ON Exchange 2010/13/19 when you try to give Send As Permissions for security group to users Group you may get this error :
Access is denied. Active directory response: 00000005: SecErr: DSID-03152857, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
To work around this issue, add the “modify permissions” permission for the Exchange Trusted Subsystem group to the organizational unit (OU) that contains the Distribution Group.
To do this, follow these steps:
- AS Admin , Open Active Directory Users and Computers.
- Select View > Advanced Features.
- Right-click the OU that contains the distribution lists, and then select Properties.
- Select Security > Advanced.
- Select Permissions > Add.
- In the Permissions Entry for <OU NAME> window, select Select a principal.
- In the Enter object name to select box, type Exchange Trusted Subsystem, and then select OK.
- In the Permissions Entry for <OU NAME> window, change the Applies to value to Descendant Group objects.
- To clear all permission selections that have been added by default, scroll to the bottom of the window and select Clear all.
- In the Permissions section of the window, select Modify permissions.
- To apply the permission and close all windows, select OK.
Now go to Ecp or from PowerShell (Add-ADPermission…. ) and give the Send-As permissions to the security group.
SHMUEL H.