We have given user1 'send as' permission to send mails as a group(GroupA) ie. when he sends mail using his credentials to a DL(GroupB) it appears that the mail is sent by that group(GroupA). for this we add (user1and GroupA) to recepient's DL(GroupB's) properties Mailflow settings->Messagedeliveryrestrictions->Accept message from,only senders in the following list. Now the issue we face here is that user2 who shouldn't be allowed sending mails to (GroupB) is also able to send mails since he is part of GroupA added to the list added as above. If we do not add GroupA along with user1 in the list, user1 is unable to send mails as GroupA. Please suggest Is there a way wherein only certain users can be given 'send as' permission and are allowed to send mails despite their group membership. We have given user1 send as permission for GroupA and also tried adding user giving send as rights to GroupA which is Universal Security group. Thanks

Hi Shireesh, So far as I know, there is no way to achieve your requirement. As a workaround, you can create a new user which represents Group A in your case, and delegate the permission to the corresponding user. How to Grant the Send As Permission for a Mailbox http://technet.microsoft.com/en-us/library/aa998291.aspx Hope this helps. Thanks, Elvis

Thanks Elvis. You mean creating user with the same name as the group ? Won't let me have same name for user and group. GroupA is a DG with members added to it. some members are also part of other DGs. This becomes tricky as other member who are part of other group can send mail as GroupA irrespective they are given send as permission or not. Please look into some more possibilites and let know if something clicks. Thanks Shireesh

Hi Shireesh, I agree with Elvis, you need to create user which represents your Group or you can create a shared mailbox/mail enabled public folder too. Yes it doesnt allow you to create with same name so create with different nameand change justDisplay Name of mailbox/public folder after creating it which shows two different objects in your Global Address List (you may hide the DL from GAL for prevent confusion if not really required).

Thanks Amit, Yes It works that way,but before getting to exchange we used to have such hidden aliases to meet the purpose.Thought having gone with exchange things would change We have over 100 such groups created on exchange 2007 now and creating users/mailbox for each would be cumbersome .Can you please suggest the control to be more granular and user specific with the existing design like why not adding just the user name and not the group in 'Mailflow settings->Messagedeliveryrestrictions->Accept message from' and assigning user just the 'send as'group permission only should work instead of adding that group name also which unnecssariliy permits other users in that group to send mail. Let know if may be I'm missing your point somewhere.Thanks Shireesh