We tend to just use SoBo perms. This gives us a level of tracability.
Generic  accounts are only accessed via main account and never directly.
If access to a mailbox is required, I.E a user is off sick etc then we
get them to fill in a form and state why they want access. This form is
then signed off by the persons line manager and stored.
John

________________________________

From: Sherry Abercrombie [mailto:[EMAIL PROTECTED] 
Sent: 23 October 2008 16:11
To: MS-Exchange Admin Issues
Subject: Re: "Send on behalf of"


It's also very beneficial for resource mailboxes.  

I agree on personal mailboxes, not a good idea.


On Thu, Oct 23, 2008 at 10:06 AM, James Winzenz
<[EMAIL PROTECTED]> wrote:


        I would consider this a handy setting to use only for generic or
dummy accounts, not for actual employees . . . keep in mind, with "send
as" rights, the person sending the email could potentially do so without
the knowledge of the employee he/she has been granted "send as" rights
to.  Is the employee who you are giving someone else "send as" rights OK
with this?  Does he/she understand the implications?  We don't even
allow people full mailbox access to existing employees, let alone send
as rights.  If they want access, we tell them to talk to the employee in
question, and they can grant them delegate rights, including send on
behalf of rights.  Anything else has to go through our corporate legal
and HR departments.  This is just my take - I may be a bit paranoid on
the issue, but you could be drumming up a potential legal issue with
this sort of access.

         

        James Winzenz

        Infrastructure Systems Engineer II - Security

        Pulte Homes Information Services

         

        
________________________________


        From: Ellis, John P. [mailto:[EMAIL PROTECTED] 
        Sent: Thursday, October 23, 2008 7:37 AM 

        To: MS-Exchange Admin Issues
        Subject: RE: "Send on behalf of"

        

         

        Ah ah with you now. Found it! Cheers People.

        It could be  a handy setting to use.

        John

         

        
________________________________


        From: Eric Wittersheim [mailto:[EMAIL PROTECTED] 
        Sent: 23 October 2008 15:34
        To: MS-Exchange Admin Issues
        Subject: RE: "Send on behalf of"

        It's in the Security Tab about half way down in the list.

         

        From: Ellis, John P. [mailto:[EMAIL PROTECTED] 
        Sent: Thursday, October 23, 2008 9:27 AM 
        To: MS-Exchange Admin Issues
        Subject: RE: "Send on behalf of"

         

        Maybe Im being a bit blind here, but ive been to the mailbox
rights tab and cant see Send As. We dont have Blackberries, so we are OK
on that score.

        I can see

        Delete Mailbox Storage

        Read Permissions

        Change Permissions

        Take Ownership

        Full Mailbox access

        Associated External account

         

        We do have an Advanced tab...

         

        Thanks

        John

         

        
________________________________


        From: Sherry Abercrombie [mailto:[EMAIL PROTECTED] 
        Sent: 23 October 2008 14:36
        To: MS-Exchange Admin Issues
        Subject: Re: "Send on behalf of"

        Exchange 2003.  You're not changing this permission in Outlook
or ESM, this is on the actual account properties in ADUC on the Exchange
Advanced tab then click on the Mailbox Rights button and you will see
all kinds of permissions.  This is also where you have to make sure you
BES account has Send As and Receive as permissions for a Blackberry
user.....

        On Thu, Oct 23, 2008 at 8:21 AM, Ellis, John P.
<[EMAIL PROTECTED]> wrote:

        Is this an Exchange 2003 or 2007 feature? If 2003 where does the
option hide?

        We have a user who has SoBo permissions but would like to do SA
permissions....

        John

         

        
________________________________


        From: Sherry Abercrombie [mailto:[EMAIL PROTECTED] 
        Sent: 23 October 2008 14:08 

        
        To: MS-Exchange Admin Issues

        Subject: Re: "Send on behalf of"

        This is a permission that is set on the account properties of
the mailbox account in question, not a setting done in Outlook.  ADUC.

        On Thu, Oct 23, 2008 at 8:02 AM, Don Andrews
<[EMAIL PROTECTED]> wrote:

        I think the permission you want is Send As rather than Send on
Behalf of.
        
        ---------------------------------
        Sent from my BlackBerry Wireless Handheld

        
        ----- Original Message -----
        From: Kevan Dickinson <[EMAIL PROTECTED]>
        To: MS-Exchange Admin Issues
<exchangelist@lyris.sunbelt-software.com>
        Sent: Thu Oct 23 06:29:48 2008
        Subject: "Send on behalf of"
        
        Hi
        
        
        
        We have a user "A" that has send on Behalf of permissions on a
mailbox belonging to User "B". They also have full access to the
mailbox.
        
        
        
        When they send an outbound email and change the "From" to the
user "B" they have permission to send on behalf of the email says
        
        
        
        From User "A" sent on behalf of User B.
        
        
        
        WE would like the email to look as if it has just come from User
"B".
        
        
        
        It used to say this until a recent migration of both mailboxes
to a new exchange server.
        
        
        
        Can anyone please point me in the right direction.
        
        
        
        Regards
        
        
        
        Kevan Dickinson
        
        Network Manager
        
        NSF-CMI
        
        23 Lodge Road
        
        Hanborough Business Park, Long Hanborough,
        
        Oxford, OX29 8SJ, UK
        
        
        
        T:+44 01993 885661
        
        E:[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]> 
        
        W:www.nsf-cmi.com
        
        
        
        
        
        
        
        
        
        

        ~ Ninja Email Security with Cloudmark Spam Engine Gets Image
Spam ~
        ~             http://www.sunbeltsoftware.com/Ninja
~

        
        
        
        -- 
        Sherry Abercrombie
        
        "Any sufficiently advanced technology is indistinguishable from
magic." 
        Arthur C. Clarke

         

        
********************************************************************** 

        This email and any files transmitted with it are confidential
and 

        intended solely for the use of the individual or entity to whom
they 

        are addressed. If you have received this email in error please
notify 

        the system manager. 

        This footnote also confirms that this email message has been
swept by 

        MIMEsweeper for the presence of computer viruses. 

        www.clearswift.com 

        
********************************************************************** 

         

         

        
        
        
        -- 
        Sherry Abercrombie
        
        "Any sufficiently advanced technology is indistinguishable from
magic." 
        Arthur C. Clarke

         

         

         

         

         

         

         


        CONFIDENTIALITY NOTICE:  This email may contain confidential and
privileged material for the sole use of the intended recipient(s).  Any
review, use, distribution or disclosure by others is strictly
prohibited.  If you have received this communication in error, please
notify the sender immediately by email and delete the message and any
file attachments from your computer.  Thank you.


         




-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic." 
Arthur C. Clarke


 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~             http://www.sunbeltsoftware.com/Ninja                ~

Reply via email to