Home > IT Answers > Exchange > Do Domain Admins have default rights to send ...
Help

Question

  Asked: Apr 29 2008   3:43 PM GMT
  Asked by: ITKE

Do Domain Admins have default rights to send on behalf of and "send as" for other users?


Exchange Server, Administration

Do Domain Admins have default rights to send on behalf of and "send as" for other users? If so, how can i put an end to this?

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window
Help

Answer Wiki (Improve, edit or add to this answer)

IMPROVE THIS ANSWER
View History
 RATE THIS ANSWER
+1
Click to Vote:
  •   1
  •  0
Last Answered: Apr 29 2008  4:56 PM GMT  by Rweales




When Outlook is configured, it asks for the AD username and server. I know that Outlook supports only one Exchange Server account at a time, so you couldn't add someone else's email to your existing mail profile.

If a Domain Admin logged into a new Windows profile, or deleted an existing mail profile, then setup Outlook from scratch as another user, then the Domain Admin would get that other users email, synched from the Exchange Server, then they could do anything via Outlook that the actual user could do.

I don't know if this answers your query.
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Exchange.

Looking for relevant Exchange Whitepapers? Visit the SearchExchange.com Research Library.


RSS - Discussions Help

Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

Racraine1  |   Apr 29 2008  5:36PM GMT

The pertinent answer is, no they do not have default rights to send on behalf of. To correct this you have to go into Outlook, click tools/options then click the “delegates tab. There you can add or delete the users you want to give or deny permissions to.

If you are still having problems with a Domain Administrator using your account, A) tell a manager or company executive and B) change (or create) a password for the account.
Good Luck

 

Technochic  |   May 21 2008  1:48PM GMT

It would also depend on whether domain admins are also in the exchange admins security group and which exchange admin permissions they are assigned. If they are in exchange full administrators or exchange organization administrators and do not need to be, remove them. If they are in that group and they are required to have those permissions to do exchange administration work, then yes they will have send as permissions. Adding them or removing them depends on what version of exchange you are using. Exchange 2007 permissions for exchange admins are added and deleted in exchange management console. 2003 they are added and deleted in ESM through delegation.