Re: Administrator account has "SEND AS" right on every Mailbox

Hmm I checked the SBS servers at 2 of our customers, on both administrator
doesn't have Send on behalf rights if I check a user in the AD. These are
dutch SBS 2003 servers. The std version not the premium (with sql).

But what are you worried about anyway? Administrator can always claim the
right, other than that anyone can fake the address using SMTP... Unless you
have a lot of people with the administrator password this shouldn't be very
much of a problem I think. If there are a lot of people with the adm
password they can always claim the rights anyhow.

Rodrigo Garcone wrote:

> Hi all,
>
> I installed a new SBS 2003 server with Exchange. The installations
> followed the steps recommended by MS.
> Everything is running fine. All permissions were kept as set by the
> installation. No rights have been granted manually.
> There is only one issue that is driving me crazy:
> The Administrator account can send email in the name of any
> mailbox-enabled user in my organization.
> At the Organization Level, the Administrator has been denied both SEND AS
> and RECEIVE AS permission. I double checked at Mailbox Store level and the
> permission SEND AS is set through Inheritance.
>
> If I go to AD Users and Computers and open User's properties then Security
> Tab, Administrator is granted SEND AS permission, though. This permission
> is set by inheritance as this right has been granted at Domain Level,
> probably by Exchange Installation. Even if I explicitly Deny SEND AS at
> User object level, It does not work at all.
> How can I remove this behavior? Is this behavior happen by design of
> SBS2003? I've already installed many other Exchange 2003 Std edition
> servers and this behavior has not been showed up any time at all.
>
> I appreciate any kind of help.
>

.

Relevant Pages

  • Re: I need Job Blobb
    ... > Windows and Network administratation. ... > In a job I would like to administrate servers, ... > Title: ISP Network Administrator ... > o Building, installation, configuration and tuning ...
    (microsoft.public.cert.exam.mcse)
  • Re: I need Job Blobb
    ... > Windows and Network administratation. ... > In a job I would like to administrate servers, ... > Title: ISP Network Administrator ... > o Building, installation, configuration and tuning ...
    (microsoft.public.cert.exam.mcse)
  • Re: I need Job Blobb
    ... >> In a job I would like to administrate servers, ... >> Title: System/Network Administrator, Operations ... >> o Building, installation, configuration and tuning ... >> o 5.5 years of expert-level user/admin experience ...
    (microsoft.public.cert.exam.mcse)
  • RE: Run as administrator option disabled
    ... Normal installation of programs in Vista is fairly simple and works like ... a standard or administrator account. ... Standard user gives permission by ...
    (microsoft.public.windows.vista.administration_accounts_passwords)
  • Re: Administrator account has "SEND AS" right on every Mailbox
    ... We all know Administrator can change any permission in AD. ... > dutch SBS 2003 servers. ... >> probably by Exchange Installation. ...
    (microsoft.public.exchange.admin)