Exchange – Insufficient Access Rights when trying to modify permissions on a public folder

Hi,

Today I faced a new problem, on some Public folders I wasn’t able to change the send as permission. When I tried to configure the send as permission trough the EMC or Powershell I goth this error message:

Summary: 1 item(s). 0 succeeded, 1 failed. Elapsed time: 00:00:00

DOMAINNAMEUSERNAME Failed

Error: Active Directory operation failed on ADSERVER.DOMAINNAME.COM. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights. Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.3.123.3&t=exchgf1&e=ms.exch.err.Ex6AE46B

Exchange Management Shell command attempted: Add-ADPermission -Identity 'CN=PUBLICFOLDER,CN=Microsoft Exchange System Objects,DC=DOMAINNAME,DC=COM' -User 'DOMAINNAMEUSERNAME-ExtendedRights 'Send-as'

Elapsed Time: 00:00:00

This what what you need to do to solve this problem:

  1. Create a new public folder and see if you can add the Send-As permissions to it or you will have the same error above. If that the case stop here and this will not sort your issue or may be yes (let me know please)
  2. Open ADSIEdit and check that the ownership of the new folder by going to Default naming context -> DC=domainname,DC=co,DC=uk ->CN=Microsoft Exchange System Objects -> right click on the object of the PF you just created and select properties then Advanced, Ownership and note the name of who owned the public folder (in my case the servername$)
  3. Repeat step 2 for the Public Folder object in question and go to the ownership tab in (in my case it said system is the owner) change it to one that worked in step 2 (in my case the servername$)
  4. Save and try again the send as permission again and it should work.

 

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.