When you give a user permission to send as another mailbox, is there a way to tell who really sent a given message? Is there a header? Is a record stored somewhere on the

Audit logs? Check for example here: http://exchangeserverpro.com/using-exchange-server-mailbox-audit-logs-find-sender-email-shared-mailbox/

• Proposed as answer by Nithyanandham Singaravadivelu 3 hours 48 minutes ago

You need to enable auditing and it will let you track the sender who sent this.

The above reference looks a good start-up for you.

However if you wish to get more details into real time, you may also consider on this automated solution (http://www.exchangereports.net/) which helps to gather the minutest details on different characteristics of exchange mailbox.

Hi,

As Vasil L suggested, you can enable mailbox audit logging to get the detailed information that who send a message as one user.

If I grant administrator send as permission to amy01, then administrator send a message as amy01, here is the result when running Search-MailboxAuditLog:

What's more, here is an article for your reference:

Mailbox audit logging

https://technet.microsoft.com/en-us/library/ff459237%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396

Hope this can be helpful to you.

Best regards,

If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com