Hello Folks, What is the difference between the send as explicit permission on AD and the send as permission on the Exchange level. What kind of scenarios applies the need of each one? THX

On Wed, 18 Aug 2010 20:49:11 +0000, ViperSMTP wrote: >What is the difference between the send as explicit permission on AD and the send as permission on the Exchange level. "Send As" is an AD permission (there's no "Send As" in Exchange, but there's a "Send on behalf of"). Exchange just uses it to know if a mailbox (i.e. user) has permissions to impersonate the mailbox they're, well, sending as. >What kind of scenarios applies the need of each one? There's only one. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

There is no difference. Send As is Send As. They are both AD permissions which is stored in the AD. There are just two ways of getting at it. Simon.Simon Butler, Exchange MVP. http://blog.sembee.co.uk , http://exbpa.com/

I am confused guys :S

What is confusing? You have two postings from two Exchange MVPs basically saying there is no difference. Simon.Simon Butler, Exchange MVP. http://blog.sembee.co.uk , http://exbpa.com/

On Thu, 19 Aug 2010 20:32:13 +0000, ViperSMTP wrote: >I am confused guys :S Why? "Send As" is an AD permission in a user's ACL that's used by Exchange. It's not a permission in the mailbox ACL. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

thank rick. what is the difference between user acl and mailbox acl. @sembee, how it is the same, if it is why i have one in exchange level and other on AD level mate??

On Sun, 22 Aug 2010 11:04:10 +0000, WildWest_0075 wrote: >thank rick. > >what is the difference between user acl and mailbox acl. One is placed on the AD user, and the other (mailbox) ACL is kept as a property of the user. The mailbox ACL is kept in the mailbox database, on the mailbox. When you change the "client permission" on a mailbox, and you use the MS management tools to do so, the copy of the ACL in the AD is updated and then written to the mailbox. The two should always be in sync, but it's possible that they aren't (refer, for example, to the old "nomas.exe" program that was used to keep the "associated external account" permission the same in both locations). --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP