In Active Directory 1. Right click on Domain lever or container 2. Select Properties 3. Go to Security Tab 4. Click Add and add BESAdmin account and click OK 5. Make sure "BESAdmin" account is selected and click "Advanced" 6. Select "BESAdmin" again in the list of "Permission entries" 7. Click "Edit" 8. Select "User objects" in "Apply onto:" field 9. Enable "Allow" checkbox for "Send Ad" permissions 10. Click all Apply and OK buttons to close all windows * Alwasy make sure that required user objects have "Allow inheritable pesmissions ..." option checked, otherwise "Send As" permission wont propagate from the parent level.