none
something wrong with security permissions

    Question

  • Dears, 

    I'm facing an issue which is exchange mail users can send on behalf without giving permission on exchange and without public delegated in AD.

    anyone can help>>>

    Thanks,,

    Sunday, March 19, 2017 6:32 AM

All replies

  • Hi.  I think you should be asking this on the Exchange forum. What version of Exchange are you using?  Have the users that can send on behalf of being granted permissions on that mailbox?  What AD groups are those users in? Also, could it be delegated access has been granted through Outlook itself on a client machine?

    Sunday, March 19, 2017 10:16 AM
  • no permission is granted on exchange and no public delegates on users nor outlook
    Sunday, March 19, 2017 10:23 AM
  • Are the users that have send on behalf of permissions in an Exchange or domain-related admin groups?
    Sunday, March 19, 2017 10:26 AM
  • no 
    Sunday, March 19, 2017 1:52 PM
  • The only other thing I can think of then is that the send on behalf permissions have been set using Exchange Management Shell. You can run this to see who had send on behalf permissions on a mailbox: Get-Mailbox -identity user@example.com | fl *GrantSendOnBehalfTo You can then remove permissions. See here for more info - http://www.morgantechspace.com/2015/08/powershell-remove-send-on-behalf-permissions.html. Please ensure you test this for applying to production mailboxes.
    Sunday, March 19, 2017 3:41 PM
  • i run this command but it returned nothing
    Monday, March 20, 2017 6:12 AM
  • update: pop3 only can send on behalf without permission in exchange,,
    Monday, March 20, 2017 9:48 AM
  • Hi,

    If every permission configured on user mailboxes/AD groups/Mail Users looks fine. You may try to re-create one of mail users for a test.


    Best Regards,

    Lynn-Li
    TechNet Community Support


    Please remember to mark the replies as answers.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, March 20, 2017 10:18 AM
    Moderator
  • i created new pop3 account, it did the same issue
    Monday, March 20, 2017 12:50 PM
  • Hi. There are a few other checks you can try as per here - https://community.spiceworks.com/topic/120837-exchange-2010-all-users-can-send-on-behalf-of-all-users. Hope that helps.
    Tuesday, March 21, 2017 12:09 AM
  • sorry it didn't
    Tuesday, March 21, 2017 6:41 AM