Do Domain Admins have default rights to send on behalf of and “send as” for other users?

345065 pts.
Tags:
Administration
Exchange Server
Do Domain Admins have default rights to send on behalf of and "send as" for other users? If so, how can i put an end to this?

Answer Wiki

Thanks. We'll let you know when a new response is added.

When Outlook is configured, it asks for the AD username and server. I know that Outlook supports only one Exchange Server account at a time, so you couldn’t add someone else’s email to your existing mail profile.

If a Domain Admin logged into a new Windows profile, or deleted an existing mail profile, then setup Outlook from scratch as another user, then the Domain Admin would get that other users email, synched from the Exchange Server, then they could do anything via Outlook that the actual user could do.

I don’t know if this answers your query.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Racraine1
    The pertinent answer is, no they do not have default rights to send on behalf of. To correct this you have to go into Outlook, click tools/options then click the "delegates tab. There you can add or delete the users you want to give or deny permissions to. If you are still having problems with a Domain Administrator using your account, A) tell a manager or company executive and B) change (or create) a password for the account. Good Luck
    40 pointsBadges:
    report
  • Technochic
    It would also depend on whether domain admins are also in the exchange admins security group and which exchange admin permissions they are assigned. If they are in exchange full administrators or exchange organization administrators and do not need to be, remove them. If they are in that group and they are required to have those permissions to do exchange administration work, then yes they will have send as permissions. Adding them or removing them depends on what version of exchange you are using. Exchange 2007 permissions for exchange admins are added and deleted in exchange management console. 2003 they are added and deleted in ESM through delegation.
    57,010 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following