Domain Admin user can send as any user in my exchange org

That is exactly what i have in my situation Nithyanandham

i check the permission in organization i will check the database permission

Thanks

February 18th, 2015 8:03am

I had the same issue in 2010.  We are running 2010 and a domain admin has only Manage Full Access to another mailbox but has the ability to "send-as" as well.  If you look in AD, Domain Admins have "send-as" applied even though it doesn't show up in the exchange "send-as" window. 

I was trying to figure out how this domain admin was sending as the other mailbox when he didn't have the "send-as" granted in the exchange console.  Found the permission applied to Domain Admins in AD.

Now without the "manage full access" granted, they can't send as.  In 2010 domain admins still need "manage full access" to another mailbox before they can send as.  At least that is what my testing showed.
Free Windows Admin Tool Kit Click here and download it now
February 18th, 2015 8:15am

Thanks I Found The Permission in ADUC is denied the inheritance and give the domain admin denied  in send as

thanks u very much

  • Edited by Mk_kamal 22 hours 12 minutes ago
February 18th, 2015 8:42am

inheritance will be denied for any protected ad groups.  if you set it to allow inheritance, it will revert back in 1 or 2 hours by itself.
Free Windows Admin Tool Kit Click here and download it now
February 18th, 2015 9:13am

Dears

i have problem i just discovered in my test environment any user in domain admin group have the right to send as any email address even the user email doesn't have send as or full control  for any one  in my Exchange Org

Thanks


  • Edited by Mk_kamal Wednesday, February 18, 2015 10:50 AM
February 18th, 2015 1:38pm

i will try to change Default permission on ADUC and test
Free Windows Admin Tool Kit Click here and download it now
February 19th, 2015 1:43am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics