"Send as" and SBS Domain Power User

Recently we spent couple of hours trying to figure out why email "Send on
behalf" was appearing as sent by delegating user.
We traced it down to the fact that user was a member of Domain Power Users
group.

It is not clear to me why, but in SBS2003 domain, users that belong to
Domain Power Users group automagically get "Send as" rights on all
mailboxes!
On top of that this right (send as) is NOT visible in any of security
properties on exchange. By default not even Enterprise Admins have "send as"
permissions on exchange.
I have tested above on three different SBS2003 installations.
At this stage we don't know if other privileges get elevated beyond expected
for Domain Power User.
Until we get clear picture why this is happening, I will avoid putting users
into this specific group.

Anyone care to comment?

--
Jan Wakulicz
www.micropol.com.au


.

Loading