Send As and Receive As permissions Denied to user. 1

[SKSysAdmin]

In Exchange 2003 SP2 we have a User account who used to be an administrator before installation of Service Pack 2 for Exchange (and various hotfixes). Now we have removed the user from the administrator group and need to add them so that they can have full control permissions as well as send as permissions to another user account.

For the life of me I can't find where this person's user account is inheriting the Deny rights from ?

I've looked in AD and in the exchange management console.

Any insight would be appreciated.

Thanks

 

[xmsre]

An Explicit allow overrides an inherited deny.

 

[TechyMcSe2k]

http://support.microsoft.com/kb/912918

Scroll down to Special rules for adminSDHolder Protected Accounts Hope this helps

Cliff, MCSE/MCSA/MCTS/CCNA/VCP/CCA

http://www.samtechconsulting.com

 

[xmsre]

It's on the security of the org object

http://support.microsoft.com/kb/823018

To se the security tab of the properties page set the showsecuritypage reg value to 1 on the client you run ESM from

http://support.microsoft.com/kb/312647

If you changed group membership or permissions, You have to wait for AD replication of the changes. Even then, it can take up to 2 hours to apply because it's cached by DSAccess

http://support.microsoft.com/kb/327378

Domain Admins get an inherited deny. In any event, and explicit allow overrides an inherited deny

http://support.microsoft.com/kb/292509

 

[SKSysAdmin]

Thanks for the tip xmsre!

I had completely forgotten about Delegation / Administrator roles in Exchange 2003...