Exchange 2016, INSUFF_ACCESS_RIGHTS while giving 'Send As' permisisons

Question

Hi

Windows 2016 standard with Essentials role + Exchange 2016.

When I run this ;

Add-AdPermission -Identity "My Identity" -User MyUser -AccessRights ExtendedRight -ExtendedRights "Send As"  

I get this error;

Active Directory operation failed on MYDC.AD.MYDOMAIN.COM. This error is not retriable. Additional information:  
Access is denied.  
Active directory response: 00000005: SecErr: DSID-03152D7B, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0  
    + CategoryInfo          : WriteError: (0:Int32) [Add-ADPermission], ADOperationException  
    + FullyQualifiedErrorId : [Server=MYMAILSERVER,RequestId=48d7aa3b-b3be-4577-b367-348b5b842c5e,TimeStamp=18/07/2022  
    16:04:33] [FailureCategory=Cmdlet-ADOperationException] B9BCFD69,Microsoft.Exchange.Management.RecipientTasks.Add  
  ADPermission  
    + PSComputerName        : MYMAILSERVER.ad.MYDOMAIN.com  
  

What is the resolution please?

Thanks

Regards

Answer 1

Hi @-- -- ,
Based on the search, the problem may be Exchange Trusted Subsystem is not granted the "modify permissions" permission. Please follow these steps to ensure Exchange Trusted Substystem has the required permissions:
• Open Active Directory Users and Computers.
• Click View, and then click Advanced Features.
• Right-click the OU that contains the user and then click Properties.
• In the Security tab, click Advanced.
• In the Permissions tab, click Add.
• In the Enter object name to select box, type Exchange trusted subsystem, and then click OK.
• In the Object tab, select This object and all descendant’s objects in the Apply onto list, locate Modify Permissions in the Permissions list, and then set it to Allow.
• Click OK
• Make sure above option is checked on all OU’S listed in the object path of the user object
For details, please refer to the documentation:
https://support.microsoft.com/en-us/topic/access-denied-when-you-try-to-give-user-send-as-or-receive-as-permission-for-a-distribution-group-in-exchange-server-505822f4-8dca-7b97-d378-c8416553f6d2
You can also try other troubleshooting steps from this article:
https://learn.microsoft.com/en-us/exchange/troubleshoot/administration/insufficient-access-rights-perform-operation

---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @-- -- ,

Thanks for your feedback above which shared more information and glad to know that your issue is resolved now! Since our forum has the policy that The question author cannot accept their own answer. They can only accept answers by others, and according to the scenario introduced here: Answering your own questions on Microsoft Q&A

I would make a brief summary of this post so that other forum members could easily find useful information here:

[Activating lagged copies - Summary]

Issue Symptom:
Exchange 2016, INSUFF_ACCESS_RIGHTS while giving 'Send As' permisisons

Solution:
create a new user for "My Identity"

You could "Accept Answer" for this summary to close this thread, and your action would be helpful to other users who encounter the same issue and read this thread. Thanks for your understanding!

---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.