91266346030@xxxxxxxxxxxxxxxxxxxx>,
Meinolf Weber wrote:

Hello Jon,

Check out this one's:

Assigning "Send As" Permissions to a user
It was brought to my attention that following the steps listed in KB327000
(http://support.microsoft.com/?kbid=327000), which applies to Exchange 2000
and 2003, to assign a user "Send As" permission as another user did not
appear
to work. I too tried to follow the steps and found that they did not work.
I know this feature works, so I went looking around for other documentation
on this and found KB281208 (http://support.microsoft.com/?kbid=281208) which
applies to Exchange 5.5 and 2000. Following the steps in KB281208 properly
gave an user "Send As" permission as another user. But I found the steps
listed in KB281208 were not complete either. The additional step that I
performed
was to remove all other permissions other than "Send As". Here are the
modified
steps for KB281208 that I performed (changes noted in blue):
1. Start Active Directory Users and Computers; click Start, point to
Programs,
point to Administrative Tools, and then click Active Directory Users and
Computers.
2. On the View menu, make sure that Advanced Features is selected.
3. Double-click the user that you want to grant send as rights for, and then
click the Security tab.
4. Click Add, click the user that you want to give send as rights to, and
then check send as under allow in the Permissions area.
4.5 Remove all other permissions granted by default so only the send as
permission is granted.
5. Click OK to close the dialog box.

So after I verified that the steps for KB281208 worked, I was curious as
to why the steps for KB327000 did not work. What I found was that Step #7
of KB327000 applied to the permission to "User Objects" instead of "This
Object Only". Here are the modified steps for KB327000 that I performed:
1. On an Exchange computer, click Start, point to Programs, point to
Microsoft
Exchange, and then click Active Directory Users and Computers.
2. On the View menu, click to select Advanced Features.
3. Expand Users, right-click the MailboxOwner object where you want to grant
the permission, and then click Properties.
4. Click the Security tab, and then click Advanced.
5. In the Access Control Settings for MailboxOwner dialog box, click Add.
6. In the Select User, Computer, or Group dialog box, click the user account
or the group that you want to grant "Send as" permissions to, and then click
OK.
7. In the Permission Entry for MailboxOwner dialog box, click This Object
Only in the Apply onto list.
8. In the Permissions list, locate Send As, and then click to select the
Allow check box.
9. Click OK three times to close the dialog boxes.

The KB articles were updated to include correct information. But, if you
had problems with this in the past, this might be why!

Unfortunal not all links inside are available, but maybe it helps.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Hi all,
about 3 months ago, I gave a user Send As rights on an account. THe
user
has been sending out email from this account 5 days a week until last
week, when it started bouncing back. A quick look at the sending
account's Security tab revealed that the user's account was no longer
listed. I'm finding that I have to keep adding her back in. In fact
any
user account that I try will disappear from the account list on the
Security tab within about 30 minutes. The Send As permission works
while
the account is there.
I see no replication errors or any other DC errors in event viewer.

Any suggestions about where to look for a solution?

Thanks,
-jb
.



Relevant Pages

  • Re: Custom rights
    ... Try giving user who is adding account View Only Exchange Administrator ... >> To add computers to the domain go to AD Users and Computers. ... you will have to manually configure permissions on that user object ... >>> Look into AD delegation, though you may need to do some custom ...
    (microsoft.public.win2000.security)
  • Re: Windows security Question
    ... > i wasn't able to have users from other computers from my LAN being ... > does it require that I create an account on my own computer for each ... in order to set up their privileges and permissions ... > time they try to access my shared folders? ...
    (microsoft.public.win2000.security)
  • Re: Cannot access Access database
    ... Hmmmmm That seems you don't have the Security tab when u click to see the ... file properties, am i right? ... account... ... > 'everyone' and gave it full control permissions to the folder. ...
    (microsoft.public.vsnet.general)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied ... I then added full permissions to my user account on both of these keys, ... that's for every app pool you create for every new web app on the ... local admin rights to the server hosting incoming email. ...
    (microsoft.public.sharepoint.windowsservices)