Hi,I recently found that I am able to send outgoing e-mail on behalf of everyone in my organization.In the 'From' column, I just simply choose a user and the e-mail can be send out.This is dangerous and I am afraid other users might find out this and start to play around.Any permissions that I can disable or deny. My environment is running on Active Directory and Exchange 2003.Thanks alot

hi,please check the "Send on Behalf of" and "Send As" permissions on your Exchange Server. it is not default setting maybe someone changed the permissions on.and just lok at here;http://www.cryer.co.uk/brian/msexchange/exch_howto_grant_send_on_behalf_of.htmregards,Mumin CICEK | Exchange - MVP | www.cozumpark.com | www.mumincicek.com

I went to my AD and noticed that there is no any permissions set for any users to send on behalf of anyone.Any other place I can check the settings? I just want to disable this settings to prevent unscrupulous users from sending out mails using other user's e-mail account. Thanks

Check below article which is for Full Mailbox access, similarly you need to find Allow Send As permission on EveryOne account or a group.If you find Allow Send As permission, untick it. http://social.technet.microsoft.com/Forums/en-US/exchangesvrgeneral/thread/8aa00fe4-d662-4977-90fb-8bd57ea48bc1 Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

thanks for your prompt reply.But i think my Everyone group here only have the Change Password option ticked, other is untick and problem still persist.Any idea??

Did you verify in ADSIEdit starting from CN=Configuration,DC=Domain,DC=com ->Configuration ->Services ->Microsoft Exchange -> to all sub folder, up to database level?Also anygroup with Send As permssion which has you id along with other large amount of members?Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

Hi,Please check whether everyone could actually do a Send As by testing with couple of user accounts. Also try to create a new user and check whether this behaviour is inherited.See if there is a group which has Send As permission assigned and all the users are member of it. One account generally having Send As rights to everyone would be a blackberry account. Looking carefully on the permissions would surely help.Thanks.Regards,Tariq

Hi,As Tariq said, please first confirm whether all user had this issue. Create a new user also is a method to test this issue.Additionally, please run the below command to dump the user information:ldifde -f user.ldf -d "cn=problematic user,cn=Users,dc=domain,dc=comhttp://support.microsoft.com/kb/237677Then send the file to me at v-allson@microsoft.comThanksAllen

Sorry for late reply.yes everyone can just simply click and send behalf of other users. This is dangerous if they knew how to do it.

i restarted my Exchange Server and then suddenly its works! Voila!Didnt know what happened..mayb some of the services got stuck....i dont know..thanks for everyone for the generous help!Mod can close the thread