Home » Exchange Server 2010 » Send on Behalf Permissions for a Distribution Group

Translate:

Archives

Send on Behalf Permissions for a Distribution Group

 

“Send As” Permissions to configure a Mailbox so that users than the Mailbox owner can use that mailbox to send messages. After this permission is granted, any messages that are sent from the mailbox will appear as if they were sent by the mailbox owner.

 

Exchange requires that an e-mail address is resolved in the From field

 

Errors that we get when we don’t have Send As Permissions

 

In Outlook, users will receive the following errors when attempting to send a message on behalf of a mailbox that is hidden from address lists:

 

  • Online mode   When users press Send, they will receive the following error: “You do not have permission to send on behalf of the specified user.”
  • Cached Exchange Mode   Outlook initially sends the message, but users will receive a non-delivery report (NDR) containing the following message: “You are not allowed to send this message because you are trying to send on behalf of another user without permission to do so. Please verify that you are sending on behalf of the correct sender, or ask your system administrator to help you get the required permission.”

 

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the “Send As permissions” entry in the Mailbox Permissions topic.

sendas-on-behalf-of-png

 

If they reply to the message it will go to the Sales Team distribution group, not the individual sender.

 

 

Here we will can perform this task adding Send As permissions to Mailbox in two ways :

 

Using Powershell

Using GUI

 

Let’s see using Powershell

 

Below is the command to perform the task

 

 

Now this Add-ADPermission cmdlet to manage Send As permissions for a mailbox. Here you must also specify the Send As permission with the ExtendedRights parameter. For example, to add the Send As permission to Exchangepraku on the user mailbox Praveen Eppili, need to use the above command.

 

Using GUI

 

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the “Send As permissions” entry in the Mailbox Permissions topic.

  1. In the console tree, click Recipient Configuration.
  2. In the result pane, select a recipient. You can manage Send As permission for the following recipient types:
    • Discovery mailboxes
    • User mailboxes
    • Resource mailboxes
  3. In the action pane, click Manage Send As Permission.
  4. On the Manage Send As Permission page, select the users or groups to which you want to grant the Send As permission or from which you want to remove the permission.
    • Add   Click this button to open the Select User or Group dialog box. Use this dialog box to select the users or groups to which you want to grant the Send As permission.

 

 Select a user or group, and then click this button to remove the Send As permission from that user or group.

  1. On the Completion page, review the following, and then click Finish to close the wizard:
    • A status of Completed indicates that the wizard completed the task successfully.

 

 

  • A status of Failed indicates that the task wasn’t completed. If the task fails, review the summary for an explanation, and then click Back to make any configuration changes.
  1. Click Finish close the wizard.

 

When the above task is completed the replies go to distribution group not the individual user.

 

 

Now we need to grant the send on behalf permission to all members of the group, which can save on administrative effort over time if all group members should be allowed to send on behalf of the group they are in.

 

 

Adding Additional Users or Groups to Send on Behalf Permissions

It is important to realize though that this setting is easy to overwrite if you try to add another user or group when there is already one that has been granted send on behalf permissions.

 

To demonstrate, here is the distribution group with the Sales Team granted send of behalf permissions.

 

 

Now if we use the same command as shown earlier to grant another group send on behalf permissions, it overwrites the existing setting instead of appending it.

 

 

we need to use a different method to add additional users or groups to the send on behalf permissions.

 

 

Next, read the new group into a second variable.

 

 

If you were adding an individual user you would just use Get-User instead of Get-DistributionGroup.

 

Then, append the distinguished name of the second group into the GrantSendOnBehalfTo value from the first group.

 

 

 

You can see now that both the Netsaints and HelpDesk Team now have send on behalf permissions to the Sales Team distribution group.

 

Happy Learning !!

 

Praveen

MCTS | Exchange Server


Leave a comment

Translate »