ms-Exch-SMTP-Accept-Any-Sender on ReceiveConnector does not work

Hi Everybody,

while deploying Exchange 2013 (first Exchange server in organization) I recognized that authorized users are only allowed to send as users configured recording their mailbox.

Now we have users/devices sending with SMTP (no Outlook!) that should be allowed to send as any sender (for who no mailbox might be configured)

We have some internal ReceiveConnector configured (SMTP-LAN-Relay) and I have set extended permissions with:

[PS] C:\Windows\system32>Add-AdPermission -Identity "SMTP-LAN-Relay" -User "NT-AUTORITÄT\Authentifizierte Benutzer" -ExtendedRights ms-Exch-SMTP-Accept-Any-Sender

I can see these permissions also when quering the permissions

[PS] C:\Windows\system32>Get-ReceiveConnector |Get-ADPermission|where {$_.User -like '*authentifi*'}|ft identity,user,extendedrights,accessrights

Identity                              User                                  ExtendedRights                       AccessRights
--------                              ----                                  --------------                       ------------
VM-EXCHANGE01\Default VM-EXCHANGE01   NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Submit}                {ExtendedRight}
VM-EXCHANGE01\Default VM-EXCHANGE01   NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Bypass-Anti-Spam}           {ExtendedRight}
VM-EXCHANGE01\Default VM-EXCHANGE01   NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Accept-Headers-Routing}     {ExtendedRight}
VM-EXCHANGE01\Default VM-EXCHANGE01   NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Accept-Any-Recipient}  {ExtendedRight}
VM-EXCHANGE01\Default VM-EXCHANGE01   NT-AUTORITÄT\Authentifizierte Benu...                                      {ReadProperty}
VM-EXCHANGE01\Client Proxy VM-EXCH... NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Submit}                {ExtendedRight}
VM-EXCHANGE01\Client Proxy VM-EXCH... NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Bypass-Anti-Spam}           {ExtendedRight}
VM-EXCHANGE01\Client Proxy VM-EXCH... NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Accept-Headers-Routing}     {ExtendedRight}
VM-EXCHANGE01\Client Proxy VM-EXCH... NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Accept-Any-Recipient}  {ExtendedRight}
VM-EXCHANGE01\Client Proxy VM-EXCH... NT-AUTORITÄT\Authentifizierte Benu...                                      {ReadProperty}
VM-EXCHANGE01\SMTP-Anywhere-Relay     NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Accept-Any-Sender}     {ExtendedRight}
VM-EXCHANGE01\SMTP-Anywhere-Relay     NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Accept-Any-Recipient}  {ExtendedRight}
VM-EXCHANGE01\SMTP-Anywhere-Relay     NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Accept-Headers-Routing}     {ExtendedRight}
VM-EXCHANGE01\SMTP-Anywhere-Relay     NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Bypass-Anti-Spam}           {ExtendedRight}
VM-EXCHANGE01\SMTP-Anywhere-Relay     NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Submit}                {ExtendedRight}
VM-EXCHANGE01\SMTP-Anywhere-Relay     NT-AUTORITÄT\Authentifizierte Benu...                                      {ReadProperty}
VM-EXCHANGE01\Outbound Proxy Front... NT-AUTORITÄT\Authentifizierte Benu...                                      {ReadProperty}
VM-EXCHANGE01\Client Frontend VM-E... NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Accept-Any-Recipient}  {ExtendedRight}
VM-EXCHANGE01\Client Frontend VM-E... NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Accept-Headers-Routing}     {ExtendedRight}
VM-EXCHANGE01\Client Frontend VM-E... NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Bypass-Anti-Spam}           {ExtendedRight}
VM-EXCHANGE01\Client Frontend VM-E... NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Submit}                {ExtendedRight}
VM-EXCHANGE01\Client Frontend VM-E... NT-AUTORITÄT\Authentifizierte Benu...                                      {ReadProperty}
VM-EXCHANGE01\SMTP-DMZ-NoRelay        NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Accept-Headers-Routing}     {ExtendedRight}
VM-EXCHANGE01\SMTP-DMZ-NoRelay        NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-Bypass-Anti-Spam}           {ExtendedRight}
VM-EXCHANGE01\SMTP-DMZ-NoRelay        NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Accept-Any-Recipient}  {ExtendedRight}
VM-EXCHANGE01\SMTP-DMZ-NoRelay        NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Submit}                {ExtendedRight}
VM-EXCHANGE01\SMTP-DMZ-NoRelay        NT-AUTORITÄT\Authentifizierte Benu... {ms-Exch-SMTP-Accept-Any-Sender}     {ExtendedRight}
VM-EXCHANGE01\SMTP-DMZ-NoRelay        NT-AUTORITÄT\Authentifizierte Benu...                                      {ReadProperty}
VM-EXCHANGE01\SMTP-MX-NoRelay         NT-AUTORITÄT\Authentifizierte Benu...                                      {ReadProperty}

Unfortunately this setting is not working at all, that means I still get errors

5.7.1 Client does not have permissions to send as this sender

when sending as nomailboxexists@domain.tld while authenticating as my.user@domain.local
I also tried ms-Exch-SMTP-Accept-Authoritative-Domain-Sender already instead of Accept-Any-Sender, no change.

Any ideas? Any help?

Thanks a lot in advance!

Matt