Exchange Server Forums

permission issue??

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Message Routing >> permission issue??

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

permission issue?? - 31.Jan.2005 1:57:00 PM

Shrapnel

Posts: 23
Joined: 26.Sep.2003
From: UK
Status: offline

Hi,
I have a newly setup Exchange 2003 box and while most users are working ok, I have one user that is receiving:

"You do not have permission to send to this recipient"

Whenever they try to send external email, they can send to internal recipients with no problems.

There is a Group Policy acting on this user, but other users in the same policy are able to send external mail.

Does anyone know how to resolve this?

The exact NDR returned is:

Your message did not reach some or all of the intended recipients.

Subject: Ref: Meeting
Sent: 31/01/2005 10:53

The following recipient(s) could not be reached:

emailuser@any.co.uk on 31/01/2005 10:53
You do not have permission to send to this recipient. For assistance, contact your system administrator.
MSEXCH:MSExchangeIS:/DC=local/DC=dname:SERVERNAME

Kind Regards,

Jon.

[ January 31, 2005, 02:15 PM: Message edited by: Shrapnel ]

Post #: 1

Featured Links*

RE: permission issue?? - 2.Feb.2005 3:00:00 PM

Shrapnel

Posts: 23
Joined: 26.Sep.2003
From: UK
Status: offline

I have tied this down to this one user experiencing this problem.

They only get this error if they try to send an attachment with their mail.

It also applies if they try to send attachments to internal addresses also.

Is there a specfic area where permissions to send attachments exists?

(in reply to Shrapnel)

Post #: 2

RE: permission issue?? - 18.Feb.2005 1:00:00 PM

siball

Posts: 6
Joined: 25.Nov.2004
From: UK
Status: offline

I'm having an identical issue with one particular user on our Exchange 2003 system. Have you found a cure for this yet?? The strange thing is that it seems to be a sporadic issue for this user and it's only occasionally that he encounters this error when sending mail internally or externally.

[ February 18, 2005, 01:05 PM: Message edited by: siball ]

(in reply to Shrapnel)

Post #: 3

RE: permission issue?? - 3.Mar.2005 12:05:00 AM

Acrosser

Posts: 1
Joined: 1.Mar.2005
From: Portland, OR USA
Status: offline

I am having this same problem with Exchange 2000.

This user tries to send email to a valid address on one specific external domain.

The message is returned as follows:
The following recipient(s) could not be reached:

'Lisa Dolezal' on 3/2/2005 9:02 AM
You do not have permission to send to this recipient. For assistance, contact your system administrator.
<mail.leoketel.com #5.7.1 smtp;550 5.7.1 Requested action not taken: message refused>

I believe they are trying to attach documents as well. What gives? It doesn't look like anyone at Microsoft is working on or responding to this issue.

Is there a KB white doc about it?

~Tony

(in reply to Shrapnel)

Post #: 4

RE: permission issue?? - 7.Mar.2005 3:06:00 PM

Guest

Same problem on Exchange 2003. No solution yet. This time is only seems to be a problem through OWA.

(in reply to Shrapnel)

Post #: 5

RE: permission issue?? - 25.Mar.2005 2:01:00 AM

ajackson1204

Posts: 10
Joined: 25.Mar.2005
From: New Jersey
Status: offline

What other Antivirus software are you running on your systems? I had a similar problem with Symantec mail security. You also mentioned group policys. Check to see if the user belongs to another group that could be limiting his access. Also check his Exchange permissions, because a users permissions can be set in Exchange also
Hope some of this helps, if not let me know cause I am always trying to find new solutions.

(in reply to Shrapnel)

Post #: 6

RE: permission issue?? - 26.Mar.2005 5:54:00 PM

user1

Posts: 1
Joined: 26.Mar.2005
From: pakistan
Status: offline

try this

in small bussiness server administrators console
right click "small business smtp connector"

click the "address space" tab

now click to select the "allow messages to be relayed to these domains" check box

apply -> ok

(in reply to Shrapnel)

Post #: 7

RE: permission issue?? - 4.Apr.2005 9:59:00 PM

Hoesle

Posts: 28
Joined: 25.Nov.2003
From: Office
Status: offline

Hello, Some of our users are receiving the same message. We are Exchange 2003 and Exchange 5.5 mixed mode. Most of our users are in Excahnge 2003. A user that is in Exchange 2003 and sending an email to only exchange 2003 receives this message. So it doens't seem to be related to mixed mode. I dont believe it is specific to sending an attachment. The following message from the system administrator is this. It is sporadic.
Your message did not reach some or all of the intended recipients.

