June 21, 2016 at 1:55 am #166429
HI I am Running Exchange mailbox on exchange 2007 sp3 environment ; I my environment folks that are members of domain admins group can put anyone’s name in the from field and send email to anyone. I need to prevent this.
I have checked in security tab in the advanced option it says deny send as rights for all domain admins. Highlighted the user and clicked properties and set to deny for “send as”
Still no luck…. If anyone help pls..
OssianModeratorJune 21, 2016 at 2:28 am #191270
Also consider moving to a more recent (and supported) version of Exchange – in 2010 the problem is the reverse: how to over-ride the AdminSDHolder settingsJune 21, 2016 at 10:16 am #347231
Hi Ossian ,
Same has been already tried …but no luck after adding deny permission to domain admin.
joeqwertyModeratorJune 21, 2016 at 4:06 pm #304539
Administrators, by the very nature of their job, have the access and the ability to do the things you’re describing. If they’re misusing that access and ability then you need to set the ground rules for acceptable conduct. If they won’t abide by it then you need to replace them. You’re trying to implement a technical solution to a people problem. Even if you could set this, they could simply undo it. They’re administrators.June 22, 2016 at 9:52 am #347232
Hi Ossian ,
One obvious observation, Deny Permission are getting applied for normal users permanently but for Domain admin deny permission is getting applied for some hour and then same got revoke
i.e. Domain Admin users able to send email to Domain admin users as SEND-AS but same is getting block for normal users.
You must be logged in to reply to this topic.