locked
send as via ad RRS feed

  • Question

  • If you grant someone full mailbox access to a mailbox via active directory, does this then give them "send as rights", or send on behalf as rights.

    Is there anyway to give a user send as rights, but not let them see the contents of the inbox?

    Has anyone any good articles or MS KB articles on the potential issues of using send as, i appreciate the non repudiation, but I cant find many links to back this up.

    • Changed type Evan Liu Tuesday, July 12, 2011 7:46 AM
    Friday, July 8, 2011 11:40 AM

Answers

  • Hi cf90,

     

    In Exchange 2003, you can refer to this, check for your Exchange version:

     

    “Send As” permission behavior change in Exchange 2003

    http://support.microsoft.com/kb/895949

     

    In Exchange 2010:

     

    Grant full access permissions doesn’t grant the right to send mail as the selected mailbox.

     

    You can know more information from this document:

     

    Manage Full Access Permissions

    http://technet.microsoft.com/en-us/library/bb676551.aspx

     

    In Exchange 2007:

     

    I checked on my lab (Exchange 2007 SP3), the send as permission is not included in full mailbox access permission.

     

     

    Thanks,

     

    Evan

    • Proposed as answer by Evan Liu Sunday, July 17, 2011 8:09 AM
    • Marked as answer by Evan Liu Sunday, July 17, 2011 11:56 AM
    Thursday, July 14, 2011 2:13 PM

All replies

  • >> If you grant someone full mailbox access to a mailbox via active directory, does this then give them "send as rights", or send on behalf as rights.

    No it does not, it gives them full access rights.

    Yes give them send as right, either via EMC or Powershell

    Add-ADPermission -identity mailboxDN -User "DOMAIN\Username" -ExtendedRights "Send-as"

     


    With kind regards
    Krystian Zieja
    http://www.projectenvision.com
    Follow me on twitter
    My Blog
    Need help with your systems?
    Friday, July 8, 2011 11:58 AM
  • >> If you grant someone full mailbox access to a mailbox via active directory, does this then give them "send as rights", or send on behalf as rights.

    No it does not, it gives them full access rights.

    Yes give them send as right, either via EMC or Powershell

    Add-ADPermission -identity mailboxDN -User "DOMAIN\Username" -ExtendedRights "Send-as"

     


    With kind regards
    Krystian Zieja
    http://www.projectenvision.com
    Follow me on twitter
    My Blog
    Need help with your systems?


    Are you sure?

    I just gave a group full mailbox access and they can send as. I didnt spcifically go in EMC or powershell and grant a send as permission.

    Friday, July 8, 2011 12:04 PM
  • Hi cf90,

     

    In Exchange 2003, you can refer to this, check for your Exchange version:

     

    “Send As” permission behavior change in Exchange 2003

    http://support.microsoft.com/kb/895949

     

    In Exchange 2010:

     

    Grant full access permissions doesn’t grant the right to send mail as the selected mailbox.

     

    You can know more information from this document:

     

    Manage Full Access Permissions

    http://technet.microsoft.com/en-us/library/bb676551.aspx

     

    In Exchange 2007:

     

    I checked on my lab (Exchange 2007 SP3), the send as permission is not included in full mailbox access permission.

     

     

    Thanks,

     

    Evan

    • Proposed as answer by Evan Liu Sunday, July 17, 2011 8:09 AM
    • Marked as answer by Evan Liu Sunday, July 17, 2011 11:56 AM
    Thursday, July 14, 2011 2:13 PM