Re: Send On Behalf

From: Teresa Appelgate [MS] (tereap_at_online.microsoft.com)
Date: 04/01/04 

Date: Thu, 1 Apr 2004 11:56:21 -0800

All I've gotten so far is confirmation that it shouldn't work. And I've
heard from other sources that changes to Send As and Receive As on the ADUC
Security tab will eventually be overwritten by default settings.

What does work, when you want a second user (delegateuser) to be able to
send messages from a mailbox (master mailbox) and if you want the messages
to say From: delegateuser, is to have the owner of the master mailbox use
Outlook to set permissions on the inbox folder for delegateuser. Then
delegateuser can log in to their own mailbox, use Open Other User's Folder
to open the inbox folder of the master mailbox, then send mail. You can do
this without touching the Mailbox Rights or Security tab settings. The
reason this works is complicated and has to do with how Exchange handles
accessing folders (controlled by the folder permissions) vs. logging on to
the mailbox (controlled by Mailbox Rights and other mechanisms you probably
don't want to know about right now).

I plan to do more research in this area later this spring for upcoming
Exchange documentation. I foresee flowcharts and tables to try and explain
this... 

-- 
Teresa Appelgate
Exchange User Education
****** Disclaimers ******
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email directly to this alias. This alias is for newsgroup
purposes only.
"DK" <anonymous@discussions.microsoft.com> wrote in message
news:1697201c4172d$8c68ebb0$a101280a@phx.gbl...
> Waited 20 minutes before trying after altering the
> Support rights.  The two newly created users worked
> almost immediately (forced replication) with no trouble.
>
> Send As definitely works from the ADUC Security tab, when
> Send As and Receive As are added for the second
> account...but just not for one particular account.  I
> think our next move is going to be to delete the
> uncooperative account and recreate it.  It really has
> nothing particular to be saved, so recreating it in
> Exchange and in Active Directory will only take some
> time, and not any data loss.
>
> Teresa - I would be interested in their response if you
> have time to post it when you receive it!
>
> >-----Original Message-----
> >According to everything I've heard, granting "Send As"
> on the ADUC Security
> >tab shouldn't work. Exchange doesn't use those
> permissions when granting
> >access to mailboxes--only the Mailbox Rights information
> gets passed to
> >Exchange.
> >
> >I'm forwarding Q327000 to my dev contact for his opinion.
> >
> >-- 
> >Teresa Appelgate
> >Exchange User Education
> >
> >****** Disclaimers ******
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >
> >Please do not send email directly to this alias. This
> alias is for newsgroup
> >purposes only.
> >
> >
> >"Lanwench [MVP - Exchange]"
> ><lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.co
> m> wrote in message
> >news:ujZOSGrFEHA.2208@TK2MSFTNGP09.phx.gbl...
> >> Not sure which Outlook support says this - perhaps it
> isn't referring to
> >> Exchange.
> >> How long did you wait before trying?
> >>
> >> DK wrote:
> >> > Plot thickens:
> >> >
> >> > (First, Microsoft Outlook support says we can't do
> this)
> >> >
> >> > I created two new users, UserA and UserB.  I gave
> UserA
> >> > Send As and Recieve As permissions in ADUC,
> replicated.
> >> > Log UserA into a machine with Outlook 2000 and send
> mail
> >> > FROM UserB to another account.  Works like a charm,
> no
> >> > Send On Behalf lists.
> >> >
> >> > Gave UserA the same Send As and Receive As rights to
> >> > another account, Support, replicated.  Log UserA in
> to a
> >> > machine with Outlook 2000 ans send mail FROM Support
> to
> >> > another account, it states that UserA does not
> rights to
> >> > send mail on that account.
> >> >
> >> > Have I missed something here?
> >> >
> >> >> -----Original Message-----
> >> >> DK wrote:
> >> >>> Leif,
> >> >>>
> >> >>> Thanks, but this does not work, either.  We have
> tried
> >> >>> that, initially (before giving full mailbox
> rights). Just
> >> >>> granting Send On Behalf and the Send As rights.
> When
> >> >>> they went to Outlook, they clicked From and
> entered the
> >> >>> Support accountm and sent an e-mail.  The e-mail
> again
> >> >>> states 'JoeUser on behalf of Support'.  We have
> even
> >> >>> tried it with two brand new test accounts.
> >> >>
> >> >> Get rid of 'sent on behalf' - grant 'send as' only.
> >> >>>
> >> >>> PS: Your Outlook support team states it is not
> possible
> >> >>> to send mail without the Send On Behalf tag...just
> FYI.
> >> >>
> >> >> Whose Outlook support team?
> >> >>>
> >> >>>
> >> >>>> -----Original Message-----
> >> >>>> Hi,
> >> >>>>
> >> >>>> You need to grant the user "send as" permissions
> for this to
> >> >>>> happen. http://support.microsoft.com/default.aspx?
> scid=kb;en-
> >> >>>> us;327000&Product=exch2k
> >> >>>>
> >> >>>> Leif
> >> >>>>
> >> >>>> "DK" <anonymous@discussions.microsoft.com> skrev
> i en meddelelse
> >> >>>> news:1618d01c41687$88012930$a101280a@phx.gbl...
> >> >>>>> Exchange 2000 (SP3 w/rollup) on Windows 2000
> Server
> >> >>>>> (SP4).  When granting JoeUser the right to Send
> On Behalf
> >> >>>>> of another mailbox, called Support, JoeUser can
> send mail
> >> >>>>> for Support.  That's good.  But, in the e-mail,
> it states
> >> >>>>> JoeUser Sent On Behalf of Support.  Is there any
> way to
> >> >>>>> send the mail as Support without this showing up.
> >> >>>>>
> >> >>>>> This used to work just fine, prior to the
> installation of
> >> >>>>> SP4 for Windows.  Can anyone confirm if this
> >> > possible to
> >> >>>>> accomplish, or did SP3 or SP4 completely remove
> this
> >> >>>>> ability?
> >> >>>>>
> >> >>>>> We have attempted to give JoeUser FULL rights
> over the
> >> >>>>> Support mailbox, but unless the Send On Behalf
> is checked
> >> >>>>> in ADUC, he cannot send mail as Support.  If
> Send On
> >> >>>>> Behalf *is* checked, it attaches the
> statement 'Sent on
> >> >>>>> behalf of' in the e-mail.  Support is a group
> monitored e-
> >> >>>>> mail box that we don't want individuals getting
> their
> >> >>>>> name attached to it.
> >> >>>>>
> >> >>>>> Any ideas at this point would be wonderful.  (Oh
> yeah,
> >> >>>>> client is Outlook 2000, updated SP)
> >> >>>>
> >> >>>>
> >> >>>> .
> >> >>
> >> >>
> >> >> .
> >>
> >>
> >
> >
> >.
> >

