Forum Discussion

Ted123's avatar
Ted123
Copper Contributor
Mar 11, 2020

Exchange 2016 - Problem adding users to Send As or Send on Behalf

I just took over as an exchange admin at a company and am trying to perform a relatively simple task.  All I need to do is to grant a user "Send As" and "Send on Behalf".  Simple huh?   The problem...
2016
Exchange Server
Ted123's avatar
Ted123
Copper Contributor
Mar 13, 2020

Dan_Snape 

 

No, for some reason it comes back with nothing found.  In the list I have 545 items, (I bumped up the default from 5000 items returned to 1,000), all but 3 or 4 are security groups.  For the life of me I can't figure out why there are 3 or 4 users in that list and not any others.

 

 

KevinCallanan's avatar
KevinCallanan
Brass Contributor
Mar 16, 2020

Ted123 are your users in a resource forest? Are the user accounts associated with mailboxes enabled or disabled in AD? 

 

The UI in Exchange and Skype (for that matter) often hide disabled accounts that aren't correctly set to resource accounts. 

 

If you are able to get to the ECP you would likely can connect to the Remote PowerShell endpoint so you can run the commands required without hitting a jump box first. 

 

I have the following script to pull a remote session (save as a .ps1) and replace [Exchange-FQDN] and [@contoso.local]

 

$account = read-host "What is the userid to use for EMS shell?: (e.g. adm_ntid) "
$accounttouse = $account + "[@contoso.local]"
$Cred = Get-Credential $accounttouse
$ExSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://[ExchangeServer-FQDN]/PowerShell/ -Credential $Cred -Authentication Kerberos
Import-PSSession $ExSession

  • lewischris123's avatar
    lewischris123
    Copper Contributor
    Jul 27, 2021

    KevinCallanan 

    I have encountered this same issue

    FIX : (check your config files in the Pickers dir)
    I have a hybrid environment and found that   "RemoteUserMailbox" was missing in the string for searches in SendAsPicker.aspx and also SendOnBehalfOfPicker.aspx

    \Program Files\Microsoft\Exchange Server\V15\ClientAccess\ecp\Pickers\

    • GaryLosAngeles's avatar
      GaryLosAngeles
      Copper Contributor
      Dec 09, 2023
      Thank you so much! Fix still works for in December 2023!
    • KLumley's avatar
      KLumley
      Copper Contributor
      May 23, 2023

      thekmumm I'm on this site troubleshooting a completely different problem but this suggestion will solve a problem I've been fighting for weeks.... I registered for no other reason then to say thank you and if we ever meet IRL i owe you a beer!

      • lewischris123's avatar
        lewischris123
        Copper Contributor
        May 23, 2023
        I vaguely remember this issue an had been looking for something else and thought I'd hope in here and share. Glad it was helpful to you and the others that I see have found this useful.
    • tbwork150's avatar
      tbwork150
      Copper Contributor
      Oct 29, 2021
      This answer is AMAZING. I don't know how you found this, but it saved me. Also in our case, once I updated the .aspx page, I ran into a permission error ("Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0").

      The cause? "By default, Exchange Trusted Subsystem is not granted the "modify permissions" permission. This causes the Add-ADPermission cmdlet to fail with an Access Denied error in some circumstances." The answer was to modify the OU container holding the group(s) and allow "Exchange Trusted Subsystem" rights to modify the groups.

      The steps are here:
      https://support.microsoft.com/en-us/topic/access-denied-when-you-try-to-give-user-send-as-or-receive-as-permission-for-a-distribution-group-in-exchange-server-505822f4-8dca-7b97-d378-c8416553f6d2

      I hope this helps someone else out!

Resources