JSI Tip 10584. The Send As right is removed from a user object after you configure the Send As right in the Active Directory Users and Computers snap-in in Exchange Server?

Microsoft Knowledge Base Article 907434 Describes a problem in which changes that you make to the security descriptor on a user object are removed in an hour. This issue occurs when the user account is in a protected group.