I have a user who can send as anybody in our company at one point this account was a administrator but these ahve since been removed. I have looked and am unable to determine where these elevated permissions are coming from. I am running Exchagne 2007. thanks

You have to look at some attributes stored in AD. You can refer to this link: http://social.technet.microsoft.com/Forums/en/exchangesvradmin/thread/d2e97e64-536a-4c46-8e57-e0ac6a4ad64eVincenzo MCTS, MCTIP Server 2008 | MCTS Exchange 2010 | WatchGuard Firewall Security Professional

Hi, If you would like to verify the permission for the speecific user. I think you could use the ADSI Edit tool to verify the user's permission: Title: ADSI Edit (adsiedit.msc) URL: http://technet.microsoft.com/en-us/library/cc773354(WS.10).aspx Also, you could use the command below in the EMS to get the specific user's permission: Get-MailboxPermission -Identity "The Specific User's Alias" Get-ADPermission -Identity "The Specific User's Alias" For more details about the command above, you could read the articile below to get further information: Title: Get-ADPermission URL: http://technet.microsoft.com/en-us/library/bb125183(EXCHG.80).aspx#Mtps_DropDownFilterText Title: Get-MailboxPermission URL: http://technet.microsoft.com/en-us/library/aa998218(EXCHG.80).aspx Chen

Hi, Domain Admin has “Send As” right to all mailboxes in Exchange 2007 as default. Please go into the link that Vincerzo gave. Xiu-Zhang had gave a good explanation. More information: Domain Admins have Send As feature by Default Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.