A shared mailbox or delegate access is missing, read-only, or will not send
Permission has been granted but Outlook does not reflect it — the mailbox does not appear, appears but will not open, or opens but refuses to send. Each of those three is a different permission, and granting one does not grant the others.
What you see
A shared mailbox never appears in the folder list after access was granted, or appears and returns "Cannot expand the folder". Or it works for reading but sending returns "You do not have permission to send the message on behalf of the specified user".
What is actually wrong
Full Access, Send As and Send on Behalf are three separate rights and are commonly confused. Automapping, which is what makes a shared mailbox appear on its own, is set at the moment the permission is granted and cannot be changed afterwards without removing and re-adding it. Directory changes also take time to reach the client, and Outlook caches the mailbox list at startup.
Codes and articles
Start here — find out which fix applies
A script that runs the 1 inspection command from the write-up below and prints what each one returned. It reads the machine and changes nothing — every command that could write, delete, start or stop is excluded from it by construction. Run this first, then pick the fix its output points at.
Fixes (4)
Check the permission and give it time
The mailbox is not appearing. Confirm the grant is actually there before touching the client.
Connect to Exchange Online and read the permission as it currently stands.
Connect-ExchangeOnlineGet-MailboxPermission -Identity shared@example.com | Where-Object { $_.User -notlike 'NT AUTHORITY*' } | Select-Object User, AccessRights, IsInherited
Wait before doing anything else. A newly granted permission can take up to an hour to reach the client, and automapping only takes effect when Outlook next starts.
This is the step that gets skipped and it is the answer most of the time. A great deal of effort goes into fixing mailboxes that were going to appear on their own within the hour.
Restart Outlook completely — not just close the window.
Get-Process OUTLOOK -ErrorAction SilentlyContinue | Stop-Process -ForceIf it still has not appeared, check whether automapping was disabled when the permission was granted.
Get-MailboxPermission -Identity shared@example.com | Format-List User, AccessRights, *auto*To change automapping, the permission has to be removed and re-added — there is no switch to toggle it in place.
Remove-MailboxPermission -Identity shared@example.com -User person@example.com -AccessRights FullAccess -Confirm:$falseAdd-MailboxPermission -Identity shared@example.com -User person@example.com -AccessRights FullAccess -AutoMapping:$true
Add the mailbox by hand instead of relying on automapping
Automapping is deliberately off, or the mailbox is large enough that automapping is a bad idea.
Understand why automapping is often turned off deliberately. An automapped mailbox is downloaded into the user's OST, so a large shared mailbox mapped to twenty people is downloaded twenty times.
If someone has deliberately disabled automapping on a big mailbox, turning it back on will bloat every one of those users' OST files and can make Outlook slow for all of them. Add it manually instead.
File → Account Settings → Account Settings → the account → Change → More Settings → Advanced → Add, and enter the shared mailbox address.
Alternatively add it as a separate account, which keeps it in its own data file and out of the primary OST.
Restart Outlook and confirm it appears.
Fix a mailbox that appears but will not expand
"Cannot expand the folder", or folders that are visible but empty.
Confirm the permission is Full Access on the mailbox itself and not just folder-level permission on the inbox. Folder permissions grant a view of one folder and produce exactly this symptom on everything else.
Get-MailboxPermission -Identity shared@example.com -User person@example.com | Select-Object AccessRightsCheck the cached mode setting for shared folders. File → Account Settings → Account Settings → Change → "Download shared folders".
With this ticked, shared folders come from the local cache; if the cache is damaged the folders appear but cannot be expanded. Unticking it makes Outlook read them from the server directly, which both proves where the problem is and often resolves it outright.
Untick it, restart Outlook, and test. If the mailbox now opens, the local cache was the problem.
To clear the cache properly, close Outlook and remove the OST — it is a cache and is rebuilt from the server.
Get-ChildItem "$env:LOCALAPPDATA\Microsoft\Outlook" -Filter *.ost | Select-Object FullName, @{n='GB';e={[math]::Round($_.Length/1GB,2)}}, LastWriteTimeRename rather than delete the OST, start Outlook, and let it rebuild. Delete the old file only once the rebuild is confirmed complete.
An OST rebuild on a large mailbox can take hours and saturate the connection. Renaming means you can put the old one back if the rebuild goes wrong, and it costs nothing but disk space until you are sure.
Grant the right sending permission
Reading works and sending is refused.
Decide which of the two is wanted. Send As makes the message appear to come from the shared mailbox alone. Send on Behalf shows "Person on behalf of Shared Mailbox" in the recipient's client.
This is a business decision rather than a technical one, and getting it wrong is visible to every external recipient. Ask before granting.
Check what is currently granted. They are stored in two different places, which is why one can be present and the other missing.
Get-RecipientPermission -Identity shared@example.com | Select-Object Trustee, AccessRightsGet-Mailbox -Identity shared@example.com | Select-Object -ExpandProperty GrantSendOnBehalfTo
Grant Send As if that is what is wanted.
Add-RecipientPermission -Identity shared@example.com -Trustee person@example.com -AccessRights SendAs -Confirm:$falseOr grant Send on Behalf instead. Note this replaces the whole list rather than adding to it, so include everyone who should have it.
Set-Mailbox -Identity shared@example.com -GrantSendOnBehalfTo @{Add='person@example.com'}Using @{Add=...} rather than a plain assignment is what stops this quietly removing everyone else who already had the right.
Allow up to an hour, then have the user restart Outlook and send a test message. They must set the From field to the shared mailbox — it does not switch on its own.
Related faults
Where this stops. This write-up was written and checked by hand. It says what each step changes, how to confirm it worked and how to reverse it, and anything destructive is flagged before you reach it. If it does not match what your machine is doing, search the Support Centre for the exact code or message — and when something needs a person, get in touch.