Access denied and Active Directory operation failed when I try to create a "user mailbox" or give user "send-as" or "receive as" permission for a Distribution Group in Exchange Server

Question

Access denied and Active Directory operation failed when I try to create a "user mailbox" or give user "send-as" or "receive as" permission for a Distribution Group in Exchange Server

Muhammad Abdul Baten Khan 1

Active Directory operation failed on… This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-03152DCD, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

I am getting the above message whenever I am trying to create a "User Mailbox" or give an existed user "send-as" or "receive as" permission for a Distribution Group in Exchange Server. Due to this message, I am not even sure how many service-access might be denied. Help me find a solution, please!

Joyce Shen - MSFT 16,701 Reputation points

2022-03-03T05:32:24.7+00:00

Hi @Muhammad Abdul Baten Khan

Does the suggestion below from Andy help?

Here is a thread discussed the similar issue which was caused by the "Exchange Trusted Subsystem" AD group doesn't have permissions to the AD object you are trying to manage.
Issue deleting Mailbox – Active directory response: 00000005: SecErr: DSID-03152612, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Joyce Shen - MSFT 16,701 Reputation points

2022-03-08T05:59:27.44+00:00

Hi @Muhammad Abdul Baten Khan

Any progress here about this issue so far? Have you tried creating a new OU in your environment?

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Joyce Shen - MSFT 16,701 Reputation points

2022-03-28T07:32:12.23+00:00

Hi @Muhammad Abdul Baten Khan

Is your issue resolved now? I am writing to see how everything is going on with this thread. If you still have further concern on this, please feel free to let us know.

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

1 answer

Your answer

Joyce Shen - MSFT 16,701 Reputation points

2022-03-03T05:32:24.7+00:00

Hi @Muhammad Abdul Baten Khan

Does the suggestion below from Andy help?

Here is a thread discussed the similar issue which was caused by the "Exchange Trusted Subsystem" AD group doesn't have permissions to the AD object you are trying to manage.
Issue deleting Mailbox – Active directory response: 00000005: SecErr: DSID-03152612, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Joyce Shen - MSFT 16,701 Reputation points

2022-03-08T05:59:27.44+00:00

Hi @Muhammad Abdul Baten Khan

Any progress here about this issue so far? Have you tried creating a new OU in your environment?

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Joyce Shen - MSFT 16,701 Reputation points

2022-03-28T07:32:12.23+00:00

Hi @Muhammad Abdul Baten Khan

Is your issue resolved now? I am writing to see how everything is going on with this thread. If you still have further concern on this, please feel free to let us know.

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 1

Andy David - MVP 157.4K MVP Volunteer Moderator

Known Issue:
https://support.microsoft.com/en-us/topic/access-denied-when-you-try-to-give-user-send-as-or-receive-as-permission-for-a-distribution-group-in-exchange-server-505822f4-8dca-7b97-d378-c8416553f6d2

Muhammad Abdul Baten Khan 1 Reputation point

2022-03-03T12:59:21.523+00:00

Thank you gentleman @Andy David - MVP for your answer!

Actually, I have been practicing Exchange Server thingy on my VMWare environment. Before I looked for help from here the Microsoft community regarding this issue, I deleted the above-mentioned Distribution Group and then I tried to create another Distribution Group and got this message again. Then I tried several things like creating a new User Mailbox and got the same message again.

So, I couldn't really try the solution you gave me since there is no OU and Distribution Group in my VMWare environment right now. Could you plz help me with this specific solution that I can create a new User Mailbox first and hopefully the other solutions will already be there in the line?
Andy David - MVP 157.4K Reputation points MVP Volunteer Moderator

2022-03-03T13:20:09.757+00:00

You can apply those changes directly to the group as well if you want.
But to make it easier, may just create a new OU, make the changes and then create the new group in that OU.
EnterpriseArchitect 6,041 Reputation points

2023-04-19T13:31:15.3933333+00:00

@Andy David - MVP ,
Does the Step #9 is really necessary to delete all default permissions ?
Osama Abdelhalim (Convergys International Europe) 0 Reputation points Microsoft External Staff

2023-10-17T11:20:48.8833333+00:00

Hello, everyone.
Can anyone confirm if Andy's solution worked or not?

Share via

Access denied and Active Directory operation failed when I try to create a "user mailbox" or give user "send-as" or "receive as" permission for a Distribution Group in Exchange Server

1 answer

Your answer