Re: Prevent posting on behalf of other users on Public folders

In news:694A6BBE-F8BF-485F-AB55-1F78540B458E@xxxxxxxxxxxxx,
Nola <Nola@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
We already checked UserB's mailbox properties under the Delivery
options, and UserA does not have "Send on behalf" permission to
UserB's mailbox. One of my colleagues suggested that we try to edit
the IPM.Post for the Public folder.

I really suspect that's a red herring. What if userB tries to send a message
to another user, and puts UserA's address in the From field? What happens
then?

Did you also check in UserB's *Outlook* delegate settings?



"Lanwench [MVP - Exchange]" wrote:

In news:854B6455-997A-4C77-8164-69EA31B1A4A2@xxxxxxxxxxxxx,
Nola <Nola@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
We use Exchange Server 2003 in our organisation. We recently had a
query about people posting items on the Public folders on behalf of
other users.

UserA is not allowed access to UserB's mailbox, but when userA
created a new Post item in the Public Folders and used UserB's
e-mail address in the "sent on behalf of" field, the message was
posted saying that it was posted by UserB on behalf of UserA. We
want to stop this completely.
I've looked in all the properties of the Public folder, but cannot
see any options that refers to the above.

Any suggestions?

The public folder wouldn't be the place to look. Look at the
properties of UserB's mailbox, and check for delegate permissions
(send on behalf of) - and/or look in UserB's Outlook and check for
delegates/send on behalf of, there.

This doesn't happen by default, note. Nobody can send as, or send on
behalf of, someone else unless it's been specifically granted -
either deliberately or by accident (sometimes via group membership &
monkeying around with permissions in ESM).



.

Relevant Pages

  • Re: Unable to save permission changes on Mailbox
    ... Basically, if you use the Windows UI, the permissions ... This causes problems for Exchange. ... User can log into their mailbox with Outlook ... how well the known public folder fixes will work with mailboxes. ...
    (microsoft.public.exchange2000.admin)
  • Re: Forwarding Internet mail to Public folders
    ... The Anonymous permissions were set wrong. ... We actually do need the mailbox as well as the PF. ... >> has full permissions to access the Public folder. ...
    (microsoft.public.exchange2000.admin)
  • Re: Public folder access question
    ... Do you know if it will work if I create a mailbox and then disable it? ... Public folder ACL's are based on Mailbox enable users. ... permissions. ... Checked all the permissions for the Exchange folders and the web site ...
    (microsoft.public.exchange.admin)
  • Re: Moving to a new Administrative Group?
    ... Public folder permissions, permissions on mailbox ... meetings, and on, and on. ... The legacyExchangeDN name is important in selecting a public folder ...
    (microsoft.public.exchange.admin)
  • Re: Send As rights no longer working after upgrade to Ex2k3
    ... As for the permissions many of my accounts still seem to be set up ... mailbox then in UserA setup within the security tab UserB has 'send as' ... same rights to the UserA milabox - setup exactly the same as UserB. ...
    (microsoft.public.exchange.admin)