We came across an issue today when we were trying to set Send As permissions for a specific mailbox and recieved the below error on Exchange 2010.
Active Directory operation failed on DC.domain.com. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03151E07, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.”
To resolve this we had to do the following
1, Open Active Directory Users and Computers and View advanced features
2, Find the user account for the mailbox with the issue and go to the properties of this account
3, Go to the security tab and hit advanced
4, Now check the box that says include inheritable permission and apply this setting
5, Now when you set the send as permission and all works
Exchange Management Shell command completed:
Add-ADPermission -Identity ‘CN=User,OU=Users OU,DC=Domain=DC=com’ -User ‘DomainUser1’ -ExtendedRights ‘Send-as’
Elapsed Time: 00:00:00”