Send As and Send on behalf

  I have been told that some users automatically have Send as capability.  Can you 

1. tell me what this is
2. confirm how to enable / disable and
3. explain why it is happening on some systems 

I will get comprehensive details of this when I get a chance next week.  If someone else wants to chip in, please do.

thanks

David

It would appear that Domain admins have explicit 'send as' rights over all users.  This appears to be default behaviour.

This kind of relates to a problem I have been wrestling with. I've posted in Smallbiz and SBSPI but so far nobody has come up with an answer.

A client recently contacted me to say that one of their users has stumbled on the fact that when typing an e-mail they could go to Options and choose the 'From' field and then send the e-mail as if it had come from somebody else on the network. I tried if for myself and its true. There must be some easy way of controlling this. I've looked at trying to turn off that particular field in the registry but I can't pin it down.

Anybody got any ideas?

Tony,

This discussion came about because of your question through Richard at the Partner Group meeting.

To access this control, go to the Active Directory Users and Computers admin tool, go to the view menu and enable the advanced view.  You can now see this ability in the user details when you click on them.

For full details, have a look at the items in the support.microsoft.com knowledge base.  I did a search for "Exchange 2003 send on behalf of" and the top items all seem relevant.

Let me know if these answer your questions on how to set:

http://support.microsoft.com/search/default.aspx?qu=exchange+2003+send+on+behalf+of

If this has been turned on and the guys are NOT admins, let me know.

ttfn

 

David

Hi David

Thanks for that reply, I feel slightly embarrassed. My only excuse is that I didn't set up this network and frankly it was a mess when I took it over. But that doesn't excuse the fact that I had failed to check on how many users were configured as admins on the network (most of them it turns out). The guy in question sending mails as somebody else was, of course, an admin and so were the two users on our internal network that I used to verify the situation. I have now proved satisfactorily that non admins can't do this. They can however try to do it by adding the From field and putting in another users name.

My tack was to take away the ability to make the From field visible but I guess that simply isn't a choice, never mind. Thanks a lot for helping to clear that up and bringing me down from the entirely wrong tree that I was busily barking up!

Paul,

please do not feel embarassed about this - it caused quite a discussion at the WOE Partner Group meeting on the back of your discovery.  I would suggest a quick look in the support.microsoft.com pages in the future as it will point out the nice KB articles that help search things out. (OK, so now off my soap box).

As you say, it does not stop people trying, just from it actually working.

ttfn

David