sukh

You can't, see my earlier post. Did you check the directory objects on each DC?

Use the same version as the server youre trying to recover. So if it was SP1/SP2 download that, then put on the relevant UR you had. Download: Microsoft Exchange Server 2010 SP2 - Microsoft Download Center - Download Details

cool, so all good now?

no, that for managing permissions for PF, why did the ur4 fail?

What were the results of the UR4 and above.

you ca set the permission via exch but im sure the permission should still show on the security tab or the user properties.

check send as permission on both

Can you check the object on each DC and make sure the permission is there? Also, how many domains are there? Did you apply UR4?

Is that for the user who is in online mode and has the send-as permissions? How many DC's do you have?

Pick a user and delete their OST file and put them in online mode and monitor. Can you easily repro the issue or is it randon?

You can create another address list for their tutors and/or subject teachers which they can see.

The reason I said use a group was Exch will cache this so as soon as you add a user to the group they will have send-as permisson rather than waiting for IS cache refresh or restarting the IS. Are you saying the permisison is being lost or is still retained but end users can't use send-as?

Good advice from the above, will help to narrow down the issue. Post the results.

yes, std sec group

You can get a new cert with the correct names. You dont need the cas array name on the cert, only for web services Exch has. You only have 1 server so decide how you are going to have CAS deployed in the end, i.e 1 server or 2? You can have CAS on the same role with a CAS array still, just means you can;t use WNLB therefore have to have a HLB.

Can you try using a group and give that send as permission and put the users in that group and test/monitor.

Try adding a exception for the url of the exchange under IE and test. If sharing policies are set correctly then thats not your issue.

Have you checked using adsiedit for any mail attributes?

Have you given than test account an maail address, i.e filled out the mail attribute?

Technically it shouldn't but I want to know if it has.

after you create new user, gonto the emc and find the user and see of theybare mail-enabled or notm

my last post never made it, question is why are you creating mail contacs when they are already listed in the GAL, wbTa is the purpose of for the admin users?

As far as I know it's not supported.

Any new user is showing up twice on the GAL?

what ndr do you get?