When someone gives another user the necessary permissions to send an email on behalf of him/her, for instance a manager giving his/her secretary the permissions to do so. It’s not possible to find out the identity of the real sender.
We tried this scenario, but in the exchange logs we couldn’t find any trace to the real sender whether it was a MAC address, IP address or anything related. The logs would only contain the IP address of the Exchange server which in this case isn’t relevant.
This is a serious issue if someone could abuse this feature, would you please advise us on how we could identify the real sender.
Any related information to this would be really helpful.
Exchange 2010 , windows 2008
June 7, 2011 7:11 AM
September 4, 2011 7:32 AM