Share via

Manage Send As Permissions for a Mailbox

  • Article

Applies to: Exchange Server 2010

Use Send As permissions to configure a mailbox so that users other than the mailbox owner can use that mailbox to send messages. After this permission is granted, any messages that are sent from the mailbox will appear as if they were sent by the mailbox owner.

The Send As permission isn't granted until after replication has occurred. Replication times depend on your Exchange and network configuration. To grant the permission immediately, stop and then restart the Microsoft Exchange Information Store service.

Also, before you perform this procedure, be aware that you cannot send e-mail messages on behalf of a mailbox if the mailbox is hidden from address lists. When sending a message, Exchange requires that an e-mail address is resolved in the From field. In the case where a message is sent on behalf of a mailbox that is hidden from address lists, the SMTP address is interpreted as an address that isn't from your organization (known as a foreign address) and is rejected. For information about how to change your mailbox settings, see Configure User and Resource Mailbox Properties.

In Outlook, users will receive the following errors when attempting to send a message on behalf of a mailbox that is hidden from address lists:

  • Online mode   When users press Send, they will receive the following error: "You do not have permission to send on behalf of the specified user."
  • Cached Exchange Mode   Outlook initially sends the message, but users will receive a non-delivery report (NDR) containing the following message: "You are not allowed to send this message because you are trying to send on behalf of another user without permission to do so. Please verify that you are sending on behalf of the correct sender, or ask your system administrator to help you get the required permission."

Looking for other management tasks related to mailbox permissions? Check out Permissions to Manage Mailbox Servers.

What Do You Want to Do?

  • Use the EMC to manage Send As permissions for a mailbox
  • Use the Shell to manage Send As permissions for a mailbox

Use the EMC to manage Send As permissions for a mailbox

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Send As permissions" entry in the Mailbox Permissions topic.

  1. In the console tree, click Recipient Configuration.
  2. In the result pane, select a recipient. You can manage Send As permission for the following recipient types:
    • Discovery mailboxes
    • User mailboxes
    • Resource mailboxes
  3. In the action pane, click Manage Send As Permission.
  4. On the Manage Send As Permission page, select the users or groups to which you want to grant the Send As permission or from which you want to remove the permission.
    • Add   Click this button to open the Select User or Group dialog box. Use this dialog box to select the users or groups to which you want to grant the Send As permission.
    • Remove icon   Select a user or group, and then click this button to remove the Send As permission from that user or group.
  5. On the Completion page, review the following, and then click Finish to close the wizard:
    • A status of Completed indicates that the wizard completed the task successfully.
    • A status of Failed indicates that the task wasn't completed. If the task fails, review the summary for an explanation, and then click Back to make any configuration changes.
  6. Click Finish close the wizard.

Use the Shell to manage Send As permissions for a mailbox

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Send As permissions" entry in the Mailbox Permissions topic.

Use the Add-ADPermission cmdlet to manage Send As permissions for a mailbox. When you use the Add-ADPermission cmdlet, you must specify the name of the mailbox on which the Send As permission should be added and the mailbox that should be granted the permission. Because the Add-ADPermission cmdlet controls many permissions, you must also specify the Send As permission with the ExtendedRights parameter. For example, to add the Send As permission to contoso\kim on the user mailbox John Simpson, use the following command:

Add-ADPermission "John Simpson" -User "Domain\User" -Extendedrights "Send As"

For detailed syntax and parameter information, see Add-ADPermission.