We have just migrated from Exchange 2010 to a fresh install Exchange Server 2013 on Server 2012R2. Our server is failing this monitoring probe with an authentication error:
Invoke-MonitoringProbe FrontEndTransport\OnPremisesSmtpClientSubmission -Server UMC-MAIL | fl
We observed that the account referenced in the error was missing the "send as" permission for Self in AD. We removed all healthmailboxes and restarted the health service to recreate the mailboxes. This permission was still missing and the healthcheck failed again. We manually added the permission back and the health probe passed. After about 30 minutes we tried the healthprobe again and found that the permission had been reverted automatically somehow. We added send as once more, and noted that the permissions had changed again about 30 minutes.
We also enabled inheritance and granted additional permission to Self. After a period of time we check again and the permission has be reset and inheritance had be disabled on the object.
What could be causing these permissions to change automatically and why are wrong permissions being assigned?
We have once again granted "send as" to self and removed all Exchange Server User Accounts from the account object permissions and are monitoring to see if this will prevent the permissions from being changed.
Has anyone else seen anything similar? Any other suggestions?
Thanks for any help!