Relevant Pages

  • Re: OWA doesnt work for some migrated user E2K3 -> E2K7
    ... Back when we migrated from Exchange 5.5 to Exchange 2003, ... mailbox through OWA and Outlook in Exchange 2003, ... Exchange backup account - full mailbox rights ...
    (microsoft.public.exchange.admin)
  • Re: Access denied to mailboxes with Exchange Full Admin account
    ... Exchange Admins do exactly what they say on the tin. ... User A goes to File, Open, Other Users Mailbox. ... Your account must have ...
    (microsoft.public.exchange.admin)
  • RE: Exchange account - sending but not receiving
    ... Thank you for posting in the SBS newsgroup. ... Does this issue only occur with the specific user account? ... How to Enable Message Tracking in Exchange 2000 Server ... Make sure the specific user's mailbox size does not exceed the ...
    (microsoft.public.windows.server.sbs)
  • Re: LegacyExchangeDN is wrong for a user
    ... The cleanup for a crosslinked account is relatively easy for a single ... IMPORTANT - An Exchange 5.5 object that has been replicated to Active ... mailbox, and any changes on either side will replicate to the ... be deleted after the next ADC replication cycle. ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: Accessing an email account programmatically
    ... right click on the user account for the Exchange Mailbox that you want ... Click on the "Exchange Advanced" tab and then click on the "Exchange Rights" ... An Event Sink can be thought of as a true server side ...
    (microsoft.public.exchange.applications)