HOW TO: Assign SendAs right using Exchange shell

by Bharat Suneja

In Exchange Server 2007 (and Exchange 2010), recipients are managed from the Exchange Management Console (EMC) or Exchange Management Shell (aka the Shell). EMC does not have a Security tab for recipients.

You can still use Active Directory Users & Computers (ADUC) console to modify permissions on a recipient, as the documentation suggests [“How to Grant Send As Permissions for a Mailbox“] – and in this case, assign the Send As permission. Select the recipient in ADUC > select Properties > select the Security tab.

You can also use the Exchange Shell to quickly assign the SendAs right (for example, on a Distribution Group) to a user:

Add-AdPermission “Group Name” -user “User Name” -AccessRights
extendedright -ExtendedRights “send as”

Documentation for Add-ADPermission Exchange 2007 | Exchange 2010

icon - updates.gif
Exchange Server 2007 SP1 includes a Manage Send As Permissions wizard, similar to the Full Mailbox Access wizard found in the RTM version.

  1. In EMC, right-click the recipient for which you want to manage Send As permission > select Manage Send As Permission

  2. In the Manage Send As Permission wizard, click the Add button to add the user that you want to assign the Send As permission to.

{ 5 comments… read them below or add one }

Pete September 18, 2007 at 12:45 pm

THis command worked great for me, thanks! I am, however, having difficulty piping users with this command… I.E… Get-user -organizationalunit NAMEOFOU | add-adpermission ….etc. It returns an error saying the command is not able to be pipelined. Do you know the correct usage of this command?


Jason October 4, 2007 at 4:05 pm

I had the same problem, I don’t want to do one at a time, I want to add the sendas permission on a large group of users, I tried the get-user and then pipe add-adpermission but got an error


Bharat Suneja November 29, 2007 at 4:55 pm

You need to do a Get-Mailbox instead of Get-User. You can constrain that based on -OrganizationalUnit or -Server parameters.

Alternatively, you can do this for members of a Distribution Group – Get-DistributionGroupMember “Dist Group Name”

You can further constrain Dist Group members to a particular recipient type:
Get-DistributionGroupMember “DG Name” | where {$_.RecipientType -eq “UserMailbox”}

Pipe the above command to Add-ADPermission.


hus November 16, 2008 at 2:47 pm

how to take back “send as” permisson on org. unit?


dgullick October 1, 2012 at 11:48 am

I had created a distribution group as requested by our Project Management group. Later they changed it with a request to be able to “send as” from the people in the group. I had to change the group to universal, then change it from a distribution group to a security group. Then I had to go to an administrative powershell to run these commands to get it to work. Add-ADPermission “Project Management group” -user “tsmith” -accessrights extendedright -extendedrights “send as”


Leave a Comment

{ 2 trackbacks }

Previous post:

Next post: