Mads Krag Dam - Homepage - MadsD.dk

A part of iSites.dk
Home
Blog
My IT
Husband
Family
Games
Pictures
Contact

Exchange 2007 SP2 - Full Access and Send As-rights


Written by: Mads Dam - 13.04.2010 - 0 comments

So, interesting. I see many people have problems with making sure that some users can send e-mails as another user, on behalf of another user, and even access another users mailbox entirely.

There are 3 scenarios here:

  •  You want to let a user send as another user
    (as if the other user themselves sent the e-mail)

  • You want to let a user send on behalf of another user
    (the receiving person sees that it's you sending on behalf of the other

  • You want to give a user full accessrights to another users mailbox
    (The user can access another users mailbox and read all items in it.)

Note that giving a person FullAccessrights is NOT the same as giving them Send-As or SendOnBehalf-permissions!! The user is only able to read the items in the other users mailbox, he/she cannot send e-mails!

 

To give a user FullAccess-rights on another users mailbox, do this in Exchange Management Shell(EMS):

Command:
Add-MailboxPermission "Mailbox" -User "Trusted User" -AccessRights FullAccess

Example:
Add-MailboxPermission "madsd" -User "jesper" -AccessRights FullAccess


This gives Jesper the FullAccess-rights to go open and browse all of my mailbox (but he cannot send e-mail)

Effective: Immediately!

 

To give a user the Send-As permission on another users mailbox, do this in EMS:

Command:
Add-ADPermission "Mailbox" -User "Domain\User" -Extendedrights "Send As"

Example:
Add-ADPermission "madsd" -User "isites\jesper" -Extendedrights "Send As"


This gives jesper the ability to send and e-mail as me, so it'll look as if it's coming directly from me. The recipient won't know Jesper sent it.

Effective: When replication has finished or when MS Exchange Information Store-service has been restarted!

 

To give a user the SendOnBehalf-permission, do this:

Search here (cause I'm too lazy to find out ^^)


Comments



No comments


Write a comment


Name:
Website: *no http://
Comment: