I have two questions: 1. I would like to grant the ability to change the message properties. I do not need to grant someone the ability to send mail on behalf of someone and all of that, I just need to enable the user to check mail, and set a property to indicate that he looked at it. I see some permissions that look like they might work, but I would like more detail on what the permissions are supposed to do. 2. I'm having a lot of trouble just letting the user view anyone's mailbox with OWA. I set the permissions in Active Directory, but I get a 401 error whenever the user tries to log into somone else's mailbox with OWA.