Re: Mailboxes instead of new users

From: Damian N Leibaschoff [MSFT] (damianl_at_online.microsoft.com)
Date: 11/18/04


Date: Thu, 18 Nov 2004 08:45:45 -0600

Hi,
You are always welcomed to call PSS and open a Exchange security related
case.
Adding the single entry as referenced by the KB article cannot trigger such
behavior, is there a chance that users had Send As rights from before, they
were just never aware? Have you successfully sent an email as another user?
Open the properties of the mailbox store in the Exchange System Manager,
then open the security tab, who has Send As permissions here? Changes at
this level will affect all hosted mailboxes at a global level, that is why I
am looking for that. It is common for an administrator to tweak some
security here to give Admins full access to everyones mailboxes, this is
also changed when there is a need to use Exmerge.

Regards,
Damian

-- 
Damian N. Leibaschoff, MS IST, MCSE
Microsoft Corporation
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
"Makor" <Makor@discussions.microsoft.com> wrote in message 
news:1C80C218-21D2-4EDC-B783-D58BDCEF49E9@microsoft.com...
>I only folllowed the article that you reffered me to -  to add a user to 
>the
> security group for the distribution group and give her "send as" rights. 
> This
> was the first thing I removed when they notified me that all users had all 
> of
> a sudden gotten "send as" rights - and thats when I noticed that there 
> were
> several security groups that had the "send as" option enabled for multiple
> groups now had "send as" priviledges. This is difficult for me to 
> explain -
> can we IM somehow?
>
>
> "Damian N Leibaschoff [MSFT]" wrote:
>
>> Hi,
>> Have you made any permission changes to the Mailbox Store to allow users 
>> to
>> 'send as'?
>> Have you undone the changes you've made? What exact object/s was/were
>> changed?
>>
>> Regards,
>> Damian
>>
>> -- 
>> Damian N. Leibaschoff, MS IST, MCSE
>> Microsoft Corporation
>>
>> Get Secure! - www.microsoft.com/security
>>
>> =====================================================
>>
>> When responding to posts, please "Reply to Group" via
>>
>> your newsreader so that others may learn and benefit
>>
>> from your issue.
>>
>> =====================================================
>>
>> This posting is provided "AS IS" with no warranties, and confers no 
>> rights.
>> "Makor" <Makor@discussions.microsoft.com> wrote in message
>> news:57EFFE29-02A5-4315-B1E7-FE7C936CAA34@microsoft.com...
>> >I have a MAJOR problem now:
>> >
>> > I modified the distribution group to allow a single user to have "send 
>> > as"
>> > rights - and all of a sudden everyone in the domain has "send as" 
>> > rights
>> > on
>> > all email accounts - even ones not associated with this specific
>> > distribution
>> > group.
>> >
>> > Please assist me in walking through a process of how I remove the "send
>> > as"
>> > priviledges from everyone as this is a major risk for the business - 
>> > and
>> > for
>> > my company as the implementor.
>> >
>> > Thank you.
>> >
>> > "Damian N Leibaschoff [MSFT]" wrote:
>> >
>> >> Hi,
>> >> You would have to give Send As permissions to the appropiate accounts 
>> >> on
>> >> the
>> >> distribution group AD object, then would be able to change the FROM 
>> >> field
>> >> on
>> >> a new email in Outlook to the desired SMTP address.
>> >>
>> >> 327000 How to grant "Send as" and "Send on behalf" permissions in
>> >> Exchange
>> >> 2000
>> >> http://support.microsoft.com/?id=327000
>> >>
>> >> Regards,
>> >> Damian
>> >>
>> >> -- 
>> >> Damian N. Leibaschoff, MS IST, MCSE
>> >> Microsoft Corporation
>> >>
>> >> Get Secure! - www.microsoft.com/security
>> >>
>> >> =====================================================
>> >>
>> >> When responding to posts, please "Reply to Group" via
>> >>
>> >> your newsreader so that others may learn and benefit
>> >>
>> >> from your issue.
>> >>
>> >> =====================================================
>> >>
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >> "Makor" <Makor@discussions.microsoft.com> wrote in message
>> >> news:0F539C28-AEAC-4B68-8863-8920191F3A0E@microsoft.com...
>> >> > PERFECT - this was exactly what I was looking for - thank you.
>> >> >
>> >> > Is there a way that users within a distribution group could respond 
>> >> > to
>> >> > an
>> >> > email sent to the group - but with the group email being the FROM
>> >> > address -
>> >> > instead of their personal email?
>> >> >
>> >> > Mark
>> >> >
>> >> > "Damian N Leibaschoff [MSFT]" wrote:
>> >> >
>> >> >> Hi,
>> >> >> You can create a distribution group and give it the desired SMTP
>> >> >> email,
>> >> >> then
>> >> >> you would add the users as members that you want receiving emails 
>> >> >> sent
>> >> >> to
>> >> >> this distribution list.
>> >> >>
>> >> >> 821904 HOW TO: Create a Distribution List (Distribution Group) in
>> >> >> Exchange
>> >> >> http://support.microsoft.com/?id=821904
>> >> >>
>> >> >> Regards,
>> >> >> Damian
>> >> >>
>> >> >> -- 
>> >> >> Damian N. Leibaschoff, MS IST, MCSE
>> >> >> Microsoft Corporation
>> >> >>
>> >> >> Get Secure! - www.microsoft.com/security
>> >> >>
>> >> >> =====================================================
>> >> >>
>> >> >> When responding to posts, please "Reply to Group" via
>> >> >>
>> >> >> your newsreader so that others may learn and benefit
>> >> >>
>> >> >> from your issue.
>> >> >>
>> >> >> =====================================================
>> >> >>
>> >> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> >> rights.
>> >> >> "Makor" <Makor@discussions.microsoft.com> wrote in message
>> >> >> news:67FB91EB-E0C0-414B-B8A1-DFD71A7246C0@microsoft.com...
>> >> >> > Is there a more efficient way to create mailboxes on SBS 2003
>> >> >> > instead
>> >> >> > of
>> >> >> > creating a new user every time? We have mail addresses that are 
>> >> >> > not
>> >> >> > peoples
>> >> >> > addresses - like a sales@  and info@ that we would like to 
>> >> >> > forward
>> >> >> > to
>> >> >> > one
>> >> >> > or
>> >> >> > more users - what is the most efficient way of doing this?
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>> 


Relevant Pages

  • Re: question on distribution Group
    ... OK after getting your email I checked again and checked advanced security. ... So now I can change and add rights to the Distribution Group. ... I have a marketing manager who just asked me to create a email account ...
    (microsoft.public.exchange.admin)
  • Re: Security Groups
    ... In this case Exchange converts group to security based group. ... Microsoft MVP Windows Server - Active Directory ... > users and computers and the distribution group has changed to a SECURITY ...
    (microsoft.public.win2000.active_directory)
  • Re: How to change a security group to a mail group?
    ... I believe this is all possible, as long as it is Exchange 2003. ... both and then add them back on the distribution group. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... members from the group that you don't want to belong. ...
    (microsoft.public.win2000.active_directory)
  • Re: Impossible?
    ... I have been an Exchange administrator in ... Allow members of a Distribution Group, ... Distribution Group - gave SELF Send As and Send To rights, ... gave individual members added one at a time with Send As, ...
    (microsoft.public.exchange.admin)
  • Re: Exchange 2003 with 2003 AD mixed with Exchange 2000 and 2000 AD
    ... But it is impotant to note that Exchange 2000 will not run ... >Find out about Strategic Technology Protection Program ... >> confers no rights. ... >> and get our Security ...
    (microsoft.public.exchange.setup)