Sorry for my bad English I have an Exchange 2007 sp3 that comes from a migracon of an Exchange 2003 environment. I find that surprise all users have permissions to send as (send as) from all users. Verifying from the EMC no one has permissions to send, if I released the following script in the Exchange console I get the following: Get-Mailbox | Get-ADPermission | where {($_.)}(ExtendedRights_-like_"*send-as*")} | FT - Wrap Identity User Deny Inherited Rights -------- ---- ---- --------- ------ domain.es/users/User1 NT AUTHORITY\SELF False False Send-As domain.es/users/User2 NT AUTHORITY\SELF False False Send-As And so a line for all users. Users Users are not neither Exchange admins, or domains admins. They are normal domain users. Any ideas, thanks?

Anything set on the database? Pick one user and check what permissions are set there for send-as, could be a domain group.Sukh

All is correct in the database. I check permissions in users, and the send as is not check. Users are domain users only.

On Sat, 2 Jun 2012 21:11:06 +0000, Josema29 wrote: >All is correct in the database. > >I check permissions in users, and the send as is not check. Users are domain users only. Well, suppose that the "Send As" permission isn't granted but "Full Control" (which includes "Send As") is? The only permission, for example, that the "Everyone" group should have on an object is "Change password". Groups such as "Domain Users" and "Authenticated Users" should have permission to READ properties. Something in your AD has given the permission to "Send As". It's really up to you (it IS your organization!) to find it. It's not a permission that anything MS delivers gives away! --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

On Sat, 2 Jun 2012 21:11:06 +0000, Josema29 wrote: >All is correct in the database. > >I check permissions in users, and the send as is not check. Users are domain users only. Well, suppose that the "Send As" permission isn't granted but "Full Control" (which includes "Send As") is? The only permission, for example, that the "Everyone" group should have on an object is "Change password". Groups such as "Domain Users" and "Authenticated Users" should have permission to READ properties. Something in your AD has given the permission to "Send As". It's really up to you (it IS your organization!) to find it. It's not a permission that anything MS delivers gives away! --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP