Why I am able to resend someone else email message? What are the permissions for the 'resend this message...' command?
Friday, April 27, 2012 9:09 PM
Using Outlook 2010, I opened someone else message and was able to resend the message. Originally I thought that, even though I am the one ‘resending’ the message, the message will come “From:” me. This was not the case. The recipient of the message received it from the “Original Sender” instead of me. Why I am able to do that and others are not able? What are the permissions for the ‘resend this message…’ command?
For example, let's say Frank sent a message for James, Ann, and myself (John). I received Frank's e-mail message on my mailbox. I opened Frank's message and I decided to resend it (I clicked on Actions | Resend this message...). A pop-up message appeared: "You do not appear to be the original sender of this message. Are you sure you want to resend it?" I clicked "Yes" and the e-mail opened in a format I am able to edit it. I didn't made any changes to the e-mail message and I hit "Send". Inmediately, James, Ann, and myself (John) got the same e-mail message from Frank (instead of me, John, the one who resend the message). Now the question is: Why I am able to do that and others are not able? Who have permissions to 'resend' a message I sent?
Saturday, April 28, 2012 12:59 AM
Do you have SEND AS permissions for Frank?
In Exchange 2010:
Wednesday, May 02, 2012 1:48 PMNo, I do not have SEND AS permissions for Frank. Actually, no one have SEND AS permissions for Frank.
Wednesday, May 02, 2012 2:26 PM
Either you have send as permissions or send on behalf of permissions for frank. Otherwise you would get an NDR stating you do not have permissions to send as the original sender. Double check the send as permissions:
Get-ADPermission <FRANK> -User <JOHN>
And check the send on behalf permissions:
Get-Mailbox <FRANK> | FL Name,GrantSendOnBehalfTo
Also, you may want to verify this with a test user. Create a dummy user, send it an email, and try to perform the same action.
Tuesday, May 08, 2012 5:53 PMI did checked the "Send As" permissions and the "Send On Behalf" permissions for Frank and myself (John) and it is blank. Actually, I am not the only one who could "Resend this message..." for someone else's email. My boss is able as well. We are both Domain Admin. Does it have to deal with the Domain Admin permissions? I have made tests with several users and we are the only ones allowed to do it.
Tuesday, May 08, 2012 7:41 PM
Domain Admins does not have any effect on those permissions unless you or someone modified the permissions of the system. You would need to run:
Get-ADPermission <FRANK> -User "Domain\Domain Admins"
To see if Domain Admins have any inherited rights on the user. You could also check:
get-adpermission <Database> -User "AD\Domain Admins" | fl User,Identity,Deny,IsInherited,AccessRights
This command will show you the rights assigned at the database level and let you know if they are inherited from an upper level and if they are denied or not.