Subject: RE: 20033659
Sent: 4/1/2005 10:45 AM

The following recipient(s) could not be reached:

Alisa Hofmann (Kern) on 4/1/2005 10:45 AM
You do not have permission to send to this recipient. For assistance, contact your system administrator.
MSEXCH:MSExchangeIS:/DC=com/DC=xxxxxxxx/DC=us:xxxx
I have checked the mailbox rights and everything seems to be o.k.

Thanks, darh

(in reply to Shrapnel)

Post #: 8

RE: permission issue?? - 11.Apr.2005 9:58:00 PM

SteveT2000

Posts: 2
Joined: 11.Apr.2005
From: Boston
Status: offline

We are experiencing the same thing. I am runing exch2k3 in a mixed mode with 5.5. No users are left on 5.5. I have narrowed it down to meeting requests. It also appears that it is requests from one server to another. Have not seen this error between 2 users on the same server. Unfortunately it is very sporadic. I'm also not seeing anything in the event viewer on the Exchange server

(in reply to Shrapnel)

Post #: 9

RE: permission issue?? - 13.Apr.2005 4:07:00 PM

zipher

Posts: 4
Joined: 13.Apr.2005
From: Denmark
Status: offline

Same problem here, on SBS2003 and only one user occationally experiences this. So far logging have left me clueless as to what might be the cause.

(in reply to Shrapnel)

Post #: 10

RE: permission issue?? - 14.Apr.2005 2:23:00 PM

zipher

Posts: 4
Joined: 13.Apr.2005
From: Denmark
Status: offline

No one has any idea?

(in reply to Shrapnel)

Post #: 11

RE: permission issue?? - 14.Apr.2005 8:26:00 PM

Guest

I am having the same problem and it maybe a problem on the recipients DNS server or how Exchange queries the DNS server. This error has been occuring to me randomly to different users. It only occurs when forwarding attachments. I found this post:

http://www.experts-exchange.com/Networking/Email_Groupware/Exchange_Server/Q_21242175.html

One thing that I am noticing is that for every location that is bouncing email back to me, they have some type of DNS warning or failure. Look up their domain on dnsreport.com. I am wondering if Exchange 2003 is stricter on email RFC's, or the default settings are set to low. The posting really does not give many answers. Hope this helps some.

(in reply to Shrapnel)

Post #: 12

RE: permission issue?? - 15.Apr.2005 9:07:00 AM

Guest

Hi guys,

These issues may occur if you have one or more firewalls installed on your domain. Some issues may occur if any one of the following conditions is true:
� You are running PIX Software, version 4.0 or a later version, from Cisco Systems, Inc. By default, the Mailguard feature in PIX Software is turned on. The Mailguard feature permits only the following seven SMTP commands to pass through the firewall:
� Helo
� Mail
� Rcpt
� Data
� Rset
� Noop
� Quit
The Mailguard feature does not permit any other SMTP command to pass through the firewall. Therefore, some commands do not reach your Exchange computer. PIX Software responds to both denied commands and permitted commands with the "OK" response.

� You are running Raptor Firewall from Symantec Corporation or Firewall-1 from Check Point Software Technologies Ltd. When the SMTP proxy is running on these products, not all SMTP commands are permitted to pass through the firewall. The performance of these firewall products is similar to the performance of PIX Software.

� You are running Wingate Proxy/Firewall from C&C Software Solutions. If your Exchange computer is behind a Wingate Proxy/Firewall, you cannot receive SMTP mail that is sent from a Lotus Notes client or from a Hotmail client.

� You are running Firebox 1000 firewall from WatchGuard Technologies, Inc., and you change the IP address of your Exchange computer.

� You are running SonicWALL firewall from Sonic Systems Inc. Issues may occur if the port that this firewall is connected to is not set to 10 megabytes (MB) half duplex.

