deny "send as" mailbox rights to domain admins

Home Forums Messaging Software Exchange 2007 / 2010 / 2013 deny "send as" mailbox rights to domain admins

This topic contains 4 replies, has 3 voices, and was last updated by Avatar lisa804u 2 years, 11 months ago.

Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • Avatar
    lisa804u
    Member
    #166429

    HI I am Running Exchange mailbox on exchange 2007 sp3 environment ; I my environment folks that are members of domain admins group can put anyone’s name in the from field and send email to anyone. I need to prevent this.
    I have checked in security tab in the advanced option it says deny send as rights for all domain admins. Highlighted the user and clicked properties and set to deny for “send as”
    Still no luck…. If anyone help pls..

    Avatar
    Ossian
    Moderator
    #191270

    Any help?
    https://social.technet.microsoft.com/Forums/exchange/en-US/d2e97e64-536a-4c46-8e57-e0ac6a4ad64e/how-do-i-remove-domain-admins-send-as-settings-for-all-users?forum=exchangesvradminlegacy

    Also consider moving to a more recent (and supported) version of Exchange – in 2010 the problem is the reverse: how to over-ride the AdminSDHolder settings

    Avatar
    lisa804u
    Member
    #347231

    Hi Ossian ,

    Same has been already tried …but no luck after adding deny permission to domain admin.

    Avatar
    joeqwerty
    Moderator
    #304539

    Administrators, by the very nature of their job, have the access and the ability to do the things you’re describing. If they’re misusing that access and ability then you need to set the ground rules for acceptable conduct. If they won’t abide by it then you need to replace them. You’re trying to implement a technical solution to a people problem. Even if you could set this, they could simply undo it. They’re administrators.

    Avatar
    lisa804u
    Member
    #347232

    Hi Ossian ,

    One obvious observation, Deny Permission are getting applied for normal users permanently but for Domain admin deny permission is getting applied for some hour and then same got revoke
    i.e. Domain Admin users able to send email to Domain admin users as SEND-AS but same is getting block for normal users.

Viewing 5 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic.