Wednesday 9 December 2009

Exchange 2007 Manage Send as Permission

Important:  If Wendy Smith needs to send as Bob Brown the permission is set on Bob Brown’s mailbox.

Possible Gotcha: Notice that in the shell command Bob Brown uses the display name and Wendy.Smith uses the logon name

Add send as permission using EMC

Open EMC Under Recipient Configuration and then Mailbox right click on the required mailbox and select Manage Send as Permission

Click Add then select user then OK, Manage and Finish.

You will notice the Security Principal NT AUTHORITY\SELF this is so the user can send from their own mailbox.

Exchange Management Shell command for SBS 2008:
Add-ADPermission -Identity 'CN=Bob Brown,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=sec,DC=local' -User 'SEC\Wendy.Smith’-ExtendedRights 'Send-as'

 

Remove send as permission using EMC

Caution: If you are deleting users do not delete the Security Principal NT AUTHORITY\SELF.

Open EMC Under Recipient Configuration and then Mailbox right click on the required mailbox and select Manage Send as Permission

Click The red Cross to delete a user then Manage and Finish.

Exchange Management Shell command for SBS 2008:
Remove-ADPermission -Identity 'CN=Bob Brown,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=sec,DC=local' -User 'SEC\Wendy.Smith' -InheritanceType 'All' -ExtendedRights 'send-as' -ChildObjectTypes $null -InheritedObjectType $null -Properties $null

No comments:

Post a Comment