For more info, go to http://support.microsoft.com/?kbid=895857

Hope this help
olivier_rivoalan@hotmail.com [Smile]

(in reply to Shrapnel)

Post #: 13

RE: permission issue?? - 19.Apr.2005 6:04:00 PM

SteveT2000

Posts: 2
Joined: 11.Apr.2005
From: Boston
Status: offline

Olivier. I would accept that reasoning if the emails were going out of the company. When I get the error it is an email that is originating from behind the firewall and its destination is behind the firewall.

(in reply to Shrapnel)

Post #: 14

RE: permission issue?? - 21.Apr.2005 4:41:00 PM

Guest

same problem here

Luiscedrola@arcor.com.ar on 4/21/2005 8:38 AM
You do not have permission to send to this recipient. For assistance, contact your system administrator.
MSEXCH:MSExchangeIS:/DC=xx/DC=COM/DC=xxxxxxx

Cristina Mendez on 4/21/2005 8:38 AM
You do not have permission to send to this recipient. For assistance, contact your system administrator.
MSEXCH:MSExchangeIS:/DC=xx/DC=COM/DC=xxxxxxxx

the second user is internal, so, it never pass through SMTP....

but I can send mail normally to the first user from my mailbox!
so, it's an account problem�?

(in reply to Shrapnel)

Post #: 15

RE: permission issue?? - 22.Apr.2005 9:27:00 AM

Zulan

Posts: 13
Joined: 13.Mar.2003
From: Sweden
Status: offline

I have recently upgraded from Exchange 2000 to 2003 and now even though they could before and still have the rigth permissions, people can't send from other accounts then their own. When they try to they get the same error message and mentioned.

[ April 22, 2005, 10:27 AM: Message edited by: Zulan ]

(in reply to Shrapnel)

Post #: 16

RE: permission issue?? - 25.Apr.2005 8:43:00 PM

toxic007

Posts: 1
Joined: 25.Apr.2005
From: Philadelphia, PA
Status: offline

I've seen similar problems, this time related to external versus internal mail server names.

Due to a company name change and Exchange hosting provider change, the situation is as follows:

External mailserver name: mail.corp.com
Internal mailserver name: exch.company.local
(AD/mixed) domain name: company

mail.corp.com resolves to 1.2.3.4

While this doesn't affect the majority of outbound mail (and no internal-only mail, as far as i can tell), it does create bounces to some domains. Apparently these domains that're bouncing some mail are doing a reverse DNS and/or SPF record lookup and finding the bob@corp.com address (the sender) is actually originating from a mailserver that's ID'ing itself as exch.company.local. So the recipient's mailserver thinks it's being spammed, and bounces.

Two possible solutions to this problem:
1. Setup masquarading on the Exchange mailserver. Instead of publishing its address as exch.company.local, publish (masquarade or "appear as") the name as mail.corp.com.

2. Setup a reverse DNS pointer for the mailserver's ext IP (1.2.3.4) to point to mail.corp.com. I'm not even sure if this is possible yet; my gut says yes, but our guru is saying no. Any ideas?

(in reply to Shrapnel)

Post #: 17

RE: permission issue?? - 27.Apr.2005 3:17:00 PM

Guest

quote:
Originally posted by toxic007:

2. Setup a reverse DNS pointer for the mailserver's ext IP (1.2.3.4) to point to mail.corp.com. I'm not even sure if this is possible yet; my gut says yes, but our guru is saying no. Any ideas?

I was waiting for DNS to update, and I can say now yes, THAT was my problem, reverse resolution.

problem solved

(in reply to Shrapnel)

Post #: 18

RE: permission issue?? - 29.Apr.2005 10:32:00 AM

siball

Posts: 6
Joined: 25.Nov.2004
From: UK
Status: offline

Still having the exact same problem here with one or two users. The problem seems to be intermittent and usually happens when the user is trying to forward an attachment. Any fix or workaround for this would be greatly welcomed.

[ April 29, 2005, 10:33 AM: Message edited by: siball ]

(in reply to Shrapnel)

Post #: 19

RE: permission issue?? - 9.May2005 6:12:00 PM

nickwright

Posts: 1
Joined: 9.May2005
From: UK
Status: offline

Olivier thanks for your post, solved my problem, had moved 2 Exchange 2000 servers from an open connection to being separated by 2 PIX firewalls running software version 6.3(3)and had the "You do not have permission to send to this recipient" error. In version 6.3(3) the smtp fixup has to be disabled to allow normal communication between the exchange servers.

(in reply to Shrapnel)

Post #: 20